Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/_0-NFGXafQpBEkctMW7wUBHUr-I.roa
File: _0-NFGXafQpBEkctMW7wUBHUr-I.roa (raw, json)
Hash identifier: XXk0Ibo+QiGbUgt9u907pGThlK1Q4xy2pBk0f/F95cY=
Subject key identifier: FF:4F:8D:14:65:DA:7D:0A:41:12:47:2D:31:6E:F0:50:11:D4:AF:E2
Certificate issuer: /CN=9b89b8cf47f7c485d628d0a359a16a815cd004ab
Certificate serial: 018CC870F173A6FE6B2D6B8AF5CCC4491E11
Authority key identifier: 9B:89:B8:CF:47:F7:C4:85:D6:28:D0:A3:59:A1:6A:81:5C:D0:04:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m4m4z0f3xIXWKNCjWaFqgVzQBKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/_0-NFGXafQpBEkctMW7wUBHUr-I.roa
Signing time: Tue 02 Jan 2024 04:31:34 +0000
ROA not before: Tue 02 Jan 2024 04:31:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 185.185.78.0/24 maxlen: 24
185.185.77.0/24 maxlen: 24
5.180.188.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/m4m4z0f3xIXWKNCjWaFqgVzQBKs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/m4m4z0f3xIXWKNCjWaFqgVzQBKs.mft
rsync://rpki.ripe.net/repository/DEFAULT/m4m4z0f3xIXWKNCjWaFqgVzQBKs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 16:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:70:f1:73:a6:fe:6b:2d:6b:8a:f5:cc:c4:49:1e:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b89b8cf47f7c485d628d0a359a16a815cd004ab
Validity
Not Before: Jan 2 04:31:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ff4f8d1465da7d0a4112472d316ef05011d4afe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:71:dc:f1:16:ae:7d:89:1d:94:a2:57:85:3d:
0e:77:68:ff:3a:ee:70:30:03:65:3a:4d:4a:3e:fb:
0e:05:2f:12:80:90:4a:69:41:16:d6:6c:c1:c2:ba:
54:14:d6:94:53:25:a2:ff:6a:f2:b4:77:27:ca:c6:
70:0e:c4:e5:78:6f:27:0c:9f:13:64:0d:9b:09:7f:
d2:68:4b:03:32:d0:46:2e:33:62:ab:da:1f:95:19:
19:d5:15:2b:d3:a4:7e:6c:8a:a4:47:64:18:88:df:
af:d9:d3:f0:e7:65:f3:e8:c1:d9:4f:93:58:d9:e3:
4b:fe:70:29:a1:22:3b:d8:16:dc:7a:ea:fc:51:9b:
06:3a:bf:ef:85:2c:3c:2d:2f:cc:11:b8:4e:e1:30:
96:c2:8a:40:44:cc:2e:8b:c5:43:e9:32:4a:1a:61:
36:f6:ef:e0:1f:4d:ab:86:dd:30:9f:3c:24:4d:80:
8f:e6:10:a6:82:e3:70:4f:b1:03:29:25:4e:ea:03:
6f:90:ac:d4:b3:2f:12:28:8f:13:23:41:18:b8:51:
94:d8:9f:13:c5:20:76:3f:dc:de:fa:34:9c:45:0e:
e1:29:56:d4:35:33:c4:fa:59:b2:7f:c5:e5:2f:af:
d1:c4:4b:48:8b:68:23:39:d9:60:83:59:be:7b:0e:
9b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:4F:8D:14:65:DA:7D:0A:41:12:47:2D:31:6E:F0:50:11:D4:AF:E2
X509v3 Authority Key Identifier:
keyid:9B:89:B8:CF:47:F7:C4:85:D6:28:D0:A3:59:A1:6A:81:5C:D0:04:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m4m4z0f3xIXWKNCjWaFqgVzQBKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/_0-NFGXafQpBEkctMW7wUBHUr-I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/m4m4z0f3xIXWKNCjWaFqgVzQBKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.188.0/22
185.185.77.0-185.185.78.255
Signature Algorithm: sha256WithRSAEncryption
a4:82:3f:10:f5:a0:9b:e2:c7:3c:09:a6:3c:dd:50:0c:69:16:
7b:10:34:d0:19:c8:6f:28:9c:4f:16:02:80:b4:2d:8f:79:fb:
ef:8a:4d:76:52:26:ee:22:e2:54:d3:d9:de:33:20:a0:9d:70:
aa:20:6a:12:9b:6e:0b:a7:77:a4:5b:9f:c9:e8:cc:7a:92:5f:
65:77:71:a8:7a:4f:e2:a4:db:8c:52:dc:1d:d7:2b:0b:bd:aa:
88:d9:87:d6:0f:5d:7e:bf:54:99:da:e4:e6:76:33:b9:62:2d:
d0:2f:98:ef:9c:0e:de:0c:aa:70:72:7e:fb:d9:4f:dc:3f:6a:
da:54:75:4d:b9:d1:ff:07:eb:41:db:2c:26:8c:ec:84:56:50:
ee:92:8d:2a:34:34:a3:c5:04:ac:d9:ac:f9:65:e7:cb:6b:ad:
40:95:1e:1a:cb:8d:53:f3:d5:ee:92:73:a1:4c:13:73:4b:c5:
59:3f:13:1e:27:b2:44:f0:28:d8:6f:91:d3:cd:fb:2c:f1:a1:
27:e1:29:b3:0b:ba:44:7a:98:e8:d3:32:38:a4:4c:ed:e9:e9:
3c:ca:84:28:b7:71:d2:60:e2:a8:1d:43:8b:a1:d9:ce:e7:40:
ab:7f:27:b7:c7:49:3e:ff:35:4d:3f:87:f4:2b:bf:69:01:01:
37:09:19:c7
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu May 2 21:14:38 2024 by rpki-client on console-ams.rpki-client.org