Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/X5NdnVuIe84hNbtw0MmDDjYAkeY.roa
File: X5NdnVuIe84hNbtw0MmDDjYAkeY.roa (raw, json)
Hash identifier: BSK7rt912cDJcuG1vGxr0Dmz3RsR25LyVP/y7tZmXrM=
Subject key identifier: 5F:93:5D:9D:5B:88:7B:CE:21:35:BB:70:D0:C9:83:0E:36:00:91:E6
Certificate issuer: /CN=b9114dff36b948b56c211d25f398751d35b93cc2
Certificate serial: 018CC86F4E7B9A9D3457DA699200A2F59BCC
Authority key identifier: B9:11:4D:FF:36:B9:48:B5:6C:21:1D:25:F3:98:75:1D:35:B9:3C:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRFN_za5SLVsIR0l85h1HTW5PMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/X5NdnVuIe84hNbtw0MmDDjYAkeY.roa
Signing time: Tue 02 Jan 2024 04:29:46 +0000
ROA not before: Tue 02 Jan 2024 04:29:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51088
IP address blocks: 185.46.173.0/24 maxlen: 24
2a12:4180::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/uRFN_za5SLVsIR0l85h1HTW5PMI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/uRFN_za5SLVsIR0l85h1HTW5PMI.mft
rsync://rpki.ripe.net/repository/DEFAULT/uRFN_za5SLVsIR0l85h1HTW5PMI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:4e:7b:9a:9d:34:57:da:69:92:00:a2:f5:9b:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9114dff36b948b56c211d25f398751d35b93cc2
Validity
Not Before: Jan 2 04:29:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5f935d9d5b887bce2135bb70d0c9830e360091e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:67:b6:b0:84:88:30:91:7c:16:cf:1d:04:9c:
cf:62:85:be:b7:3b:c8:72:1f:7b:34:24:9d:c6:f9:
bd:3a:c0:6d:ed:de:55:d4:85:36:e4:93:8d:b8:b0:
30:70:48:d0:74:93:6c:e3:1b:70:89:db:1f:11:af:
b3:74:d6:97:67:33:35:30:34:31:2b:6c:a8:5e:29:
91:04:b0:1a:f9:40:62:75:a2:47:5e:72:2e:5d:a3:
ad:aa:00:06:07:83:54:d6:e2:31:86:4e:c7:f5:fc:
58:ca:64:06:0e:a4:75:0d:59:81:bd:35:92:79:c4:
d4:5e:63:12:d5:c2:c5:b7:5e:1e:9a:39:bb:4a:ed:
e9:1b:d0:34:b3:39:ff:03:93:e5:ee:ce:44:c0:06:
a6:b6:d5:d1:d0:fa:cb:51:c5:7b:ff:0e:bf:9f:b9:
b2:f7:e4:d0:6b:db:8c:39:5c:7c:8b:93:c3:58:f6:
39:03:a7:4a:07:ee:51:34:3b:d4:a9:6f:25:08:e6:
41:34:27:c4:72:76:10:6a:99:db:e6:87:90:f9:d5:
be:48:a5:0e:ef:f5:05:c4:4f:93:e0:22:b5:59:65:
e7:66:ac:93:8b:92:cd:a1:99:83:0d:e4:58:e9:a5:
02:7a:d0:3a:0d:36:91:7a:56:84:7d:16:25:d0:ab:
2b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:93:5D:9D:5B:88:7B:CE:21:35:BB:70:D0:C9:83:0E:36:00:91:E6
X509v3 Authority Key Identifier:
keyid:B9:11:4D:FF:36:B9:48:B5:6C:21:1D:25:F3:98:75:1D:35:B9:3C:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRFN_za5SLVsIR0l85h1HTW5PMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/X5NdnVuIe84hNbtw0MmDDjYAkeY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/uRFN_za5SLVsIR0l85h1HTW5PMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.46.173.0/24
IPv6:
2a12:4180::/29
Signature Algorithm: sha256WithRSAEncryption
4e:0d:78:8a:cd:02:8e:ed:80:4f:8c:6a:8c:da:66:84:80:f4:
69:bf:ce:3c:75:a9:d2:80:bd:8d:fd:00:73:c3:f3:21:27:3a:
17:36:7b:21:b8:df:6e:1b:8a:08:a8:e0:e9:df:10:83:c7:f8:
6f:e7:7a:d9:bd:38:f2:8e:a0:80:be:99:18:ec:fe:20:c5:68:
41:49:bf:d3:62:09:c3:01:dc:52:a2:97:b1:38:d3:b6:16:89:
6c:05:8c:c9:07:ed:af:9e:15:50:dc:34:ec:77:03:df:68:a4:
a1:9d:d5:32:81:9e:1c:79:a7:f4:47:2e:29:c8:8f:9b:63:66:
e9:4c:ac:06:91:54:92:db:6b:41:90:13:15:41:11:7f:c0:7c:
71:3d:15:b6:2f:c9:0c:db:b4:f8:c2:8c:90:fa:5f:24:4a:e8:
c5:6a:be:00:02:02:4e:ac:c0:a5:ff:dc:a0:ea:ec:0a:ed:4e:
4f:a6:00:5f:6e:ea:25:2e:47:92:a8:3c:b4:6a:69:17:d9:1e:
ce:94:af:f6:f0:c6:59:a7:b9:02:03:ea:7d:a3:81:3b:8a:1f:
3c:27:3d:55:e1:d2:ed:f0:2f:36:b5:53:6e:38:29:28:7b:91:
24:94:70:bd:ba:77:a9:e1:59:c1:c7:02:ac:66:a6:ed:68:0a:
8c:e9:9e:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 17:16:58 2024 by rpki-client on console-fra.rpki-client.org