Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b84500-ffdb-42d2-9465-a2eade83955d/1/DloE391qrYiliEZg5FV77eS64LU.roa
File: DloE391qrYiliEZg5FV77eS64LU.roa (raw, json)
Hash identifier: KNPjACwsjiYhkMv4XVZ4CcsNqlO6/xyxVmGxc0Bvn1w=
Subject key identifier: 0E:5A:04:DF:DD:6A:AD:88:A5:88:46:60:E4:55:7B:ED:E4:BA:E0:B5
Certificate issuer: /CN=cb9f8612b7f14750016b848c42f60df36ad832d9
Certificate serial: 018CCA29F55108A98872FFAB8CCD6C20C1B7
Authority key identifier: CB:9F:86:12:B7:F1:47:50:01:6B:84:8C:42:F6:0D:F3:6A:D8:32:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y5-GErfxR1ABa4SMQvYN82rYMtk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b84500-ffdb-42d2-9465-a2eade83955d/1/DloE391qrYiliEZg5FV77eS64LU.roa
Signing time: Tue 02 Jan 2024 12:33:16 +0000
ROA not before: Tue 02 Jan 2024 12:33:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205870
IP address blocks: 185.145.31.0/24 maxlen: 24
185.145.30.0/24 maxlen: 24
185.145.29.0/24 maxlen: 24
185.145.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/b84500-ffdb-42d2-9465-a2eade83955d/1/y5-GErfxR1ABa4SMQvYN82rYMtk.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/b84500-ffdb-42d2-9465-a2eade83955d/1/y5-GErfxR1ABa4SMQvYN82rYMtk.mft
rsync://rpki.ripe.net/repository/DEFAULT/y5-GErfxR1ABa4SMQvYN82rYMtk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Jun 2024 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:f5:51:08:a9:88:72:ff:ab:8c:cd:6c:20:c1:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb9f8612b7f14750016b848c42f60df36ad832d9
Validity
Not Before: Jan 2 12:33:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0e5a04dfdd6aad88a5884660e4557bede4bae0b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:08:22:a4:bb:cb:82:01:13:25:e1:33:08:8e:
24:2d:a5:f4:05:55:1b:03:64:1c:f4:99:cc:01:77:
3d:ca:a2:85:08:be:33:60:a7:94:65:c6:ec:24:11:
6e:8b:7b:4e:e0:9f:43:8f:bf:75:51:21:c2:37:20:
55:bb:e7:47:16:2e:40:d3:3c:04:2a:e1:7b:37:99:
46:8b:a2:3d:14:cb:32:8c:61:4d:57:a0:7d:ec:1d:
42:96:1b:57:8b:c9:2d:90:1b:3c:3c:c6:39:ca:88:
f5:9c:2a:fc:7b:08:bf:c6:0e:b0:4e:0a:72:40:41:
bf:81:81:b9:2f:1f:da:78:1b:56:79:76:a0:b3:10:
af:e4:0c:a2:ac:5e:c8:ff:d9:99:ba:8d:fe:26:87:
2d:0f:48:ad:f3:1f:7f:5c:fc:6e:14:6f:8a:9f:2a:
b1:ae:87:60:00:19:58:4f:61:7f:e3:0a:c9:d7:9f:
b3:80:cb:dd:ea:f7:9d:9f:4c:4b:b9:47:10:fd:9f:
03:bf:54:ba:65:21:df:04:f5:26:14:3f:b7:7d:d8:
5a:30:89:4e:4e:82:b8:1e:0d:e9:2b:58:47:8f:51:
49:b7:a6:4f:4f:d8:ef:e0:e0:5a:62:03:01:1d:76:
e1:28:5a:80:bb:79:2c:a7:73:94:7b:07:09:4d:07:
14:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:5A:04:DF:DD:6A:AD:88:A5:88:46:60:E4:55:7B:ED:E4:BA:E0:B5
X509v3 Authority Key Identifier:
keyid:CB:9F:86:12:B7:F1:47:50:01:6B:84:8C:42:F6:0D:F3:6A:D8:32:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y5-GErfxR1ABa4SMQvYN82rYMtk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b84500-ffdb-42d2-9465-a2eade83955d/1/DloE391qrYiliEZg5FV77eS64LU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b84500-ffdb-42d2-9465-a2eade83955d/1/y5-GErfxR1ABa4SMQvYN82rYMtk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.145.28.0/22
Signature Algorithm: sha256WithRSAEncryption
89:0e:15:1b:82:9c:a0:04:32:b4:aa:6b:7b:2d:b7:e7:aa:61:
a6:74:3e:14:d8:02:43:73:10:54:15:3e:9b:99:be:8b:cc:5f:
06:09:09:32:54:66:ff:cf:f6:e4:fd:4c:dd:09:c1:a3:fe:33:
ea:61:b2:11:13:20:ba:85:21:21:33:4d:42:44:c0:fc:8c:d0:
99:8f:4e:05:3e:ce:1f:28:f3:1c:1e:82:c3:4b:19:94:85:36:
4d:06:5c:7e:51:6c:5d:fa:96:19:73:89:6a:08:cf:d4:25:9f:
fd:bb:0f:7f:dc:b7:fe:ba:bb:ff:17:de:22:ea:e3:93:e6:17:
e5:6b:2c:e8:89:f6:5a:67:28:03:a7:23:eb:fc:de:24:54:45:
6b:26:ec:1c:dd:1a:74:06:5c:f3:c8:e0:49:81:1a:91:31:53:
dd:f9:ed:a4:a8:40:f1:11:d7:c8:53:d7:51:5e:ca:61:7f:34:
14:1f:81:84:24:71:03:25:a1:17:10:49:5f:60:f2:c5:e5:dc:
49:3f:e0:42:51:6c:30:c8:c3:09:60:c9:75:a8:7a:01:05:a8:
c5:bc:42:ef:64:28:5f:18:e6:b5:5e:9e:6c:97:ca:13:61:b9:
22:0c:de:81:98:7e:70:fb:bf:e4:bf:da:dd:ce:44:e2:74:48:
cf:6f:a8:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 12:52:48 2024 by rpki-client on console-ams.rpki-client.org