Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/186a93-8e93-4652-9289-7ed51ca5af51/1/b4qh9xACOq5XZXxhw3kbpvXNMcY.roa
File: b4qh9xACOq5XZXxhw3kbpvXNMcY.roa (raw, json)
Hash identifier: JFLdZICpgQDfQhL52Lu4EoImLg5XPA6RJpZhQoLCIp0=
Subject key identifier: 6F:8A:A1:F7:10:02:3A:AE:57:65:7C:61:C3:79:1B:A6:F5:CD:31:C6
Certificate issuer: /CN=964335563d9b6f9e3e28de368d85988bc141371e
Certificate serial: 018CC9BC6A91344B25A1D5F250BC34BAA930
Authority key identifier: 96:43:35:56:3D:9B:6F:9E:3E:28:DE:36:8D:85:98:8B:C1:41:37:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lkM1Vj2bb54-KN42jYWYi8FBNx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/186a93-8e93-4652-9289-7ed51ca5af51/1/b4qh9xACOq5XZXxhw3kbpvXNMcY.roa
Signing time: Tue 02 Jan 2024 10:33:37 +0000
ROA not before: Tue 02 Jan 2024 10:33:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 19905
IP address blocks: 185.180.82.0/24 maxlen: 24
185.180.83.0/24 maxlen: 24
185.180.80.0/24 maxlen: 24
185.180.80.0/22 maxlen: 22
185.180.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/186a93-8e93-4652-9289-7ed51ca5af51/1/lkM1Vj2bb54-KN42jYWYi8FBNx4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/186a93-8e93-4652-9289-7ed51ca5af51/1/lkM1Vj2bb54-KN42jYWYi8FBNx4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lkM1Vj2bb54-KN42jYWYi8FBNx4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 13:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:6a:91:34:4b:25:a1:d5:f2:50:bc:34:ba:a9:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=964335563d9b6f9e3e28de368d85988bc141371e
Validity
Not Before: Jan 2 10:33:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6f8aa1f710023aae57657c61c3791ba6f5cd31c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b0:90:65:9a:c4:c0:34:82:a7:bc:c1:ef:8c:
11:e8:f3:4b:3c:42:3e:fc:73:5a:44:5f:11:21:2c:
ae:db:ce:a7:b0:93:29:39:84:20:fe:f0:78:1a:9a:
4b:70:6a:36:40:b7:cb:1e:17:6f:db:e6:fc:5c:8e:
33:58:8e:b0:14:3e:8d:e6:36:75:05:53:96:86:c5:
ef:c9:39:b4:bf:cf:af:93:9e:9c:e4:4f:b8:58:d6:
85:a8:bc:d5:88:61:61:f4:cb:84:8e:72:18:88:1b:
58:40:83:29:ab:59:b4:0c:02:3f:85:7c:18:98:ca:
e5:68:35:8a:89:fc:d1:e9:92:19:e5:99:ca:68:83:
b2:8b:dc:06:ab:88:37:29:47:3c:4b:71:77:e6:ed:
85:2c:32:34:c5:42:86:d5:8c:12:f2:d1:54:50:49:
0d:04:22:d8:dc:00:97:ec:5f:f9:78:e3:f3:34:5c:
0e:75:02:e3:9e:b5:e8:63:20:bc:16:af:e0:8b:89:
13:7e:17:f5:e5:5a:13:58:57:20:cb:2a:e3:1d:cb:
10:8e:a4:d4:49:e9:4d:32:13:93:cc:0f:de:8d:9d:
a0:8c:78:48:ae:58:a5:e4:02:83:41:a8:17:6b:82:
de:0b:66:bc:05:d8:08:f2:19:46:f2:67:46:e7:b2:
5d:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:8A:A1:F7:10:02:3A:AE:57:65:7C:61:C3:79:1B:A6:F5:CD:31:C6
X509v3 Authority Key Identifier:
keyid:96:43:35:56:3D:9B:6F:9E:3E:28:DE:36:8D:85:98:8B:C1:41:37:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lkM1Vj2bb54-KN42jYWYi8FBNx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/186a93-8e93-4652-9289-7ed51ca5af51/1/b4qh9xACOq5XZXxhw3kbpvXNMcY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/186a93-8e93-4652-9289-7ed51ca5af51/1/lkM1Vj2bb54-KN42jYWYi8FBNx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.180.80.0/22
Signature Algorithm: sha256WithRSAEncryption
97:fe:03:be:f5:cd:93:f1:7e:27:2e:ce:d9:30:bc:71:be:ea:
43:9a:43:1f:aa:6a:2a:1f:f2:fe:86:3b:08:eb:d6:60:55:0f:
8d:f7:51:d8:b8:93:fc:4d:de:47:68:f0:cb:c6:ba:17:05:bd:
23:72:6b:33:39:14:fa:c9:19:da:fa:41:02:57:12:28:0c:f2:
07:7d:db:bb:25:cc:aa:7c:7d:5d:db:81:69:f3:07:c8:9d:c0:
1a:81:f4:dd:2c:13:45:e0:71:d8:95:2c:39:ca:d6:cb:78:8c:
5c:f3:6c:5a:8a:17:6a:94:fe:db:30:cb:f1:00:07:8f:5b:fc:
12:f3:7c:9b:f4:fd:fa:d8:12:e5:4a:05:dc:01:db:94:b6:76:
c2:20:14:42:87:65:37:2c:d2:df:2a:c1:b9:a1:22:a6:a8:c2:
d7:80:8d:eb:03:97:a6:ce:68:ca:47:8b:36:0b:c0:09:66:25:
2c:aa:6a:c9:9f:c6:5d:e4:13:37:63:ae:4b:76:d6:9e:ca:27:
92:5a:b3:6a:81:2b:45:f5:db:28:38:46:b5:fa:f5:46:f2:96:
2e:bb:0d:30:1e:ba:45:01:cb:16:16:af:07:b2:1b:c5:27:f8:
6f:95:6f:9e:b1:c9:6b:62:12:d9:d4:90:61:c4:56:21:74:fb:
64:c4:2c:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 21:12:03 2024 by rpki-client on console-ams.rpki-client.org