Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/kFG1tA7PUSiD5rm2IQPzl3T0SUU.roa
File: kFG1tA7PUSiD5rm2IQPzl3T0SUU.roa (raw, json)
Hash identifier: jFthIR3RUFnj4V87P0OWZMUK8Lw0wqIdffJMsZHtOBk=
Subject key identifier: 90:51:B5:B4:0E:CF:51:28:83:E6:B9:B6:21:03:F3:97:74:F4:49:45
Certificate issuer: /CN=9b89b8cf47f7c485d628d0a359a16a815cd004ab
Certificate serial: 0190CBB2EC02AA4E17CC8C6EA33FB4BB86DC
Authority key identifier: 9B:89:B8:CF:47:F7:C4:85:D6:28:D0:A3:59:A1:6A:81:5C:D0:04:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m4m4z0f3xIXWKNCjWaFqgVzQBKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/kFG1tA7PUSiD5rm2IQPzl3T0SUU.roa
Signing time: Fri 19 Jul 2024 15:53:38 +0000
ROA not before: Fri 19 Jul 2024 15:53:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 5.180.188.0/22 maxlen: 24
185.185.77.0/24 maxlen: 24
185.185.78.0/24 maxlen: 24
2a0f:a0c0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/m4m4z0f3xIXWKNCjWaFqgVzQBKs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/m4m4z0f3xIXWKNCjWaFqgVzQBKs.mft
rsync://rpki.ripe.net/repository/DEFAULT/m4m4z0f3xIXWKNCjWaFqgVzQBKs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Oct 2024 12:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:cb:b2:ec:02:aa:4e:17:cc:8c:6e:a3:3f:b4:bb:86:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b89b8cf47f7c485d628d0a359a16a815cd004ab
Validity
Not Before: Jul 19 15:53:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9051b5b40ecf512883e6b9b62103f39774f44945
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:9f:12:41:c2:39:35:1c:48:e0:30:cd:d3:b9:
ae:ef:16:c4:5a:ca:aa:f8:70:fe:7a:aa:0c:78:4f:
ea:6e:83:14:2c:09:fa:92:76:2b:73:11:9c:d3:4f:
67:b2:61:01:22:51:fb:f0:ab:dd:3d:56:b3:a8:10:
a4:d4:c6:15:1e:17:57:3a:5f:58:21:c2:47:8e:fe:
05:26:4c:4e:d0:8e:55:3f:94:d4:4d:d5:35:f0:d2:
47:50:4b:04:d1:98:85:32:e4:e5:0f:24:cc:39:97:
8d:33:38:66:d2:2f:88:13:dd:57:38:ea:32:0e:3b:
69:db:9f:ac:67:0b:c6:b9:3f:89:18:ad:99:e7:25:
dc:34:e3:60:9f:52:c6:8d:e5:a7:19:f8:0e:84:3b:
e7:f4:8f:3c:ea:04:b1:e2:f2:92:3c:b8:93:8c:0a:
fe:af:8d:8f:2d:dd:79:8b:32:f6:56:88:db:a7:73:
46:12:f8:f2:a2:4b:e2:63:27:5f:58:84:90:4f:8f:
6f:4e:92:39:a4:84:dc:8d:87:58:54:1e:af:37:e1:
b1:b1:69:11:8e:b8:19:d8:62:8f:0a:1a:75:70:04:
29:74:96:c4:3c:d9:0d:5a:a0:c7:37:19:92:d5:ef:
6f:d2:52:27:64:a6:6e:ff:ff:bf:ae:9f:9c:6d:d3:
df:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:51:B5:B4:0E:CF:51:28:83:E6:B9:B6:21:03:F3:97:74:F4:49:45
X509v3 Authority Key Identifier:
keyid:9B:89:B8:CF:47:F7:C4:85:D6:28:D0:A3:59:A1:6A:81:5C:D0:04:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m4m4z0f3xIXWKNCjWaFqgVzQBKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/kFG1tA7PUSiD5rm2IQPzl3T0SUU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/m4m4z0f3xIXWKNCjWaFqgVzQBKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.188.0/22
185.185.77.0-185.185.78.255
IPv6:
2a0f:a0c0::/29
Signature Algorithm: sha256WithRSAEncryption
10:86:75:f5:1e:cb:22:52:1a:d0:36:c4:3f:58:a7:6e:02:5d:
9f:3b:b0:40:b4:97:93:cb:d6:86:a2:fd:d5:b0:d1:18:32:cc:
8f:98:77:da:35:8c:65:24:f2:f5:36:0b:7c:4b:f8:43:23:67:
53:fe:a3:70:fb:a9:78:31:a6:eb:e6:ba:5b:17:d4:e9:c4:33:
72:00:e3:2b:f1:34:65:47:50:2a:14:96:84:b0:0b:16:8f:12:
b5:f4:59:f4:2d:76:f9:27:4c:37:ae:ae:ee:0c:2c:d8:85:de:
d5:a9:5e:fd:dd:d5:1e:c1:d0:78:11:f5:0f:7a:b4:aa:51:bd:
cc:02:42:08:4f:94:02:76:a3:54:27:72:7d:67:94:92:15:18:
99:39:ea:f4:0c:84:33:0c:3e:ea:a1:2d:4e:22:c8:c3:ae:a4:
ed:66:34:41:61:e0:28:10:62:bb:be:9f:88:25:03:d1:8a:61:
0c:9a:80:07:43:6b:1a:47:83:ef:82:1e:c2:c4:d4:2a:ed:ea:
a7:db:40:df:04:aa:17:3a:cb:27:82:1c:94:01:09:a4:0c:d8:
76:0d:4d:c7:77:1a:b5:bc:73:08:79:b8:ad:3e:0e:81:55:58:
98:04:73:8f:3b:61:cb:24:89:91:c8:9c:aa:7c:17:b5:4e:32:
88:ff:0d:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 21:47:53 2024 by rpki-client on console-fra.rpki-client.org