Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/f90fda-034d-44e0-a812-cd630dbc1d18/1/Hb1Dq0GWuCsDbCi9yzVtD2qReSQ.roa
File: Hb1Dq0GWuCsDbCi9yzVtD2qReSQ.roa (raw, json)
Hash identifier: /lDBikgy51SO5TJiFnhYMRCjG3ci9zvqedRWLLH+HrM=
Subject key identifier: 1D:BD:43:AB:41:96:B8:2B:03:6C:28:BD:CB:35:6D:0F:6A:91:79:24
Certificate issuer: /CN=e14939b83595e2efb69456bcdf23866a5079f6f5
Certificate serial: 018CC56DEC699BE178E11BDA20D9D8EBE7E1
Authority key identifier: E1:49:39:B8:35:95:E2:EF:B6:94:56:BC:DF:23:86:6A:50:79:F6:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Uk5uDWV4u-2lFa83yOGalB59vU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/f90fda-034d-44e0-a812-cd630dbc1d18/1/Hb1Dq0GWuCsDbCi9yzVtD2qReSQ.roa
Signing time: Mon 01 Jan 2024 14:29:24 +0000
ROA not before: Mon 01 Jan 2024 14:29:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206841
IP address blocks: 185.174.186.0/24 maxlen: 24
185.174.184.0/24 maxlen: 24
185.174.184.0/22 maxlen: 22
185.174.185.0/24 maxlen: 24
185.174.187.0/24 maxlen: 24
2a0b:b300::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/f90fda-034d-44e0-a812-cd630dbc1d18/1/4Uk5uDWV4u-2lFa83yOGalB59vU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/f90fda-034d-44e0-a812-cd630dbc1d18/1/4Uk5uDWV4u-2lFa83yOGalB59vU.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Uk5uDWV4u-2lFa83yOGalB59vU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:46:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6d:ec:69:9b:e1:78:e1:1b:da:20:d9:d8:eb:e7:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e14939b83595e2efb69456bcdf23866a5079f6f5
Validity
Not Before: Jan 1 14:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1dbd43ab4196b82b036c28bdcb356d0f6a917924
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3f:56:2c:ca:6e:2b:61:95:76:84:11:ed:b2:
9e:10:88:26:98:ea:a9:79:1e:f3:ce:5d:ba:b7:e9:
cb:d2:09:64:e4:7f:8a:0f:0b:a7:e6:04:fd:2f:96:
07:3a:74:b5:6f:ba:93:73:bb:d8:1e:7e:f9:0a:d9:
95:06:d2:49:5f:51:fe:0b:88:70:92:27:7e:96:c7:
2a:b9:bd:25:b7:a8:f5:20:18:27:58:a4:dd:29:18:
e1:9f:cc:2a:88:db:a2:b7:c5:97:63:c1:50:d9:5d:
cb:be:3f:73:bd:21:4a:c0:38:0e:a6:46:f7:cd:34:
50:34:5a:31:f1:6d:b1:56:59:3d:c5:05:8e:d4:aa:
f2:76:fd:5b:86:26:b0:df:94:3d:8e:b0:ee:c4:0e:
55:3f:63:87:95:76:9e:d3:63:76:01:71:9f:09:72:
2c:29:98:b2:43:6b:82:ef:22:0f:e7:94:6e:02:54:
e0:7d:01:b2:1d:67:70:6c:74:2b:fd:19:25:5f:d9:
51:06:1d:a2:93:4a:67:c4:a4:8c:76:18:5f:49:a3:
f5:7a:4b:e5:a0:06:6e:df:9d:d4:33:0c:f4:eb:fd:
bc:ec:8a:d4:37:3c:aa:36:74:cc:be:43:9d:a6:bd:
b5:f3:4d:fe:ed:69:18:49:c6:a5:91:0b:ad:2d:2f:
89:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:BD:43:AB:41:96:B8:2B:03:6C:28:BD:CB:35:6D:0F:6A:91:79:24
X509v3 Authority Key Identifier:
keyid:E1:49:39:B8:35:95:E2:EF:B6:94:56:BC:DF:23:86:6A:50:79:F6:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Uk5uDWV4u-2lFa83yOGalB59vU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/f90fda-034d-44e0-a812-cd630dbc1d18/1/Hb1Dq0GWuCsDbCi9yzVtD2qReSQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/f90fda-034d-44e0-a812-cd630dbc1d18/1/4Uk5uDWV4u-2lFa83yOGalB59vU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.174.184.0/22
IPv6:
2a0b:b300::/29
Signature Algorithm: sha256WithRSAEncryption
33:3c:b4:b0:c1:df:16:74:de:3f:0a:33:b3:40:35:8a:7f:1a:
10:51:ae:64:c2:63:d5:6c:6d:34:d8:ae:0c:85:71:17:15:f2:
a9:f3:85:62:05:05:ee:19:07:dc:44:ac:09:33:5c:c9:48:d8:
5e:f8:44:ea:7c:f4:a0:2b:5e:ff:2d:b7:4f:07:cc:ac:67:d0:
57:49:4e:2b:8e:e1:3b:b3:ee:a6:28:ec:b9:92:8f:0f:97:85:
11:6b:80:7c:ea:a2:aa:ff:d2:db:fa:0f:f4:ba:0b:3d:8c:57:
6e:16:b1:dd:bf:21:fc:87:f9:62:6e:24:85:30:3b:f0:5c:56:
e2:35:ae:95:9a:3e:22:be:69:22:ef:ea:f4:0b:c1:02:f4:71:
1e:59:c7:0c:7b:26:1b:6a:e2:70:8e:fd:cc:9f:09:b7:41:b5:
4d:0d:e8:21:1d:b0:c5:8f:9b:3d:8a:f9:e3:5d:24:f7:50:11:
80:bd:82:95:fc:94:ad:42:42:18:35:a3:07:08:ff:44:cb:53:
49:db:eb:05:19:cd:d1:cd:7c:98:93:c2:89:df:bc:2b:db:ed:
4d:37:d7:c6:df:ef:9d:e6:82:79:3a:77:90:1e:25:c0:20:da:
02:a8:4c:b1:93:a0:2a:d7:1e:1e:c4:51:2e:70:0b:db:20:49:
ff:93:42:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:13:55 2024 by rpki-client on console-ams.rpki-client.org