Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/OuPcCJEVHmxiBaWVqeNj7qpBm60.roa
File: OuPcCJEVHmxiBaWVqeNj7qpBm60.roa (raw, json)
Hash identifier: vb/yI3LxNve+3k+ns4OyfvzouY0F1sF9sJKg49PguvA=
Subject key identifier: 3A:E3:DC:08:91:15:1E:6C:62:05:A5:95:A9:E3:63:EE:AA:41:9B:AD
Certificate issuer: /CN=b9114dff36b948b56c211d25f398751d35b93cc2
Certificate serial: 018CC86F4EB5911D3DE17110225371C94649
Authority key identifier: B9:11:4D:FF:36:B9:48:B5:6C:21:1D:25:F3:98:75:1D:35:B9:3C:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRFN_za5SLVsIR0l85h1HTW5PMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/OuPcCJEVHmxiBaWVqeNj7qpBm60.roa
Signing time: Tue 02 Jan 2024 04:29:47 +0000
ROA not before: Tue 02 Jan 2024 04:29:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61180
IP address blocks: 185.46.173.0/27 maxlen: 29
185.46.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/uRFN_za5SLVsIR0l85h1HTW5PMI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/uRFN_za5SLVsIR0l85h1HTW5PMI.mft
rsync://rpki.ripe.net/repository/DEFAULT/uRFN_za5SLVsIR0l85h1HTW5PMI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:02:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:4e:b5:91:1d:3d:e1:71:10:22:53:71:c9:46:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9114dff36b948b56c211d25f398751d35b93cc2
Validity
Not Before: Jan 2 04:29:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3ae3dc0891151e6c6205a595a9e363eeaa419bad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:1c:cd:a0:58:4d:df:2d:e4:ff:b9:e2:14:58:
4a:71:7b:a0:47:85:ae:45:56:62:ee:0f:19:f8:fc:
a6:e3:7c:ff:b8:8a:92:41:ae:0b:9e:47:c7:e3:81:
1b:30:f6:36:91:50:ce:85:ff:dd:db:46:fe:45:b0:
30:5a:0b:6a:b3:bc:5d:7d:e7:14:23:58:1b:bd:4c:
f8:92:92:d8:48:c0:37:fd:01:8e:ae:5b:02:f7:38:
2a:29:f9:2a:e9:34:16:3d:c0:22:6c:a2:76:08:91:
9b:04:51:58:46:ec:f7:46:9f:1a:fb:a3:ee:d9:57:
53:8e:d4:42:f2:a4:0d:4b:0d:67:25:00:bf:82:47:
5a:73:89:50:8b:c7:04:a2:9d:76:f3:f5:60:c7:4d:
de:98:49:21:4c:96:96:c4:ac:f0:32:86:db:75:b9:
25:db:4d:75:80:2c:ac:36:0d:99:67:ad:53:ed:21:
1c:fb:5f:72:fb:68:26:a7:2d:1e:90:32:54:58:82:
db:26:40:e5:f4:da:de:ed:a4:1d:40:7f:42:ec:fd:
0f:cd:b4:c7:2b:e5:db:55:24:97:54:74:9f:6f:c6:
c3:dc:8a:d2:ed:fa:dc:5a:a0:26:17:44:72:ef:29:
8e:2a:51:f9:29:90:0d:50:a2:c4:64:b2:43:66:67:
e7:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:E3:DC:08:91:15:1E:6C:62:05:A5:95:A9:E3:63:EE:AA:41:9B:AD
X509v3 Authority Key Identifier:
keyid:B9:11:4D:FF:36:B9:48:B5:6C:21:1D:25:F3:98:75:1D:35:B9:3C:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRFN_za5SLVsIR0l85h1HTW5PMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/OuPcCJEVHmxiBaWVqeNj7qpBm60.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/uRFN_za5SLVsIR0l85h1HTW5PMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.46.173.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:c4:49:c1:71:a8:6c:2b:03:05:d0:0b:eb:51:d2:e9:26:4f:
07:9c:44:56:02:3a:8d:82:7c:69:7c:e7:fe:22:24:c1:99:8f:
f8:ec:1c:cd:5b:3b:21:e3:9b:5c:e5:b7:6e:51:a2:d0:77:47:
d0:90:ce:55:d0:6f:d5:90:40:68:2a:4e:fa:04:71:5a:b1:33:
20:1e:41:5d:e2:f1:33:35:24:67:25:3b:4e:68:76:70:44:9c:
14:12:fb:b4:b7:45:50:e5:25:e9:ea:cf:2f:4f:de:12:dd:25:
da:ba:51:de:a4:f4:aa:36:4d:66:2d:99:e1:58:44:5b:68:02:
cd:6d:0e:64:99:f7:8d:3e:e9:b9:51:3b:34:cc:b0:ed:29:10:
c0:e8:fd:3b:4b:52:68:20:b1:f7:0a:97:b1:99:fe:54:01:06:
e6:bd:ef:0c:35:e3:22:a3:9b:f7:e8:99:c7:94:8b:73:4c:ae:
98:e6:7b:95:91:93:5b:75:23:a8:cb:4d:cb:3c:cc:ec:02:f8:
f5:ec:44:fc:bc:4e:04:df:03:37:7e:ed:92:62:ac:38:6b:91:
d0:01:74:d8:cc:e9:59:da:06:b1:dd:4a:68:a1:5b:5e:d3:c8:
36:94:03:a4:dd:af:b1:d9:23:07:bd:6e:14:b2:45:db:80:b7:
62:43:ba:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:26:10 2024 by rpki-client on console-fra.rpki-client.org