Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/fb5910-fe14-4453-8c9c-83bf70b1fd6b/1/SHtcBn8B0NLpch9b_AWaFna6DO0.roa
File: SHtcBn8B0NLpch9b_AWaFna6DO0.roa (raw, json)
Hash identifier: 1VcwAC63dA6J6++j0J/a75ZQMqkHjtMcx6PzqaJRX+U=
Subject key identifier: 48:7B:5C:06:7F:01:D0:D2:E9:72:1F:5B:FC:05:9A:16:76:BA:0C:ED
Certificate issuer: /CN=a3608d6b0e80a6430fb6af43fae168a0e8011fee
Certificate serial: 018CC94CE186993992948119D3910675E478
Authority key identifier: A3:60:8D:6B:0E:80:A6:43:0F:B6:AF:43:FA:E1:68:A0:E8:01:1F:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o2CNaw6ApkMPtq9D-uFooOgBH-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/fb5910-fe14-4453-8c9c-83bf70b1fd6b/1/SHtcBn8B0NLpch9b_AWaFna6DO0.roa
Signing time: Tue 02 Jan 2024 08:31:48 +0000
ROA not before: Tue 02 Jan 2024 08:31:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 185.125.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/fb5910-fe14-4453-8c9c-83bf70b1fd6b/1/o2CNaw6ApkMPtq9D-uFooOgBH-4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/fb5910-fe14-4453-8c9c-83bf70b1fd6b/1/o2CNaw6ApkMPtq9D-uFooOgBH-4.mft
rsync://rpki.ripe.net/repository/DEFAULT/o2CNaw6ApkMPtq9D-uFooOgBH-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4c:e1:86:99:39:92:94:81:19:d3:91:06:75:e4:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3608d6b0e80a6430fb6af43fae168a0e8011fee
Validity
Not Before: Jan 2 08:31:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=487b5c067f01d0d2e9721f5bfc059a1676ba0ced
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:cd:35:48:1d:d5:89:66:7e:d4:fb:dd:d3:e7:
60:b4:99:61:fb:b7:0c:66:f6:ff:44:66:fb:18:39:
c1:8d:93:7e:17:c2:ca:1e:24:c3:37:62:94:1e:61:
ab:da:63:fd:96:c4:ca:b8:da:5a:c6:0f:fa:11:f1:
f2:5f:13:3d:15:0e:2b:09:b9:9c:32:e4:7a:9c:49:
8e:86:d3:11:39:86:cf:23:61:83:96:f3:4f:8b:19:
12:2d:eb:48:80:2c:e0:0d:e1:77:51:ad:32:bf:18:
b0:9a:f6:36:13:ee:5a:52:93:30:f9:b5:3f:30:ab:
20:a5:22:26:c4:dd:b5:51:88:c6:74:4c:28:f0:40:
eb:4b:1b:ff:c7:a3:14:82:00:39:a5:e5:97:e4:a9:
fe:83:37:11:ac:44:62:e7:69:8d:59:5b:32:56:64:
6b:b8:40:43:03:85:06:0e:cc:40:68:d8:73:54:75:
00:79:93:12:79:b6:a2:55:36:61:a5:f0:0b:77:41:
8d:4a:59:1a:95:ca:88:5b:dc:5c:2c:ec:fa:8c:b9:
55:10:3e:89:bc:7f:b2:15:19:94:91:60:d4:fc:aa:
a1:7e:ce:c5:83:1f:48:1f:1c:1c:64:86:60:fc:73:
81:99:6b:53:31:04:cd:4f:3c:97:e1:28:04:54:fc:
d8:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:7B:5C:06:7F:01:D0:D2:E9:72:1F:5B:FC:05:9A:16:76:BA:0C:ED
X509v3 Authority Key Identifier:
keyid:A3:60:8D:6B:0E:80:A6:43:0F:B6:AF:43:FA:E1:68:A0:E8:01:1F:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2CNaw6ApkMPtq9D-uFooOgBH-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/fb5910-fe14-4453-8c9c-83bf70b1fd6b/1/SHtcBn8B0NLpch9b_AWaFna6DO0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/fb5910-fe14-4453-8c9c-83bf70b1fd6b/1/o2CNaw6ApkMPtq9D-uFooOgBH-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.125.141.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:f1:cb:bc:13:67:e6:a6:26:30:5b:4b:04:50:1f:e5:3a:c3:
14:db:57:9e:9b:d5:08:5d:26:10:20:2c:d9:d0:f7:6d:ea:ab:
0e:e2:9c:d3:ac:c8:f5:3b:a3:6d:ca:9b:f5:d2:77:1a:1f:4d:
d1:40:cf:f8:94:62:fc:d4:f9:95:87:48:8e:ff:5c:fa:9b:fb:
13:21:25:36:75:d8:38:b6:2b:23:69:6d:dd:94:58:d3:59:98:
8c:41:60:9b:b2:a4:67:6c:34:4f:0a:9f:fb:d7:0b:e0:8f:a1:
44:5d:fa:02:01:6c:f2:a7:c3:d2:42:43:9e:4e:b3:5d:12:d8:
34:10:c7:67:14:eb:e1:16:13:d0:b9:33:d1:4c:34:85:51:99:
83:c8:d9:f1:11:21:39:79:94:87:f0:4b:30:e7:70:17:3c:3c:
f2:b2:19:10:87:91:7d:01:ec:21:eb:9c:63:da:97:f9:0c:e6:
af:ed:20:f2:df:85:e0:65:45:ab:8f:6e:c8:ad:ee:06:fd:08:
6c:94:4a:0d:21:5e:83:f3:43:30:17:69:c8:47:40:85:a0:60:
7d:63:3c:df:de:dd:33:49:e8:78:cb:26:3b:c5:07:38:f1:1e:
5e:fa:3c:84:0e:f1:fe:75:d1:24:28:b6:ba:be:1c:f8:51:1a:
e4:3f:8d:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 13:29:21 2024 by rpki-client on console-ams.rpki-client.org