Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/c4qlsVsbd3AwmJFx-KLGTkPy1Hc.roa
File: c4qlsVsbd3AwmJFx-KLGTkPy1Hc.roa (raw, json)
Hash identifier: GWzoEvplqubkjRrg2BElSVXfmX326SRByKn887h+FRQ=
Subject key identifier: 73:8A:A5:B1:5B:1B:77:70:30:98:91:71:F8:A2:C6:4E:43:F2:D4:77
Certificate issuer: /CN=126c660b30f5692b2b16e289b24901c518fda520
Certificate serial: 018CC795851C87642A5A7EFA49822AB5A772
Authority key identifier: 12:6C:66:0B:30:F5:69:2B:2B:16:E2:89:B2:49:01:C5:18:FD:A5:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EmxmCzD1aSsrFuKJskkBxRj9pSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/c4qlsVsbd3AwmJFx-KLGTkPy1Hc.roa
Signing time: Tue 02 Jan 2024 00:31:54 +0000
ROA not before: Tue 02 Jan 2024 00:31:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34549
IP address blocks: 185.204.17.0/24 maxlen: 24
185.204.19.0/24 maxlen: 24
185.204.18.0/24 maxlen: 24
193.9.40.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/EmxmCzD1aSsrFuKJskkBxRj9pSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:46:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:85:1c:87:64:2a:5a:7e:fa:49:82:2a:b5:a7:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=126c660b30f5692b2b16e289b24901c518fda520
Validity
Not Before: Jan 2 00:31:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=738aa5b15b1b777030989171f8a2c64e43f2d477
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f7:df:00:78:97:55:7e:78:1d:dc:2c:e5:6a:
1b:b8:5f:75:54:91:7e:11:57:38:5d:ec:2c:3a:72:
11:d6:67:13:ee:84:ba:98:39:90:26:69:dc:95:08:
26:a1:4b:1b:f8:22:02:8d:7f:c1:6b:ad:78:d1:9c:
6c:da:25:8c:26:e4:d2:11:93:ab:10:e2:27:a2:09:
d9:20:4b:d0:10:e8:82:13:fd:ad:be:32:ff:20:35:
2e:b6:56:66:17:2f:a3:94:a7:ee:4a:8e:7a:dd:dc:
43:7a:47:29:ca:0e:d1:c4:c7:4c:a8:14:1c:1c:69:
52:52:a1:87:b5:90:c9:e1:49:ad:1e:d2:23:29:e3:
c7:18:68:a3:07:d6:8e:ca:a0:14:50:1b:4c:e0:32:
e3:fb:c1:0c:03:4f:53:74:1d:30:0f:db:47:64:7b:
57:e8:f6:55:b0:29:1d:86:59:86:9a:58:d5:da:a4:
ed:16:8b:d2:6a:b3:bf:4a:44:af:74:9b:b5:b2:51:
4f:6c:4b:d3:49:b2:ef:a5:5e:ac:5c:2e:5d:c6:90:
88:f7:d0:6e:46:28:8e:6d:be:c3:3c:78:70:87:60:
93:4b:04:58:50:c0:6c:7d:a1:30:12:f0:06:2b:cd:
a2:85:27:d1:56:60:f4:73:21:18:ef:e6:ce:69:02:
72:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:8A:A5:B1:5B:1B:77:70:30:98:91:71:F8:A2:C6:4E:43:F2:D4:77
X509v3 Authority Key Identifier:
keyid:12:6C:66:0B:30:F5:69:2B:2B:16:E2:89:B2:49:01:C5:18:FD:A5:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EmxmCzD1aSsrFuKJskkBxRj9pSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/c4qlsVsbd3AwmJFx-KLGTkPy1Hc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.204.17.0-185.204.19.255
193.9.40.0/22
Signature Algorithm: sha256WithRSAEncryption
37:09:11:7a:2b:3d:1e:65:f9:ed:07:a0:e4:93:68:cf:7f:36:
4e:e1:74:3d:14:cd:86:a8:f1:8c:4f:61:b9:20:c4:0b:4c:c4:
c3:02:68:48:e5:4a:97:0e:bf:19:37:f8:13:70:c2:14:32:42:
fd:62:58:6f:2f:82:c6:70:20:46:f5:ba:cd:b5:b7:a6:e3:da:
ea:49:79:2c:90:56:e5:8c:7e:c0:20:db:04:83:1c:56:a7:a0:
0d:34:35:2f:18:b7:d9:ad:c4:67:9d:32:a4:cf:0b:63:61:e6:
c2:35:83:e6:e4:10:2c:41:02:ca:3b:28:d1:2b:10:bf:17:6a:
c0:3b:03:06:da:87:4d:39:8d:4d:a8:f2:73:f8:cf:c7:7a:22:
cb:e0:6c:79:af:95:df:9f:69:51:c0:fc:a5:8f:02:ba:4b:af:
2c:8f:9b:e9:16:20:56:ef:67:f6:9b:d0:06:0d:5e:3e:39:b2:
79:58:67:d0:05:2d:06:f9:b0:82:ef:d3:7e:2d:82:f7:ba:ce:
a7:d5:99:33:91:11:fa:ed:c4:91:f2:70:ee:fe:00:fd:02:c6:
e1:92:3c:de:06:d6:69:46:14:68:04:79:8d:a2:55:25:a3:e2:
55:f0:25:e8:9c:b9:a8:dc:81:1d:31:b1:e0:f9:3e:fb:f7:70:
c7:0b:9d:7f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri May 17 18:44:04 2024 by rpki-client on console-fra.rpki-client.org