Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/cd504a-0189-4554-b501-639dc4d5f370/1/4Hor4kxSENCP8-_Vo9k5yU1uU1s.roa
File: 4Hor4kxSENCP8-_Vo9k5yU1uU1s.roa (raw, json)
Hash identifier: IwkubWuBTYakpLwOJDAE02Ri3SqlzyWG512qAnEfALY=
Subject key identifier: E0:7A:2B:E2:4C:52:10:D0:8F:F3:EF:D5:A3:D9:39:C9:4D:6E:53:5B
Certificate issuer: /CN=33339e64a58514c9b091e9b2e68e29371e43e3df
Certificate serial: 018CC493442F337112B5F30E76992AC3411A
Authority key identifier: 33:33:9E:64:A5:85:14:C9:B0:91:E9:B2:E6:8E:29:37:1E:43:E3:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MzOeZKWFFMmwkemy5o4pNx5D498.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/cd504a-0189-4554-b501-639dc4d5f370/1/4Hor4kxSENCP8-_Vo9k5yU1uU1s.roa
Signing time: Mon 01 Jan 2024 10:30:34 +0000
ROA not before: Mon 01 Jan 2024 10:30:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206077
IP address blocks: 185.196.253.0/24 maxlen: 24
185.196.252.0/23 maxlen: 23
185.196.252.0/22 maxlen: 22
185.196.252.0/24 maxlen: 24
185.196.254.0/23 maxlen: 23
185.196.255.0/24 maxlen: 24
185.196.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/cd504a-0189-4554-b501-639dc4d5f370/1/MzOeZKWFFMmwkemy5o4pNx5D498.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/cd504a-0189-4554-b501-639dc4d5f370/1/MzOeZKWFFMmwkemy5o4pNx5D498.mft
rsync://rpki.ripe.net/repository/DEFAULT/MzOeZKWFFMmwkemy5o4pNx5D498.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 19 Jun 2024 13:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:44:2f:33:71:12:b5:f3:0e:76:99:2a:c3:41:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33339e64a58514c9b091e9b2e68e29371e43e3df
Validity
Not Before: Jan 1 10:30:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e07a2be24c5210d08ff3efd5a3d939c94d6e535b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:d1:d1:97:18:2c:13:a3:cf:9e:04:4a:d8:98:
0f:17:88:ea:f8:4a:f9:2c:86:73:89:06:6a:02:e8:
74:52:2c:ea:9d:46:28:d1:42:c6:ee:a9:23:ec:c0:
84:e1:07:09:ec:4f:f7:ac:71:3f:7e:d4:b3:f6:53:
3d:0c:41:7a:85:21:54:08:f0:67:a0:4f:15:78:95:
e5:56:31:da:8d:a7:4a:e3:29:fa:46:73:f6:29:df:
f3:52:31:6d:09:19:0a:6c:40:41:6d:bf:ec:7b:95:
fd:fe:5e:41:7f:ac:26:b8:66:4f:a1:c3:68:45:c9:
4c:59:9c:69:cb:a0:e4:7c:48:38:21:a2:91:91:45:
65:11:3e:42:51:b2:ab:73:a8:8f:4d:25:06:ba:e2:
b5:8b:49:dd:34:17:09:8e:21:b8:92:92:2b:e8:1c:
69:d9:6e:8f:7b:54:48:26:10:b1:0f:68:59:1b:fd:
f1:c0:88:a3:bc:b9:2c:35:88:f5:03:1d:96:65:8f:
ed:2e:60:88:d8:25:6e:51:63:c3:35:ed:71:f6:ef:
96:a4:7d:db:0e:98:8e:51:0e:2b:84:6c:de:55:69:
bd:b3:ad:4d:47:7a:28:96:8e:c6:38:7c:f4:88:3f:
ad:8b:ad:97:e3:cf:8d:3b:ca:f9:92:27:12:8d:61:
81:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:7A:2B:E2:4C:52:10:D0:8F:F3:EF:D5:A3:D9:39:C9:4D:6E:53:5B
X509v3 Authority Key Identifier:
keyid:33:33:9E:64:A5:85:14:C9:B0:91:E9:B2:E6:8E:29:37:1E:43:E3:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzOeZKWFFMmwkemy5o4pNx5D498.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/cd504a-0189-4554-b501-639dc4d5f370/1/4Hor4kxSENCP8-_Vo9k5yU1uU1s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/cd504a-0189-4554-b501-639dc4d5f370/1/MzOeZKWFFMmwkemy5o4pNx5D498.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.196.252.0/22
Signature Algorithm: sha256WithRSAEncryption
3a:99:70:ab:ba:42:7b:03:df:fb:95:7f:f7:de:0f:a5:51:f8:
a3:ea:7c:fc:bc:ce:1f:06:c1:68:b7:04:89:75:4d:29:f3:25:
5b:e8:6e:67:1b:36:8c:7d:cb:c6:6c:78:fc:7a:97:eb:ff:dc:
3d:a7:57:6b:7f:d1:c7:5e:9d:3a:6e:66:3b:b3:0e:58:68:9c:
b2:c6:70:09:b5:65:5d:b4:5e:2d:45:3e:9f:d4:cd:dd:d2:76:
63:d7:c8:e4:43:16:f0:e6:b5:7d:6f:e3:f4:a3:92:b4:50:d2:
a2:bd:d1:2f:6f:0f:17:df:11:e8:bb:e9:f6:f9:fe:c2:ae:ab:
8f:78:f5:f3:98:4d:cf:31:11:23:28:a7:dc:1c:7c:48:7d:48:
d6:c8:59:ba:b7:4c:fe:44:19:51:1c:fe:9c:01:6f:6c:f5:d6:
f4:fb:a1:a5:d1:81:7e:8c:da:90:81:c4:50:c8:36:42:51:f1:
b8:82:ba:c4:2e:c6:da:df:d1:ab:ca:d2:32:f5:0f:83:3e:c0:
79:d9:22:e0:a2:75:b5:e4:fd:fc:07:bf:fc:82:75:42:97:dc:
f0:07:9f:45:d7:c8:c9:4f:08:31:b3:ca:d0:7d:3c:dd:73:c0:
50:3d:0a:1e:02:15:a5:d7:35:a8:57:8f:b6:51:f4:98:eb:bf:
11:54:a9:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 18 16:53:08 2024 by rpki-client on console-fra.rpki-client.org