Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/2e0536-4ca2-4afe-83d6-336e874f3d87/1/fn96hK1nO2kt_kIDjwMJiIQO0oY.roa
File: fn96hK1nO2kt_kIDjwMJiIQO0oY.roa (raw, json)
Hash identifier: tKMOOyX+1X8BJvKnMFt1uS7cknFrGSMHDnL30tRBmkk=
Subject key identifier: 7E:7F:7A:84:AD:67:3B:69:2D:FE:42:03:8F:03:09:88:84:0E:D2:86
Certificate issuer: /CN=08818cbb0f9d1e573773d791138a0122f28bec56
Certificate serial: 018CC349156BFD0519119D496E92E55145F1
Authority key identifier: 08:81:8C:BB:0F:9D:1E:57:37:73:D7:91:13:8A:01:22:F2:8B:EC:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIGMuw-dHlc3c9eRE4oBIvKL7FY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/2e0536-4ca2-4afe-83d6-336e874f3d87/1/fn96hK1nO2kt_kIDjwMJiIQO0oY.roa
Signing time: Mon 01 Jan 2024 04:29:55 +0000
ROA not before: Mon 01 Jan 2024 04:29:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206772
IP address blocks: 185.158.124.0/23 maxlen: 23
185.158.124.0/24 maxlen: 24
185.158.124.0/22 maxlen: 22
185.158.125.0/24 maxlen: 24
185.158.127.0/24 maxlen: 24
2a07:ad40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/2e0536-4ca2-4afe-83d6-336e874f3d87/1/CIGMuw-dHlc3c9eRE4oBIvKL7FY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/2e0536-4ca2-4afe-83d6-336e874f3d87/1/CIGMuw-dHlc3c9eRE4oBIvKL7FY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIGMuw-dHlc3c9eRE4oBIvKL7FY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:15:6b:fd:05:19:11:9d:49:6e:92:e5:51:45:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08818cbb0f9d1e573773d791138a0122f28bec56
Validity
Not Before: Jan 1 04:29:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7e7f7a84ad673b692dfe42038f030988840ed286
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:91:a9:5f:c0:13:81:e9:49:2d:7b:be:a7:eb:
1a:68:94:63:b2:a8:c5:5b:d0:c5:93:7e:47:2b:df:
b4:0d:69:a1:d7:d4:06:ff:4c:99:3c:36:82:a9:d5:
fb:7c:8c:7b:79:6d:4f:56:b8:3f:99:2d:7e:b2:29:
f1:ef:aa:a1:2b:7b:40:90:b8:d6:a0:57:b2:d2:ef:
3a:e7:34:93:ad:5f:0e:f2:ef:d7:d2:a5:47:c2:9a:
0c:e6:8a:ee:7e:41:6d:87:bf:f1:d6:13:c8:cb:f5:
b2:06:7c:9a:63:c5:5a:b3:23:15:9a:32:84:c7:8a:
1e:a4:65:e5:0b:0f:53:c0:d1:ee:28:e4:eb:56:de:
00:40:5b:47:20:6e:a5:cc:d1:70:89:20:b1:f9:0c:
60:77:c2:0a:d7:a5:c6:53:aa:c3:8b:5c:a1:f6:43:
9d:5a:76:b5:3a:3b:20:b8:1a:e7:5a:82:0b:ef:db:
91:5d:86:e1:b2:ba:40:2e:bf:78:14:f6:7b:8c:ad:
5e:29:64:aa:67:1a:9d:0c:e9:a5:dc:73:bc:8b:25:
4e:c6:3e:19:0e:88:8a:0a:b2:68:58:c9:14:e0:a1:
4c:64:29:37:b9:ae:d1:86:77:17:69:66:5d:b5:3d:
91:41:a2:45:a8:44:90:52:72:30:bc:37:47:32:d7:
18:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:7F:7A:84:AD:67:3B:69:2D:FE:42:03:8F:03:09:88:84:0E:D2:86
X509v3 Authority Key Identifier:
keyid:08:81:8C:BB:0F:9D:1E:57:37:73:D7:91:13:8A:01:22:F2:8B:EC:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIGMuw-dHlc3c9eRE4oBIvKL7FY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/2e0536-4ca2-4afe-83d6-336e874f3d87/1/fn96hK1nO2kt_kIDjwMJiIQO0oY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/2e0536-4ca2-4afe-83d6-336e874f3d87/1/CIGMuw-dHlc3c9eRE4oBIvKL7FY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.158.124.0/22
IPv6:
2a07:ad40::/29
Signature Algorithm: sha256WithRSAEncryption
84:b5:cc:a7:3e:c8:0b:14:05:29:db:92:8c:67:ee:5e:0d:7f:
f9:d0:41:70:5b:ff:09:47:af:f8:f1:a1:ee:82:6f:9f:d4:37:
02:04:e9:9f:82:e2:89:9d:03:c8:76:29:ac:c7:ec:bb:ad:b2:
be:c1:47:a2:24:26:00:f6:11:27:19:19:48:8c:54:32:06:b5:
92:ae:4e:9e:55:20:f6:fb:d6:c9:ef:76:81:b4:78:9c:7e:a5:
7a:70:39:71:ac:cb:96:3a:ce:af:12:16:88:78:7d:14:bc:86:
c0:2e:01:c8:a3:04:26:8d:1d:a3:aa:c7:b1:0a:f8:c7:f3:c7:
b1:c4:af:24:3d:4a:04:ae:c4:ee:a6:bf:a8:48:74:d2:10:52:
09:1b:88:24:32:78:18:bb:1b:2b:f7:a0:b5:f4:81:af:f8:e3:
ce:af:21:9a:7b:6e:5d:78:30:ea:f5:63:b2:41:e4:40:05:31:
9a:04:9f:80:53:7f:db:ce:0e:0b:5d:26:00:46:ae:50:a3:17:
fe:01:36:eb:63:6d:c3:eb:43:57:c5:d8:ac:c9:6b:43:1a:07:
7a:ed:75:a0:6d:4c:48:1a:53:44:c5:28:8c:a1:97:1a:2b:0e:
fd:46:36:5c:a5:f1:4a:e1:db:ec:32:80:1d:d6:5a:ea:66:6d:
5e:7b:9c:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 21:24:18 2024 by rpki-client on console-ams.rpki-client.org