Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/usM4Y9onnDLVuS_d1nTn0M8J7tA.roa
File: usM4Y9onnDLVuS_d1nTn0M8J7tA.roa (raw, json)
Hash identifier: Fb6cDe6LOWRNH5xXB1oTDHD9372kP6VnxZHZApT6NyQ=
Subject key identifier: BA:C3:38:63:DA:27:9C:32:D5:B9:2F:DD:D6:74:E7:D0:CF:09:EE:D0
Certificate issuer: /CN=48e06a351a5189bcdc44840948dbfb40abf58be5
Certificate serial: 018CC64A87D70F5ADABA31B5BC86A6CC3167
Authority key identifier: 48:E0:6A:35:1A:51:89:BC:DC:44:84:09:48:DB:FB:40:AB:F5:8B:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SOBqNRpRibzcRIQJSNv7QKv1i-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/usM4Y9onnDLVuS_d1nTn0M8J7tA.roa
Signing time: Mon 01 Jan 2024 18:30:22 +0000
ROA not before: Mon 01 Jan 2024 18:30:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57811
IP address blocks: 188.64.85.0/24 maxlen: 24
188.64.80.0/23 maxlen: 23
188.64.82.0/24 maxlen: 24
188.64.83.0/24 maxlen: 24
188.64.84.0/24 maxlen: 24
188.64.86.0/24 maxlen: 24
188.64.87.0/24 maxlen: 24
185.73.211.0/24 maxlen: 24
2a00:8dc0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/SOBqNRpRibzcRIQJSNv7QKv1i-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/SOBqNRpRibzcRIQJSNv7QKv1i-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/SOBqNRpRibzcRIQJSNv7QKv1i-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:87:d7:0f:5a:da:ba:31:b5:bc:86:a6:cc:31:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48e06a351a5189bcdc44840948dbfb40abf58be5
Validity
Not Before: Jan 1 18:30:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bac33863da279c32d5b92fddd674e7d0cf09eed0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ef:3e:79:ac:a7:13:6f:e7:31:19:1b:af:6e:
f1:50:e2:9c:15:0d:77:0a:38:9e:87:a3:79:b3:1d:
9b:c7:fb:81:55:bf:39:19:a3:86:2a:60:88:bf:c4:
0e:d4:f2:54:1e:8f:7a:af:16:ab:40:ba:9c:7b:d1:
c2:8b:b6:25:f4:de:24:f5:1c:5c:76:0d:57:c8:cc:
f0:c9:56:24:a0:5b:09:11:e6:03:be:88:b8:de:68:
01:24:38:e5:41:38:35:c6:d3:64:89:05:6c:36:aa:
16:e7:dc:f6:73:17:a3:c7:fe:05:97:54:41:0e:77:
df:37:fb:0e:b5:b1:d2:37:db:ef:7b:5c:fa:b9:36:
d5:f4:aa:6b:b5:d0:05:f7:92:a1:dc:54:74:3e:9c:
6f:98:a9:ef:c0:f7:12:2c:76:5f:fe:c4:5a:1d:6f:
be:09:d7:86:b8:07:fb:6c:0d:6f:0d:37:2d:a5:46:
08:7e:cc:1d:ad:91:be:ff:58:c4:8c:65:7f:54:1d:
55:b0:16:fa:44:e9:fa:5f:54:ab:b1:72:5e:bc:b2:
c9:df:7c:b9:cf:7a:21:e6:1d:ab:88:70:84:18:aa:
6b:d1:54:33:ce:e9:20:e4:05:1e:eb:f2:c3:66:03:
5a:33:bf:99:cd:ab:02:be:5b:c3:6a:18:a2:ab:07:
6a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:C3:38:63:DA:27:9C:32:D5:B9:2F:DD:D6:74:E7:D0:CF:09:EE:D0
X509v3 Authority Key Identifier:
keyid:48:E0:6A:35:1A:51:89:BC:DC:44:84:09:48:DB:FB:40:AB:F5:8B:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SOBqNRpRibzcRIQJSNv7QKv1i-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/usM4Y9onnDLVuS_d1nTn0M8J7tA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/SOBqNRpRibzcRIQJSNv7QKv1i-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.73.211.0/24
188.64.80.0/21
IPv6:
2a00:8dc0::/32
Signature Algorithm: sha256WithRSAEncryption
3c:f9:b7:01:21:fc:ab:ba:5d:33:61:8d:3b:7a:33:d3:44:26:
db:15:e0:f1:60:a4:86:ae:d0:f6:0b:97:9b:27:2c:a2:e6:e2:
16:e0:2f:fe:59:dc:31:d1:c6:2e:78:04:54:df:b1:56:5b:e0:
01:b9:70:c6:74:1b:7f:74:ca:d7:ff:ac:c6:f1:99:21:0b:55:
0f:ae:4c:76:a8:9c:26:57:75:85:2d:36:ee:66:1c:a9:ca:af:
dd:d9:f8:55:59:48:da:c9:1d:e3:42:a4:1d:9f:21:dc:32:b7:
ce:ca:91:a1:0a:24:d2:de:40:28:d7:53:76:3f:ea:84:64:2f:
2c:93:4e:49:16:6a:1a:88:54:51:1e:a2:00:27:6c:12:2d:18:
d2:d6:13:f8:dd:97:c8:82:2e:e7:5a:53:74:10:1a:57:6e:f2:
58:5a:af:c6:28:98:3c:0d:4b:9c:3a:6e:3d:e4:da:8e:ec:ae:
e7:ab:a6:c1:22:7a:01:73:5a:18:4f:6f:c1:d4:f7:94:8f:51:
40:85:45:e5:1f:05:40:a4:89:48:8a:e3:5f:4b:4b:1c:00:c3:
44:60:79:98:25:57:fe:51:56:40:40:69:2c:6e:1b:0a:41:23:
46:69:96:3c:fd:bb:7c:ae:2b:eb:e6:9f:34:d3:9c:d8:d6:5e:
34:8b:75:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 08:49:21 2024 by rpki-client on console-ams.rpki-client.org