Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/aZ5bJ987CVlPnZWGkF8e-dhHRlc.roa
File: aZ5bJ987CVlPnZWGkF8e-dhHRlc.roa (raw, json)
Hash identifier: zijKK/hO4v/Ni4oORA/UjVCEArWxZUixYxdkLkrTNuY=
Subject key identifier: 69:9E:5B:27:DF:3B:09:59:4F:9D:95:86:90:5F:1E:F9:D8:47:46:57
Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial: 018CC26D3B35E74AA2DA8DFDAF1BC81991BC
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/aZ5bJ987CVlPnZWGkF8e-dhHRlc.roa
Signing time: Mon 01 Jan 2024 00:29:47 +0000
ROA not before: Mon 01 Jan 2024 00:29:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210110
IP address blocks: 185.145.244.0/24 maxlen: 24
2a0e:aa07:e02f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.mft
rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 09:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:3b:35:e7:4a:a2:da:8d:fd:af:1b:c8:19:91:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Validity
Not Before: Jan 1 00:29:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=699e5b27df3b09594f9d9586905f1ef9d8474657
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:fe:eb:5f:19:68:04:6e:49:6a:79:9d:00:bc:
1c:42:2d:3f:af:c4:49:d7:cd:d7:4a:7e:01:d6:4a:
e7:23:d6:45:fe:56:76:ad:24:87:d9:f8:33:f6:56:
1c:f1:85:01:1b:19:b8:7a:6d:0e:5e:7f:6c:52:eb:
7c:b0:7c:81:2a:ae:3c:4e:bb:61:5a:9b:3c:8b:d4:
e5:a0:e8:69:47:3a:cf:40:60:ef:14:02:31:09:27:
5c:dc:bf:85:5e:a6:90:1c:90:91:d7:09:7c:8b:d4:
9f:68:b7:5f:3d:83:3b:0c:8f:84:4f:5e:1c:9f:5b:
57:54:14:1d:88:04:d1:6c:5d:f2:5e:19:fd:bf:65:
95:40:ba:29:1f:d0:8d:e7:b1:28:86:9f:75:5b:63:
6a:7f:1a:c9:09:57:e8:e1:96:90:b4:0e:01:83:ac:
68:9e:6d:48:28:04:ac:d3:1e:92:68:e2:0b:98:e2:
02:79:43:0f:37:a8:a7:5b:b9:cb:fa:73:1d:58:4e:
02:71:6d:a5:74:5c:08:b6:34:e8:59:d9:0e:9e:5b:
af:32:bf:da:2c:26:bb:4f:de:26:fd:d3:8f:d9:4e:
b7:02:bd:73:65:43:2d:79:51:3c:ca:fb:de:15:7c:
8f:0a:23:5a:5b:cf:27:ad:3d:54:02:71:b4:6f:2f:
6d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:9E:5B:27:DF:3B:09:59:4F:9D:95:86:90:5F:1E:F9:D8:47:46:57
X509v3 Authority Key Identifier:
keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/aZ5bJ987CVlPnZWGkF8e-dhHRlc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.145.244.0/24
IPv6:
2a0e:aa07:e02f::/48
Signature Algorithm: sha256WithRSAEncryption
94:5d:79:c8:76:6f:06:1e:dd:b8:9a:c2:10:6e:07:cc:a4:f0:
d8:5f:c5:90:7c:f0:e6:7e:15:5a:29:7e:02:6a:42:c8:c1:bb:
dc:ce:75:a0:9c:06:ae:89:09:29:3b:b4:23:e3:5d:81:53:14:
a0:85:02:bc:13:7b:76:fd:2a:fa:c5:c6:a4:63:02:03:d7:d9:
87:06:db:1c:ff:86:fb:98:9a:03:12:c9:ff:11:99:37:1d:a8:
4f:59:d9:c5:77:e2:b8:d8:1f:d6:8b:dc:d9:00:34:2b:e6:6b:
16:07:45:e7:29:42:28:3c:c4:c3:bf:c8:43:10:8d:13:f1:8d:
40:bd:30:79:13:22:c8:aa:55:5d:7e:3f:83:08:2d:57:09:cb:
6c:b0:b4:1e:07:56:f2:1c:b0:b1:06:54:11:57:33:35:20:a3:
eb:62:d8:fd:b9:85:cf:59:e7:ca:9f:69:d3:a9:0e:94:08:33:
2b:63:75:12:5b:04:d6:65:1a:17:0a:0f:5e:06:d7:0f:22:20:
76:63:43:da:77:a6:de:a7:33:fd:d2:e0:d7:51:65:2c:b8:71:
9e:c6:5c:e3:99:f9:89:48:7c:e7:2d:20:e2:d2:09:71:de:cf:
fc:5f:fe:80:92:34:23:fb:e6:c7:9f:cc:48:1e:26:04:af:74:
85:0c:c8:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 18:35:15 2024 by rpki-client on console-fra.rpki-client.org