Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/dc35eb-6ecf-4452-8599-70d59cc4f7cc/1/u4d3P2hfpAyfaDp3DuFhbAgxG2Q.roa
File: u4d3P2hfpAyfaDp3DuFhbAgxG2Q.roa (raw, json)
Hash identifier: kLc5qD9b8U1JMSlgemVLl4bbLPbQ5wolqLko4fBzGb0=
Subject key identifier: BB:87:77:3F:68:5F:A4:0C:9F:68:3A:77:0E:E1:61:6C:08:31:1B:64
Certificate issuer: /CN=f0bfad31c14c93daa5344ba04f4b52354696dfaf
Certificate serial: 018CC56E3F1C206A49DC210A7F596E509DC6
Authority key identifier: F0:BF:AD:31:C1:4C:93:DA:A5:34:4B:A0:4F:4B:52:35:46:96:DF:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8L-tMcFMk9qlNEugT0tSNUaW368.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/dc35eb-6ecf-4452-8599-70d59cc4f7cc/1/u4d3P2hfpAyfaDp3DuFhbAgxG2Q.roa
Signing time: Mon 01 Jan 2024 14:29:45 +0000
ROA not before: Mon 01 Jan 2024 14:29:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43181
IP address blocks: 185.169.149.0/24 maxlen: 24
185.169.148.0/22 maxlen: 24
185.169.151.0/24 maxlen: 24
185.169.148.0/24 maxlen: 24
185.169.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/dc35eb-6ecf-4452-8599-70d59cc4f7cc/1/8L-tMcFMk9qlNEugT0tSNUaW368.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/dc35eb-6ecf-4452-8599-70d59cc4f7cc/1/8L-tMcFMk9qlNEugT0tSNUaW368.mft
rsync://rpki.ripe.net/repository/DEFAULT/8L-tMcFMk9qlNEugT0tSNUaW368.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 10 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:3f:1c:20:6a:49:dc:21:0a:7f:59:6e:50:9d:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0bfad31c14c93daa5344ba04f4b52354696dfaf
Validity
Not Before: Jan 1 14:29:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bb87773f685fa40c9f683a770ee1616c08311b64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:c7:5d:9e:e6:56:07:1e:38:a6:ba:54:16:81:
4a:53:f3:8d:24:96:94:68:67:c5:b1:28:df:5a:54:
19:bb:04:03:c9:4f:f0:84:ab:f5:4a:ea:94:cf:30:
90:d1:f2:58:46:ca:8b:f9:9e:cb:96:2c:db:3b:ac:
69:f0:c9:a5:65:cc:4f:2a:f4:14:d5:ce:82:21:a0:
f4:0e:17:b2:f8:45:e6:97:a5:af:59:96:99:84:3f:
88:6f:5d:cc:99:79:63:23:22:f0:04:b7:38:3d:c4:
bd:8b:bd:d4:8d:9c:83:58:2c:8e:b9:57:86:60:9f:
7e:8f:86:f9:ba:8c:18:93:98:8b:4c:d8:32:7c:f1:
a5:18:e0:0d:4e:d8:bd:96:3f:38:1a:60:17:90:e0:
e4:55:d5:4e:2b:94:d8:91:1e:f0:98:37:09:47:f7:
f5:6b:c2:27:f5:e4:9c:4d:01:4c:9a:73:b3:fe:66:
c8:d8:7e:0b:23:14:f8:dd:d0:c4:56:2d:3b:f5:63:
86:22:e0:b4:10:94:bd:bb:3f:1d:7e:d4:8f:2d:6f:
3e:1d:99:d6:6c:2b:73:38:b7:8b:2e:2e:21:80:0b:
1d:5f:bd:38:f5:e7:87:c7:f2:1c:d2:39:27:b8:08:
63:a6:32:19:cc:24:ee:28:09:29:11:f4:34:31:eb:
7d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:87:77:3F:68:5F:A4:0C:9F:68:3A:77:0E:E1:61:6C:08:31:1B:64
X509v3 Authority Key Identifier:
keyid:F0:BF:AD:31:C1:4C:93:DA:A5:34:4B:A0:4F:4B:52:35:46:96:DF:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8L-tMcFMk9qlNEugT0tSNUaW368.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/dc35eb-6ecf-4452-8599-70d59cc4f7cc/1/u4d3P2hfpAyfaDp3DuFhbAgxG2Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/dc35eb-6ecf-4452-8599-70d59cc4f7cc/1/8L-tMcFMk9qlNEugT0tSNUaW368.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.169.148.0/22
Signature Algorithm: sha256WithRSAEncryption
c1:b9:33:43:90:1a:7b:47:32:b6:3e:3d:a1:cc:5d:84:87:cd:
db:bb:bd:da:32:34:95:aa:2e:4b:62:76:e7:3d:71:d6:81:48:
64:7c:34:46:2e:ac:7e:be:a4:d7:48:e3:98:ec:0e:e0:6a:06:
74:fc:0e:ba:48:1c:ec:02:86:49:0d:9f:b0:b1:9b:58:63:ec:
33:c6:b4:d9:f1:f7:cc:11:75:55:8a:f7:02:6c:71:88:39:b7:
e1:a6:cc:9c:90:5b:fe:1c:53:55:d4:b8:3b:e7:7e:b3:3c:b9:
4c:91:6c:45:01:e3:55:12:00:b8:b6:45:a7:a1:9f:70:ff:f3:
d5:13:13:a9:83:62:d9:bc:f6:3b:1d:bc:2a:e1:7e:a1:0d:d3:
7f:8a:ad:a4:fb:8f:98:42:76:9d:34:4c:09:fd:72:e0:15:f4:
5a:72:b3:f0:37:48:29:19:7d:08:90:29:1a:20:77:ac:b5:a3:
16:9a:b5:24:ac:77:95:c7:b6:25:ae:73:57:dd:4f:e6:e1:01:
00:c2:d3:c5:ba:27:b5:b6:ff:95:74:ea:56:df:b7:a7:ff:66:
a2:b0:e6:a4:13:cc:8e:5b:c9:8f:80:fb:fb:5b:4c:cd:ba:84:
e0:01:92:cd:a2:93:df:0f:4e:2f:eb:2c:e4:3b:f8:36:d3:88:
ca:94:99:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 01:28:56 2024 by rpki-client on console-fra.rpki-client.org