Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/aSD-04cdpeZA5G_ag72kkiS6SOY.roa
File: aSD-04cdpeZA5G_ag72kkiS6SOY.roa (raw, json)
Hash identifier: AhdmABb0h6X8dKRHqiJsq+GfIzZ6Vtz/fYSMrp8vs5s=
Subject key identifier: 69:20:FE:D3:87:1D:A5:E6:40:E4:6F:DA:83:BD:A4:92:24:BA:48:E6
Certificate issuer: /CN=408025c7de0400e0f3c88d4a122a317e32c5e21c
Certificate serial: 018CC3B6E9D11EC22E9B494B286814CA991D
Authority key identifier: 40:80:25:C7:DE:04:00:E0:F3:C8:8D:4A:12:2A:31:7E:32:C5:E2:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QIAlx94EAODzyI1KEioxfjLF4hw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/aSD-04cdpeZA5G_ag72kkiS6SOY.roa
Signing time: Mon 01 Jan 2024 06:29:53 +0000
ROA not before: Mon 01 Jan 2024 06:29:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202780
IP address blocks: 185.101.125.0/24 maxlen: 24
185.101.124.0/24 maxlen: 24
185.101.126.0/24 maxlen: 24
185.101.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/QIAlx94EAODzyI1KEioxfjLF4hw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/QIAlx94EAODzyI1KEioxfjLF4hw.mft
rsync://rpki.ripe.net/repository/DEFAULT/QIAlx94EAODzyI1KEioxfjLF4hw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 21:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:e9:d1:1e:c2:2e:9b:49:4b:28:68:14:ca:99:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=408025c7de0400e0f3c88d4a122a317e32c5e21c
Validity
Not Before: Jan 1 06:29:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6920fed3871da5e640e46fda83bda49224ba48e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:56:49:c1:0f:25:5b:87:42:ae:74:b5:aa:47:
1c:c5:09:85:2f:3f:f6:f5:19:4d:38:70:52:78:7d:
e1:c7:81:c3:d6:8f:9c:c1:a1:bc:f6:13:06:e4:c3:
56:0e:54:d5:8a:2c:0a:de:51:7b:4d:1d:e4:bf:fd:
8c:db:ef:bb:66:4e:84:6f:19:c3:4d:a7:b2:53:13:
02:06:8c:85:92:c7:bf:ae:14:f8:6f:84:6b:c1:25:
b0:e9:fb:30:b2:45:2b:f4:30:27:78:df:6b:2b:03:
d6:f5:1d:3e:93:98:a1:d6:92:97:e6:6d:40:28:0f:
2f:81:0f:07:ba:8e:c5:ff:95:f9:c2:36:c0:6b:b6:
0f:91:c6:33:31:91:01:44:8c:00:fa:ab:dc:d4:1f:
a2:29:61:78:d2:b2:3f:0c:38:1c:71:1d:35:cc:46:
1d:9a:71:f1:96:88:98:17:ff:db:e2:b8:78:0c:0a:
c8:35:bf:5e:a5:d9:f8:cc:16:38:f0:30:ab:3a:b5:
82:5d:76:0a:6b:0d:b8:9a:1e:93:b4:89:10:90:19:
97:a6:1b:aa:6a:ce:0b:1a:54:32:ae:aa:46:8b:53:
12:b9:5e:a0:6b:73:ec:aa:f0:b1:a8:72:89:08:ef:
41:40:48:fc:01:8b:94:a1:e0:9c:f5:d1:71:a5:55:
66:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:20:FE:D3:87:1D:A5:E6:40:E4:6F:DA:83:BD:A4:92:24:BA:48:E6
X509v3 Authority Key Identifier:
keyid:40:80:25:C7:DE:04:00:E0:F3:C8:8D:4A:12:2A:31:7E:32:C5:E2:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIAlx94EAODzyI1KEioxfjLF4hw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/aSD-04cdpeZA5G_ag72kkiS6SOY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/QIAlx94EAODzyI1KEioxfjLF4hw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.101.124.0/22
Signature Algorithm: sha256WithRSAEncryption
2e:f1:0e:da:b1:e1:cb:4b:d8:52:18:bc:03:0f:a5:a3:8c:f6:
2b:eb:94:d9:a9:1f:0a:d4:52:57:03:70:83:01:73:58:e7:b4:
d1:4f:3d:d7:f0:eb:f8:bd:5e:52:23:b3:0c:69:cd:88:60:4a:
76:3c:3f:20:0e:6a:22:85:5f:16:0f:3e:cc:d9:4a:c9:bf:ef:
51:6a:ae:28:4c:f6:0a:58:e2:c9:ba:20:79:85:c8:d6:7e:5d:
21:db:62:b1:c6:ff:df:8c:6e:6c:f9:a0:84:4a:d3:ad:88:36:
e2:b7:c3:83:75:b7:8d:bf:cd:30:d3:b3:db:11:da:ec:d9:4f:
e5:57:bc:f8:9f:a9:b2:e0:c3:2e:f2:4a:9d:1d:88:6c:75:be:
29:b7:58:58:4f:92:0e:38:65:bd:bf:77:b1:2c:1a:b2:78:b3:
96:8e:ea:eb:19:2f:be:ab:c3:e2:a6:d4:18:d1:d7:25:67:58:
19:28:79:82:60:ec:02:ec:25:54:63:93:83:6d:f9:e1:37:0a:
73:56:77:79:67:a9:b0:73:09:c8:34:bb:07:68:73:31:6a:3c:
ae:08:a1:9f:93:aa:c5:2c:06:32:9b:a9:83:03:44:2e:58:02:
c4:f1:d2:15:4a:c6:ba:6a:c6:42:5a:95:49:60:09:d1:ac:f4:
4d:bc:0f:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 06:41:51 2024 by rpki-client on console-ams.rpki-client.org