Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/10ea98-78bf-4897-9756-83f156c7ef92/1/L1NYxU14dX-fLnuwPUoN2gXb8Dc.roa
File: L1NYxU14dX-fLnuwPUoN2gXb8Dc.roa (raw, json)
Hash identifier: 1mUlgUGl+u1QEmT6ouz9lLzhyMCZOc1PqnIgF9EnDDs=
Subject key identifier: 2F:53:58:C5:4D:78:75:7F:9F:2E:7B:B0:3D:4A:0D:DA:05:DB:F0:37
Certificate issuer: /CN=b8f7f24de3a9e52c94c6ca680312441dd9c08804
Certificate serial: 018CC64B70B3A45FC8A7E31841688EA0334B
Authority key identifier: B8:F7:F2:4D:E3:A9:E5:2C:94:C6:CA:68:03:12:44:1D:D9:C0:88:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uPfyTeOp5SyUxspoAxJEHdnAiAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/10ea98-78bf-4897-9756-83f156c7ef92/1/L1NYxU14dX-fLnuwPUoN2gXb8Dc.roa
Signing time: Mon 01 Jan 2024 18:31:21 +0000
ROA not before: Mon 01 Jan 2024 18:31:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20530
IP address blocks: 185.196.15.0/24 maxlen: 24
185.196.12.0/24 maxlen: 24
185.196.13.0/24 maxlen: 24
185.1.103.0/24 maxlen: 24
2001:7f8:49:1::/64 maxlen: 64
2001:7f8:49::/48 maxlen: 64
2001:7f8:49::/64 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/10ea98-78bf-4897-9756-83f156c7ef92/1/uPfyTeOp5SyUxspoAxJEHdnAiAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/10ea98-78bf-4897-9756-83f156c7ef92/1/uPfyTeOp5SyUxspoAxJEHdnAiAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/uPfyTeOp5SyUxspoAxJEHdnAiAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:70:b3:a4:5f:c8:a7:e3:18:41:68:8e:a0:33:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8f7f24de3a9e52c94c6ca680312441dd9c08804
Validity
Not Before: Jan 1 18:31:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2f5358c54d78757f9f2e7bb03d4a0dda05dbf037
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e8:21:45:87:f1:a5:fe:0f:fe:6a:75:0f:ad:
e4:8c:21:69:9c:12:8b:6e:d7:66:8e:c1:7e:33:33:
c5:6b:42:d8:31:fb:9a:76:b2:25:68:96:a1:ba:55:
fe:17:02:c0:46:95:ca:1e:7b:ad:d4:b3:f1:c2:cf:
38:6d:d3:97:52:98:d1:7a:5b:c1:30:68:ac:04:74:
5d:cf:64:c4:77:1c:c4:98:dd:df:3b:a7:d8:99:4c:
67:7d:cd:23:ae:06:e0:f6:b0:7e:8c:f9:e4:ab:5f:
38:a6:45:8c:38:e1:26:46:1e:ae:60:c5:17:c9:6b:
70:3c:96:6d:19:a8:ef:cb:39:1a:8f:07:1e:82:d0:
c8:fe:10:e9:54:c2:0d:d0:45:7d:53:ec:9c:74:a9:
13:ab:ad:93:4e:fd:e6:dd:88:7d:d2:65:fb:67:cf:
6b:85:87:ee:50:91:21:07:03:9d:ad:a9:39:12:58:
df:87:96:3b:3e:9c:23:3e:d1:02:a6:49:ab:5a:6b:
fd:23:74:b0:b1:cf:d0:54:ff:40:5f:75:d5:30:82:
81:ad:9b:f7:04:58:f1:69:9d:a1:2b:30:5e:34:b7:
e6:47:5f:3d:59:73:74:9c:45:b9:f0:46:d8:ff:d5:
81:79:f8:c9:14:f4:85:0c:a3:a9:46:f4:cb:cf:46:
f4:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:53:58:C5:4D:78:75:7F:9F:2E:7B:B0:3D:4A:0D:DA:05:DB:F0:37
X509v3 Authority Key Identifier:
keyid:B8:F7:F2:4D:E3:A9:E5:2C:94:C6:CA:68:03:12:44:1D:D9:C0:88:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uPfyTeOp5SyUxspoAxJEHdnAiAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/10ea98-78bf-4897-9756-83f156c7ef92/1/L1NYxU14dX-fLnuwPUoN2gXb8Dc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/10ea98-78bf-4897-9756-83f156c7ef92/1/uPfyTeOp5SyUxspoAxJEHdnAiAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.1.103.0/24
185.196.12.0/23
185.196.15.0/24
IPv6:
2001:7f8:49::/48
Signature Algorithm: sha256WithRSAEncryption
0e:e8:83:2c:b0:d3:76:ec:3d:40:47:d4:62:0c:35:d4:2e:93:
0b:c9:d5:5a:32:20:ff:69:4e:93:02:4c:e9:67:af:b4:2f:34:
49:e5:e2:89:52:81:1a:54:b8:21:e3:37:a2:46:95:34:00:ad:
dd:0e:c1:17:47:da:8c:bf:c0:a1:d0:47:91:10:83:94:f4:b3:
90:d6:7e:66:e7:e4:2d:35:cd:95:55:9a:71:a2:d4:50:93:c4:
a0:2b:ec:ad:64:88:ec:8b:36:42:36:0a:f6:80:ab:1d:20:0a:
80:95:f9:1f:7b:a4:ba:42:9e:ec:44:fd:b0:38:a4:aa:84:82:
4b:91:0e:b6:f5:85:35:86:27:ce:f1:e0:58:f0:61:0e:bb:44:
6a:1e:c0:1a:ed:06:89:c2:9e:0f:dd:df:ee:31:d5:fc:73:73:
98:8e:4c:3e:d1:3b:46:c2:ae:3f:3b:39:8b:ca:a1:fa:8c:c0:
93:a7:c1:23:af:0f:ef:5a:6b:b5:e8:02:08:8c:99:1e:9b:5f:
ed:1f:56:98:77:85:a2:76:e8:48:bb:c0:6f:24:88:ab:9c:5e:
d4:0e:a5:72:3b:53:3e:c0:57:1b:66:59:cc:ae:61:51:99:58:
81:1d:d4:8f:b6:8b:1d:90:ca:06:c4:e3:ac:a8:95:77:8b:f6:
0b:e3:e7:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 22:34:33 2024 by rpki-client on console-ams.rpki-client.org