Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/1ctpF4qbES0uhVgaWT70mRT3eto.roa
File: 1ctpF4qbES0uhVgaWT70mRT3eto.roa (raw, json)
Hash identifier: PK8LOJaDo9tm6Xn25GLaqg3rfxRH8R/d2CIwxxqNg8k=
Subject key identifier: D5:CB:69:17:8A:9B:11:2D:2E:85:58:1A:59:3E:F4:99:14:F7:7A:DA
Certificate issuer: /CN=09c746f67b7ac56ea6dd85951ec022cbbd67af06
Certificate serial: 018CC6B935C228A0CCECFBB3121ECDD28374
Authority key identifier: 09:C7:46:F6:7B:7A:C5:6E:A6:DD:85:95:1E:C0:22:CB:BD:67:AF:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CcdG9nt6xW6m3YWVHsAiy71nrwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/1ctpF4qbES0uhVgaWT70mRT3eto.roa
Signing time: Mon 01 Jan 2024 20:31:15 +0000
ROA not before: Mon 01 Jan 2024 20:31:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210759
IP address blocks: 185.204.97.0/24 maxlen: 24
185.204.96.0/24 maxlen: 24
185.204.98.0/24 maxlen: 24
2a0a:f540::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/CcdG9nt6xW6m3YWVHsAiy71nrwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/CcdG9nt6xW6m3YWVHsAiy71nrwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CcdG9nt6xW6m3YWVHsAiy71nrwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 01:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:35:c2:28:a0:cc:ec:fb:b3:12:1e:cd:d2:83:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09c746f67b7ac56ea6dd85951ec022cbbd67af06
Validity
Not Before: Jan 1 20:31:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d5cb69178a9b112d2e85581a593ef49914f77ada
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:08:6f:27:57:33:0e:e8:da:b4:fc:1a:98:bb:
93:a3:45:b1:f1:d0:b9:64:e9:60:6f:ae:22:cd:8b:
82:a5:99:7b:cc:c9:fc:8f:de:71:80:60:fa:74:ba:
f2:91:89:88:50:c7:f0:98:3c:42:31:67:4a:79:06:
d0:40:23:19:9d:9a:05:4d:6c:49:f9:c4:70:b2:ef:
75:72:d2:17:14:ec:38:c4:91:31:f7:c7:ca:82:1e:
e5:ba:e7:8e:a9:be:8f:dc:7d:77:b8:c7:4e:c1:70:
03:18:0e:c1:65:83:c4:de:2a:8c:10:1a:a1:51:2f:
8a:97:30:16:81:cb:61:a5:b5:42:93:18:85:44:c5:
93:6b:71:33:b9:d5:97:ac:8b:14:f5:c0:b9:3c:a5:
9e:34:a8:d8:c6:eb:43:e8:73:73:02:8d:ac:ef:9c:
ed:52:60:37:84:1c:3b:b9:14:bf:d9:c9:a0:d1:a0:
9c:55:47:2e:52:45:d7:f3:db:49:b0:bd:91:e9:12:
d1:99:60:71:19:98:96:11:69:68:1a:d1:c4:f0:31:
65:98:b9:32:e0:39:6e:f5:da:8b:7f:a8:91:24:5f:
cc:8e:e6:05:1c:b0:8a:97:60:5f:ca:9c:40:79:35:
66:2d:0e:d4:f7:48:6f:b2:82:61:ee:02:86:c9:64:
0e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:CB:69:17:8A:9B:11:2D:2E:85:58:1A:59:3E:F4:99:14:F7:7A:DA
X509v3 Authority Key Identifier:
keyid:09:C7:46:F6:7B:7A:C5:6E:A6:DD:85:95:1E:C0:22:CB:BD:67:AF:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CcdG9nt6xW6m3YWVHsAiy71nrwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/1ctpF4qbES0uhVgaWT70mRT3eto.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/CcdG9nt6xW6m3YWVHsAiy71nrwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.204.96.0-185.204.98.255
IPv6:
2a0a:f540::/29
Signature Algorithm: sha256WithRSAEncryption
28:b5:28:af:65:c0:fb:33:c0:e7:0c:23:95:9e:7d:71:a1:b5:
e9:f5:cc:8d:62:1c:fd:6c:a4:c8:9f:c5:a2:14:4f:8b:31:2a:
1e:38:c2:9b:c9:fd:3c:bd:12:93:9c:e8:86:01:aa:83:b2:ab:
6d:06:c2:be:72:e3:cb:5a:ae:e2:24:81:e7:af:8a:88:e9:de:
df:5b:7d:fb:d0:1e:9c:16:5a:e3:83:5f:ac:1e:b9:a7:a0:f5:
6a:ef:d3:ee:89:cc:c2:d1:2a:32:73:2e:9c:63:7d:8d:62:c6:
7a:56:3d:75:32:5f:c3:69:c7:40:a6:44:0d:97:e9:ed:65:b5:
b2:53:c8:a2:10:c1:f6:5d:ae:62:8d:d3:bf:60:b1:32:45:27:
8a:4a:1b:e7:4e:11:83:f7:34:69:ac:9b:c2:b8:ca:36:75:91:
04:37:f5:5f:11:dd:64:bc:78:b6:92:60:d6:f5:82:df:9b:62:
74:1a:51:f6:9c:03:0e:6e:40:01:7b:bd:2b:86:e6:b0:91:f0:
2f:75:b6:5f:b7:f3:ff:2c:67:67:7f:ee:d7:e2:09:6e:f7:83:
0d:8e:69:81:8d:4f:b3:45:58:e9:b4:0a:5f:b3:ff:25:bc:2b:
fa:d4:b0:d3:af:b8:9a:b3:b3:73:db:12:55:a7:8c:9d:57:d9:
70:dc:3f:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 06:31:18 2024 by rpki-client on console-ams.rpki-client.org