Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/79a64e-069f-499d-a631-8cd42cede220/1/PBwMfqZtNGsYnYC_DEgcRat7RHE.roa
File: PBwMfqZtNGsYnYC_DEgcRat7RHE.roa (raw, json)
Hash identifier: eAwp0bzbXfeuM5b3AKXO06xxvv2sXFLsodIewL466uY=
Subject key identifier: 3C:1C:0C:7E:A6:6D:34:6B:18:9D:80:BF:0C:48:1C:45:AB:7B:44:71
Certificate issuer: /CN=1594f00471e248abe394d521e96cba9630d8520e
Certificate serial: 018D5B087DFB507C541D52297174718D1042
Authority key identifier: 15:94:F0:04:71:E2:48:AB:E3:94:D5:21:E9:6C:BA:96:30:D8:52:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FZTwBHHiSKvjlNUh6Wy6ljDYUg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/79a64e-069f-499d-a631-8cd42cede220/1/PBwMfqZtNGsYnYC_DEgcRat7RHE.roa
Signing time: Tue 30 Jan 2024 15:41:39 +0000
ROA not before: Tue 30 Jan 2024 15:41:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212041
IP address blocks: 185.245.246.0/23 maxlen: 23
185.247.60.0/24 maxlen: 24
185.252.128.0/24 maxlen: 31
185.252.129.0/24 maxlen: 31
185.252.130.0/24 maxlen: 31
185.252.131.0/24 maxlen: 31
194.61.81.0/24 maxlen: 24
195.28.20.0/24 maxlen: 24
2a0c:2740::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/79a64e-069f-499d-a631-8cd42cede220/1/FZTwBHHiSKvjlNUh6Wy6ljDYUg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/79a64e-069f-499d-a631-8cd42cede220/1/FZTwBHHiSKvjlNUh6Wy6ljDYUg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/FZTwBHHiSKvjlNUh6Wy6ljDYUg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 May 2024 04:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:5b:08:7d:fb:50:7c:54:1d:52:29:71:74:71:8d:10:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1594f00471e248abe394d521e96cba9630d8520e
Validity
Not Before: Jan 30 15:41:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3c1c0c7ea66d346b189d80bf0c481c45ab7b4471
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:50:1f:9d:64:1c:14:5b:a5:61:82:16:51:1e:
ab:18:dd:66:bd:14:8c:4b:c9:c0:dd:ce:39:b7:81:
17:04:f6:d1:4d:c6:4e:11:49:71:9c:d2:4a:d8:8c:
a2:1c:cc:df:3e:3d:d6:b4:63:ed:aa:ed:b9:5a:23:
02:93:c5:a4:ad:5a:66:0e:94:d4:60:35:13:44:dc:
a4:2a:a6:bd:40:db:43:e9:41:5e:3b:64:d9:a0:d0:
8b:41:ab:ef:e7:34:e5:c5:85:26:95:b3:24:39:06:
8c:dc:7d:b1:d9:7c:64:9d:10:58:65:18:9b:5c:33:
7b:d3:e2:8a:78:eb:7b:d8:53:d4:eb:c5:b5:d6:88:
dc:ee:80:db:6e:c4:09:54:33:5b:5c:a3:d4:2c:45:
1c:1b:37:53:f0:f6:c0:fa:99:3d:50:20:a7:84:bd:
2f:a7:c2:89:3d:d2:6c:37:a3:f2:af:43:43:dc:07:
17:b8:32:a6:65:ad:fd:3f:db:3d:6f:66:9b:09:c2:
b6:f1:50:96:f1:47:d6:34:34:be:5b:fc:85:13:ac:
49:13:b9:70:aa:b9:18:c1:83:fa:03:9b:e1:c2:93:
6f:51:11:ba:3c:ef:21:e4:ed:d5:50:2a:85:2d:a8:
03:e5:22:64:19:78:29:c4:14:6c:20:b5:23:9b:50:
a6:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:1C:0C:7E:A6:6D:34:6B:18:9D:80:BF:0C:48:1C:45:AB:7B:44:71
X509v3 Authority Key Identifier:
keyid:15:94:F0:04:71:E2:48:AB:E3:94:D5:21:E9:6C:BA:96:30:D8:52:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FZTwBHHiSKvjlNUh6Wy6ljDYUg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/79a64e-069f-499d-a631-8cd42cede220/1/PBwMfqZtNGsYnYC_DEgcRat7RHE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/79a64e-069f-499d-a631-8cd42cede220/1/FZTwBHHiSKvjlNUh6Wy6ljDYUg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.245.246.0/23
185.247.60.0/24
185.252.128.0/22
194.61.81.0/24
195.28.20.0/24
IPv6:
2a0c:2740::/29
Signature Algorithm: sha256WithRSAEncryption
43:b8:f8:94:ce:a0:fc:6b:85:e3:22:7a:30:99:49:d9:aa:ef:
c1:d9:bf:2d:48:9c:7f:2e:ea:42:ca:c0:03:63:be:87:5d:08:
4c:e6:09:45:b8:64:2a:98:31:31:f2:6c:57:f2:93:b9:20:a4:
31:ca:7a:e0:65:21:6f:de:11:8a:7e:2e:86:7c:95:47:ee:69:
45:cc:24:51:6e:2e:da:a6:9c:11:ea:55:e0:0c:a3:78:1f:2a:
5f:21:00:b7:af:ef:3c:99:9d:65:d3:e6:37:44:32:d3:13:2e:
e5:97:24:e0:53:c0:82:2a:bc:e0:21:0d:e2:e1:9e:39:ef:84:
d5:22:d6:74:c9:02:6b:f5:48:66:65:71:97:3a:67:f4:21:24:
bd:0f:73:87:86:ec:c3:4d:9f:04:f0:13:48:ec:c1:5a:1d:60:
34:93:33:fc:e0:0a:75:78:a6:38:aa:f6:da:44:75:32:89:65:
50:7e:fb:24:76:12:dd:c8:33:cb:64:9a:6f:80:ab:72:4c:55:
2a:a5:12:04:18:c3:5d:5e:3c:71:43:db:4d:df:16:56:3d:c9:
3f:92:89:c8:9a:c2:f2:0f:28:ad:53:d8:0e:7a:d5:e5:8d:2c:
6c:8d:7d:68:97:a5:b4:95:61:58:4a:86:60:26:ab:6d:b9:b0:
36:01:81:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 28 09:29:51 2024 by rpki-client on console-ams.rpki-client.org