Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/17_anoaX0Szv2B8u3aufgOWEkIk.roa
File: 17_anoaX0Szv2B8u3aufgOWEkIk.roa (raw, json)
Hash identifier: UBfQJExyezrhkwr7nmGaRvYXDhA0AzuFZ5/3NeyOm7c=
Subject key identifier: D7:BF:DA:9E:86:97:D1:2C:EF:D8:1F:2E:DD:AB:9F:80:E5:84:90:89
Certificate issuer: /CN=3474210c28413e26284822abe83ad6d7c0f764fa
Certificate serial: 018CC500E4E79BD81C785AF1C6413FC2A155
Authority key identifier: 34:74:21:0C:28:41:3E:26:28:48:22:AB:E8:3A:D6:D7:C0:F7:64:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NHQhDChBPiYoSCKr6DrW18D3ZPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/17_anoaX0Szv2B8u3aufgOWEkIk.roa
Signing time: Mon 01 Jan 2024 12:30:19 +0000
ROA not before: Mon 01 Jan 2024 12:30:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203
IP address blocks: 185.161.233.0/24 maxlen: 24
185.161.234.0/24 maxlen: 24
185.161.235.0/24 maxlen: 24
185.68.44.0/24 maxlen: 24
185.68.46.0/24 maxlen: 24
185.68.47.0/24 maxlen: 24
185.68.45.0/24 maxlen: 24
91.206.21.0/24 maxlen: 24
91.206.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/NHQhDChBPiYoSCKr6DrW18D3ZPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 19:51:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:e4:e7:9b:d8:1c:78:5a:f1:c6:41:3f:c2:a1:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3474210c28413e26284822abe83ad6d7c0f764fa
Validity
Not Before: Jan 1 12:30:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d7bfda9e8697d12cefd81f2eddab9f80e5849089
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:26:64:cf:d5:c9:9d:26:0e:11:6e:11:b0:f5:
fe:c1:02:6a:d8:62:71:ce:d3:f2:a7:ac:17:cf:d5:
05:49:3b:9e:9b:a1:74:aa:ea:3e:3a:53:3a:dc:2e:
e4:ad:b1:ea:c0:5f:be:65:ef:22:90:22:8b:f7:81:
ab:84:2e:10:0c:bd:51:cc:32:17:e6:33:ee:cb:66:
8c:99:5f:92:ad:6e:8b:50:42:84:98:15:ac:bb:21:
01:0b:52:9f:72:6a:4d:de:2f:fa:b3:8b:52:2a:13:
ff:b5:80:35:22:8f:36:75:15:86:dc:aa:db:d6:72:
ca:b2:46:c4:1c:56:45:32:66:59:23:28:ee:f7:cb:
51:bd:4a:4d:c0:13:3c:7a:81:37:8d:e5:f6:d0:af:
25:15:33:bc:e8:15:8f:21:25:e4:21:bf:46:ab:85:
f0:68:e3:fa:be:28:1c:66:db:59:c3:25:da:90:22:
89:bd:1e:f8:05:88:c7:43:5a:bc:e4:0b:f1:e1:04:
6c:0d:6a:ee:ee:41:35:3e:a7:0a:a4:43:ff:f6:47:
35:bc:e3:d1:3b:42:21:ac:4a:89:10:3d:05:ee:18:
a7:8e:ec:41:23:39:cd:e0:de:74:14:47:80:43:3a:
11:17:61:e5:68:f7:db:90:90:e6:23:be:9a:b9:b3:
ff:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:BF:DA:9E:86:97:D1:2C:EF:D8:1F:2E:DD:AB:9F:80:E5:84:90:89
X509v3 Authority Key Identifier:
keyid:34:74:21:0C:28:41:3E:26:28:48:22:AB:E8:3A:D6:D7:C0:F7:64:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHQhDChBPiYoSCKr6DrW18D3ZPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/17_anoaX0Szv2B8u3aufgOWEkIk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.206.20.0/23
185.68.44.0/22
185.161.233.0-185.161.235.255
Signature Algorithm: sha256WithRSAEncryption
0e:5f:60:e5:b5:34:9e:c7:8b:7e:4c:5c:0f:72:51:ae:9d:64:
dd:e3:0c:50:e3:40:e5:6f:b3:9e:b3:cd:d2:36:3e:bf:f9:bd:
9b:fe:cb:23:75:65:95:5d:e6:d5:e1:25:86:74:37:b7:ab:c5:
7f:70:2e:6c:1e:ed:cc:56:c9:af:9b:8b:16:16:31:fd:ca:fa:
8c:c6:ea:24:23:2b:38:d0:ec:aa:77:d1:f5:2c:7b:a5:fc:f4:
50:9a:f2:5d:cf:9c:e5:ba:cf:27:3e:63:c6:05:26:fc:c1:5c:
c3:a1:91:48:65:93:74:7c:df:ab:2d:65:d2:c8:78:ea:30:07:
58:7e:34:1b:87:64:9d:d2:5d:b4:d0:a2:53:e1:56:f7:a2:7b:
72:84:e3:1c:fa:29:9d:4d:0f:4d:bd:17:b6:e8:51:d8:3b:bb:
6d:ce:bb:47:f1:06:db:d0:e1:22:c2:a3:85:9e:60:2f:30:95:
00:ab:da:ae:dd:9b:ac:ae:be:a9:36:ec:cf:c7:f4:f1:a0:25:
6f:7a:e2:e9:d4:f8:a3:97:69:64:b8:18:cc:20:23:45:ea:00:
26:f7:7a:c8:7c:17:98:bf:ec:8c:21:05:fd:f8:1a:40:83:65:
51:01:b2:d1:3c:4f:79:78:21:bd:cc:01:d9:bb:eb:c4:76:ea:
3b:4f:6d:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 00:54:37 2024 by rpki-client on console-ams.rpki-client.org