Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/b1b41d-d886-442a-9524-8c56d8fe17b5/1/DAK0Ho_XnLsPqZAhfOsaOPGS4Y4.roa
File: DAK0Ho_XnLsPqZAhfOsaOPGS4Y4.roa (raw, json)
Hash identifier: uV6SfJ0lgIjONEO1uPSBOHlMMlwfDrN/EsDJKUwk34c=
Subject key identifier: 0C:02:B4:1E:8F:D7:9C:BB:0F:A9:90:21:7C:EB:1A:38:F1:92:E1:8E
Certificate issuer: /CN=1474b6fc67b6b90db311c61fc0e3a9c752833c56
Certificate serial: 018CC425607CB76E7CB6F4D41E53A48C5782
Authority key identifier: 14:74:B6:FC:67:B6:B9:0D:B3:11:C6:1F:C0:E3:A9:C7:52:83:3C:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/b1b41d-d886-442a-9524-8c56d8fe17b5/1/DAK0Ho_XnLsPqZAhfOsaOPGS4Y4.roa
Signing time: Mon 01 Jan 2024 08:30:32 +0000
ROA not before: Mon 01 Jan 2024 08:30:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48847
IP address blocks: 185.127.181.0/24 maxlen: 24
185.127.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/b1b41d-d886-442a-9524-8c56d8fe17b5/1/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/b1b41d-d886-442a-9524-8c56d8fe17b5/1/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.mft
rsync://rpki.ripe.net/repository/DEFAULT/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 10 May 2024 01:03:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:60:7c:b7:6e:7c:b6:f4:d4:1e:53:a4:8c:57:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1474b6fc67b6b90db311c61fc0e3a9c752833c56
Validity
Not Before: Jan 1 08:30:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0c02b41e8fd79cbb0fa990217ceb1a38f192e18e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ac:c6:14:05:d2:ff:6e:b8:87:17:a4:2f:58:
3d:c8:b6:8d:bf:97:a0:5a:99:ae:26:19:da:61:24:
41:50:ca:14:16:09:af:b3:93:83:eb:20:82:db:2e:
65:af:89:48:ba:58:d8:46:f5:d6:8d:8b:48:5a:b2:
a0:15:9e:6b:e7:1c:49:c8:72:19:3d:03:35:ee:13:
af:1a:27:54:33:66:e0:a7:02:64:de:b3:e8:20:1b:
f0:3d:e3:1f:cf:9f:06:d6:e7:63:2e:b0:94:f3:fb:
54:6d:9e:9b:8d:39:3e:ee:e7:e1:1e:34:bd:bf:9e:
f8:10:cf:74:53:81:b3:40:e4:af:5c:b7:90:a0:67:
ee:3c:a4:bb:ab:79:61:3c:e6:98:86:54:73:da:ab:
4e:cb:2d:1a:7a:f7:ce:84:ad:75:35:5b:a4:3b:f6:
6f:6f:8b:8e:2e:30:e7:2a:b8:50:c3:e4:3e:d3:75:
bd:c4:36:b5:ac:8c:17:d4:7b:09:bb:4e:67:17:17:
7f:f6:86:61:69:5b:c6:e1:ea:bd:6a:c0:57:cb:45:
5b:a6:ed:93:e4:0f:db:dd:a0:3c:6c:25:c6:e9:fb:
70:b0:40:be:98:1c:94:72:12:0e:21:61:1f:86:c2:
fe:57:60:e8:62:b5:ba:a0:b9:69:f4:82:98:dd:7b:
0f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:02:B4:1E:8F:D7:9C:BB:0F:A9:90:21:7C:EB:1A:38:F1:92:E1:8E
X509v3 Authority Key Identifier:
keyid:14:74:B6:FC:67:B6:B9:0D:B3:11:C6:1F:C0:E3:A9:C7:52:83:3C:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b1b41d-d886-442a-9524-8c56d8fe17b5/1/DAK0Ho_XnLsPqZAhfOsaOPGS4Y4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b1b41d-d886-442a-9524-8c56d8fe17b5/1/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.127.180.0/23
Signature Algorithm: sha256WithRSAEncryption
46:a8:bc:46:4f:21:43:b1:df:8a:9f:83:3b:ad:29:24:66:f2:
9f:3b:1b:9c:b5:33:f0:f7:64:49:8a:47:2b:fd:1e:9d:9a:e9:
9b:f7:fe:04:30:b0:e1:26:35:b4:81:45:ae:3f:f1:aa:4a:fe:
f9:8f:b6:b0:6c:71:8a:68:14:60:f2:7d:f2:59:1d:85:e8:0c:
9d:f4:fa:bc:99:c5:ba:15:42:56:db:8a:3b:4c:a6:e7:38:b4:
c3:a2:0a:45:25:cd:16:50:9f:7c:21:00:17:6c:9f:3a:d9:65:
8d:aa:b9:5d:ce:b5:d3:12:6d:b8:a2:3e:0c:02:b7:51:60:73:
34:1b:08:4a:68:dc:df:f4:50:cb:ee:c2:18:f1:f9:48:9a:53:
85:71:c0:53:f5:c8:75:5c:28:0a:ac:7b:24:7b:f9:5a:c3:fb:
67:d0:6f:f2:ab:4d:60:4d:d4:f5:be:e5:a5:4a:08:73:97:88:
86:a5:62:03:0d:78:31:9b:38:08:bb:41:44:0b:77:a0:b4:41:
8a:94:21:27:e3:1c:df:8d:5d:ed:ca:28:0c:4a:a7:c7:61:61:
6d:99:c8:0a:cb:bc:ae:79:93:32:64:76:02:f0:4e:2d:51:0c:
29:39:5f:e0:81:d1:5c:d2:3d:15:68:09:97:a9:ed:ea:86:b2:
a8:1e:af:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 05:38:27 2024 by rpki-client on console-fra.rpki-client.org