Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/b4a477-08a2-4e8c-8c4d-010cd9079abf/1/f-OwP7-2k-RwS4IlVpqo999QRro.roa
File: f-OwP7-2k-RwS4IlVpqo999QRro.roa (raw, json)
Hash identifier: IoLz3pxuG9w1reIO0Lok8r8Ecx6MO/VcvMo0fRm63xo=
Subject key identifier: 7F:E3:B0:3F:BF:B6:93:E4:70:4B:82:25:56:9A:A8:F7:DF:50:46:BA
Certificate issuer: /CN=809ed7098111c678898ac0f0aec97fdd3b3b6d02
Certificate serial: 018CC500E40AE52C9A0422A726054C71F96D
Authority key identifier: 80:9E:D7:09:81:11:C6:78:89:8A:C0:F0:AE:C9:7F:DD:3B:3B:6D:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gJ7XCYERxniJisDwrsl_3Ts7bQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/b4a477-08a2-4e8c-8c4d-010cd9079abf/1/f-OwP7-2k-RwS4IlVpqo999QRro.roa
Signing time: Mon 01 Jan 2024 12:30:19 +0000
ROA not before: Mon 01 Jan 2024 12:30:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50178
IP address blocks: 185.161.192.0/22 maxlen: 22
185.161.192.0/24 maxlen: 24
185.161.194.0/24 maxlen: 24
185.161.195.0/24 maxlen: 24
185.161.193.0/24 maxlen: 24
2a07:c700::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/b4a477-08a2-4e8c-8c4d-010cd9079abf/1/gJ7XCYERxniJisDwrsl_3Ts7bQI.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/b4a477-08a2-4e8c-8c4d-010cd9079abf/1/gJ7XCYERxniJisDwrsl_3Ts7bQI.mft
rsync://rpki.ripe.net/repository/DEFAULT/gJ7XCYERxniJisDwrsl_3Ts7bQI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:e4:0a:e5:2c:9a:04:22:a7:26:05:4c:71:f9:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=809ed7098111c678898ac0f0aec97fdd3b3b6d02
Validity
Not Before: Jan 1 12:30:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7fe3b03fbfb693e4704b8225569aa8f7df5046ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:9f:79:fc:f5:b8:10:15:70:7c:bd:85:fd:5f:
95:06:38:ac:7a:1e:77:e9:d5:fd:e0:fb:78:ac:92:
9b:3f:af:97:2d:f6:35:24:ff:73:d9:aa:07:38:8d:
d8:fb:03:c8:25:53:0e:84:31:c7:26:fa:35:f0:1e:
ca:e7:da:8f:87:56:00:de:31:26:db:2b:d2:c9:d7:
91:35:b3:77:84:c0:16:63:04:df:53:70:09:c0:4a:
2f:43:87:7d:d5:a8:fc:81:d9:81:37:7b:05:dd:5c:
7a:30:93:99:a7:3f:d9:9d:7e:c7:c7:b2:08:2b:42:
06:6a:d2:a1:3a:e7:2f:8c:d0:41:f9:59:93:8d:1b:
57:ce:25:e6:a8:9a:ab:d1:ea:75:f9:07:0d:43:85:
50:08:59:47:00:a8:83:24:d9:95:96:81:32:e9:fd:
32:b6:f0:32:37:84:f0:61:45:7e:84:ea:3d:28:32:
d9:a4:9e:33:06:8c:cc:b7:54:6c:fc:25:c1:f4:70:
af:d2:bb:90:7e:ed:99:8e:f1:42:d7:8d:10:72:ad:
07:98:ea:82:2a:86:64:e9:2b:26:fb:37:1e:a0:8f:
94:ae:b8:0b:5b:bd:a5:d5:42:36:e7:1d:f2:ad:79:
cf:82:7f:a9:44:d6:4b:1e:79:ea:49:0c:5e:fe:66:
56:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:E3:B0:3F:BF:B6:93:E4:70:4B:82:25:56:9A:A8:F7:DF:50:46:BA
X509v3 Authority Key Identifier:
keyid:80:9E:D7:09:81:11:C6:78:89:8A:C0:F0:AE:C9:7F:DD:3B:3B:6D:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gJ7XCYERxniJisDwrsl_3Ts7bQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/b4a477-08a2-4e8c-8c4d-010cd9079abf/1/f-OwP7-2k-RwS4IlVpqo999QRro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/b4a477-08a2-4e8c-8c4d-010cd9079abf/1/gJ7XCYERxniJisDwrsl_3Ts7bQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.161.192.0/22
IPv6:
2a07:c700::/29
Signature Algorithm: sha256WithRSAEncryption
4f:15:ca:41:ec:64:6b:45:b8:e9:bd:a6:14:bd:a6:49:41:fd:
d8:a4:3c:ec:63:ad:33:14:7e:64:68:ec:e5:6e:16:9a:ac:ab:
25:1b:3f:89:77:e5:9c:27:13:76:d9:91:32:5a:75:61:31:c2:
56:21:a4:0a:9c:b2:02:5c:64:af:a1:9e:cd:70:b3:3f:be:4d:
c1:0d:a5:f9:b4:c7:5b:ee:a6:aa:49:7f:cd:d5:5b:97:d5:ef:
04:03:bf:75:8a:0e:6c:d8:b0:da:7b:92:60:df:3e:1d:ed:19:
50:d9:5e:58:ea:77:9b:cd:8f:62:2f:78:d6:de:d4:8c:bf:89:
3d:dd:ca:ec:6c:0e:f5:4f:90:57:94:44:e3:62:f8:2b:40:fc:
64:8c:22:97:a9:cc:c0:5c:8b:0f:20:0b:6a:e2:5e:df:cf:89:
48:3a:a6:05:a4:b7:0e:64:0a:59:35:7c:ae:53:56:cb:e0:be:
7e:54:c4:1d:90:72:ac:9f:a2:bd:6b:f0:e6:49:40:e9:9d:a1:
1f:c3:71:14:9c:1a:32:7e:6e:88:65:94:bd:94:cb:c6:5a:32:
0e:3a:13:c5:3a:cb:ea:83:bd:82:ed:da:ea:53:ab:49:76:bc:
c2:2b:0a:1b:04:7e:bd:83:90:17:14:3b:21:4a:ee:70:25:33:
b3:62:64:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:22:37 2024 by rpki-client on console-ams.rpki-client.org