Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/a2fc18-534b-4454-9bd1-fe6bb049337d/1/98sJMxwYpOFNo1ngvKhvoqkSorM.roa
File: 98sJMxwYpOFNo1ngvKhvoqkSorM.roa (raw, json)
Hash identifier: nRTwT2ccVlkxJ4XL5g8B2if9Z+u4yMkN5iJ0YCEguaI=
Subject key identifier: F7:CB:09:33:1C:18:A4:E1:4D:A3:59:E0:BC:A8:6F:A2:A9:12:A2:B3
Certificate issuer: /CN=505ad17f4c620d58d453d5f6d7c9233fce126499
Certificate serial: 018CC2DB510DAAB02C078C7CDE7F13CD12C3
Authority key identifier: 50:5A:D1:7F:4C:62:0D:58:D4:53:D5:F6:D7:C9:23:3F:CE:12:64:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFrRf0xiDVjUU9X218kjP84SZJk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/a2fc18-534b-4454-9bd1-fe6bb049337d/1/98sJMxwYpOFNo1ngvKhvoqkSorM.roa
Signing time: Mon 01 Jan 2024 02:30:02 +0000
ROA not before: Mon 01 Jan 2024 02:30:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61047
IP address blocks: 185.43.44.0/22 maxlen: 24
185.189.188.0/22 maxlen: 24
185.71.224.0/22 maxlen: 24
185.83.96.0/22 maxlen: 24
91.220.197.0/24 maxlen: 24
185.124.200.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/a2fc18-534b-4454-9bd1-fe6bb049337d/1/UFrRf0xiDVjUU9X218kjP84SZJk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/a2fc18-534b-4454-9bd1-fe6bb049337d/1/UFrRf0xiDVjUU9X218kjP84SZJk.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFrRf0xiDVjUU9X218kjP84SZJk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:51:0d:aa:b0:2c:07:8c:7c:de:7f:13:cd:12:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=505ad17f4c620d58d453d5f6d7c9233fce126499
Validity
Not Before: Jan 1 02:30:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f7cb09331c18a4e14da359e0bca86fa2a912a2b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9a:e5:18:3b:a9:42:02:1b:eb:87:7a:00:6a:
f0:74:3f:55:03:7f:57:1d:ef:e1:be:2a:ad:6b:01:
5d:fb:1f:1b:12:1f:24:f7:69:2a:7e:3a:99:65:44:
78:da:12:ff:dd:fd:b1:cd:0a:04:d8:e9:78:ef:45:
d8:43:0b:d7:d2:3b:2d:0c:48:47:98:07:e7:8c:f6:
fd:51:45:8e:64:20:1b:26:c1:66:91:66:6d:bc:04:
91:27:39:88:0c:7a:f8:f9:ce:bf:1c:a2:95:3a:44:
30:c4:ce:e5:a3:b5:b6:06:dd:c4:c5:8b:3a:d2:79:
d5:6e:ea:0f:88:ba:16:68:e3:ed:ba:3d:37:93:32:
09:0b:55:c6:5d:5a:dd:6c:e1:1c:2e:05:1c:57:32:
c5:4d:3a:70:03:ca:c2:8d:69:48:f1:9c:97:48:9b:
fc:fb:f8:71:be:89:f8:fb:f2:b0:51:a3:03:5f:de:
77:1b:3f:44:b7:ca:a9:65:06:d7:06:23:b6:26:7f:
ee:6f:3b:75:b6:71:a1:72:93:a4:1a:6c:97:5d:06:
f7:c9:c5:0a:ae:4d:74:88:87:7a:b9:0d:19:cd:aa:
9e:ac:e2:d3:45:da:87:68:7d:a0:ea:e0:d2:2b:91:
47:b3:98:dc:3f:a1:7b:d9:27:61:30:49:eb:b3:c0:
9a:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:CB:09:33:1C:18:A4:E1:4D:A3:59:E0:BC:A8:6F:A2:A9:12:A2:B3
X509v3 Authority Key Identifier:
keyid:50:5A:D1:7F:4C:62:0D:58:D4:53:D5:F6:D7:C9:23:3F:CE:12:64:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFrRf0xiDVjUU9X218kjP84SZJk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a2fc18-534b-4454-9bd1-fe6bb049337d/1/98sJMxwYpOFNo1ngvKhvoqkSorM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a2fc18-534b-4454-9bd1-fe6bb049337d/1/UFrRf0xiDVjUU9X218kjP84SZJk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.197.0/24
185.43.44.0/22
185.71.224.0/22
185.83.96.0/22
185.124.200.0/22
185.189.188.0/22
Signature Algorithm: sha256WithRSAEncryption
b1:3b:eb:62:c8:4f:83:f4:67:2d:1c:d3:f3:47:b1:26:5b:38:
3d:23:29:a7:bc:87:b6:33:03:72:e9:c9:6c:ce:12:ff:68:25:
bf:b9:60:64:0f:68:db:ab:a8:83:23:8c:0c:a8:eb:64:ca:48:
47:aa:18:ff:16:b2:35:ec:20:45:96:01:97:fa:31:b4:4f:1d:
e2:76:8b:14:28:b7:88:01:ce:63:49:89:d7:bb:fe:95:02:69:
e9:1c:95:e2:9d:66:b5:2a:6f:78:8a:b8:08:a6:27:92:3e:37:
3a:cb:30:c3:51:cd:f5:db:57:56:b5:41:2f:fa:a8:39:67:49:
c4:f4:f1:6c:17:09:cf:a1:96:53:63:2b:61:00:d6:9d:33:4a:
36:bf:23:1c:98:78:93:1e:72:c7:ce:76:61:ca:d3:6a:c0:3a:
d6:3f:d9:79:6e:5b:8f:15:f9:e4:83:44:f9:76:43:71:8c:e0:
e6:7e:e9:15:eb:d5:15:77:fb:4e:31:11:75:1d:c4:ff:4d:30:
c3:30:ca:fe:c2:1a:be:10:7f:68:fa:b3:e6:b8:c0:36:b7:59:
09:d6:63:d7:70:51:17:75:7d:96:32:9a:52:10:04:eb:1e:b6:
e1:3a:51:9e:81:1a:e4:2a:6a:18:fe:0b:43:90:01:44:a4:62:
e3:1a:ec:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 18:31:55 2024 by rpki-client on console-ams.rpki-client.org