Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/670b10-10eb-476f-84ef-156eda2b55b6/1/Re_9pkMTjCQO6lZuer4IK90UG8Y.roa
File: Re_9pkMTjCQO6lZuer4IK90UG8Y.roa (raw, json)
Hash identifier: Ai7fQQlmgq/SleUlLaEEHOIY2k77PoDREElCtVcAObY=
Subject key identifier: 45:EF:FD:A6:43:13:8C:24:0E:EA:56:6E:7A:BE:08:2B:DD:14:1B:C6
Certificate issuer: /CN=b5d87fdc272ae058618786e741707557bf4e1a33
Certificate serial: 0191564183B1039F74153D12E2C7C1D6E15B
Authority key identifier: B5:D8:7F:DC:27:2A:E0:58:61:87:86:E7:41:70:75:57:BF:4E:1A:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tdh_3Ccq4Fhhh4bnQXB1V79OGjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/670b10-10eb-476f-84ef-156eda2b55b6/1/Re_9pkMTjCQO6lZuer4IK90UG8Y.roa
Signing time: Thu 15 Aug 2024 13:36:59 +0000
ROA not before: Thu 15 Aug 2024 13:36:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60936
IP address blocks: 185.23.64.0/24 maxlen: 24
185.23.65.0/24 maxlen: 24
185.23.66.0/24 maxlen: 24
185.23.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/670b10-10eb-476f-84ef-156eda2b55b6/1/tdh_3Ccq4Fhhh4bnQXB1V79OGjM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/670b10-10eb-476f-84ef-156eda2b55b6/1/tdh_3Ccq4Fhhh4bnQXB1V79OGjM.mft
rsync://rpki.ripe.net/repository/DEFAULT/tdh_3Ccq4Fhhh4bnQXB1V79OGjM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:56:41:83:b1:03:9f:74:15:3d:12:e2:c7:c1:d6:e1:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5d87fdc272ae058618786e741707557bf4e1a33
Validity
Not Before: Aug 15 13:36:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=45effda643138c240eea566e7abe082bdd141bc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2e:47:ef:8c:bd:0d:02:69:d8:18:e1:4a:58:
4f:c2:c0:6a:67:0d:4c:12:99:93:6e:ea:c5:d8:33:
a4:6e:83:42:d0:9a:68:3f:95:76:e0:02:ce:4d:af:
aa:17:e5:9b:ec:ac:29:b5:c5:93:b4:0e:ef:8f:ea:
66:fd:c1:ec:05:23:fc:8a:7f:73:9c:da:76:ad:4b:
96:d8:af:d3:7a:c9:9b:23:78:2d:dc:6a:61:17:2f:
14:22:9c:da:f8:a7:9c:1e:05:72:1f:1d:e1:fb:42:
ef:f0:60:be:b5:82:04:aa:f7:44:79:0c:bf:cd:bf:
a4:c3:25:86:e5:ad:da:32:17:6a:6f:4b:96:21:4c:
17:b3:46:1e:24:bb:f3:1b:f8:9d:ee:e4:6c:cb:2f:
41:cb:92:29:fc:eb:b9:f1:ff:6d:86:e0:6d:60:27:
69:62:5b:89:10:cd:65:0f:22:03:f9:2e:55:2c:33:
fb:c8:4e:d6:f8:40:81:fe:88:9d:47:01:95:e6:69:
bf:d3:6a:2d:cd:7d:7f:34:48:ee:e6:93:5e:59:96:
69:98:32:0f:16:f6:81:a9:e5:ec:e1:45:2a:66:43:
38:6c:2d:3b:f2:0e:58:c9:60:de:98:27:2e:a4:4b:
c5:39:6e:a0:6b:bd:d2:e1:23:5f:41:cb:a2:e1:6e:
2e:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:EF:FD:A6:43:13:8C:24:0E:EA:56:6E:7A:BE:08:2B:DD:14:1B:C6
X509v3 Authority Key Identifier:
keyid:B5:D8:7F:DC:27:2A:E0:58:61:87:86:E7:41:70:75:57:BF:4E:1A:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tdh_3Ccq4Fhhh4bnQXB1V79OGjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/670b10-10eb-476f-84ef-156eda2b55b6/1/Re_9pkMTjCQO6lZuer4IK90UG8Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/670b10-10eb-476f-84ef-156eda2b55b6/1/tdh_3Ccq4Fhhh4bnQXB1V79OGjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.23.64.0/22
Signature Algorithm: sha256WithRSAEncryption
1e:28:c2:bb:13:d0:7b:68:a1:a3:42:8d:52:b3:d0:08:a3:09:
d2:bb:d5:14:21:fe:fd:28:ed:81:a5:aa:f2:4f:f0:93:59:3b:
7b:b9:c9:b6:5e:b1:5a:c6:64:23:ea:6c:05:f3:a8:a2:cf:01:
00:32:d4:8e:cd:7a:59:bd:02:82:aa:a1:b0:e2:bb:8a:94:57:
9b:5b:a5:25:97:7f:8c:5c:41:0e:05:fe:d6:c2:0f:bc:cd:cc:
0b:32:07:ed:93:5b:27:2f:70:d0:1f:7d:42:97:2c:2b:05:0f:
fb:f4:e2:c8:48:47:48:9a:64:2d:5a:18:1b:c8:d0:3e:74:e2:
77:8f:c0:23:89:eb:e3:ba:6d:1f:e7:d7:31:68:cf:e4:9b:dd:
16:82:71:ce:77:ad:7d:22:a6:96:dd:6e:c2:d5:fc:4c:49:40:
32:93:07:1b:14:58:c2:13:14:16:62:77:27:bc:ee:60:1d:05:
4c:ce:e3:65:83:55:1f:c7:5e:a2:91:b4:b8:14:c7:50:d5:bc:
23:1e:19:4d:f8:66:a1:8d:c0:16:36:d0:d3:89:38:ed:52:14:
a2:80:03:74:3d:1a:68:c7:44:1f:2a:3a:64:29:fe:a0:a3:42:
d2:02:86:df:9d:35:fa:22:db:9e:e3:ec:16:00:01:7d:15:93:
d6:d3:41:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 02:34:57 2024 by rpki-client on console-ams.rpki-client.org