Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/lXz1SIbXuevEbshGOg1tJCah0Co.roa
File: lXz1SIbXuevEbshGOg1tJCah0Co.roa (raw, json)
Hash identifier: JUSXp+S1N2Jq0Dh6YSmdaeiL1gSi3RKjT8DceACDbfc=
Subject key identifier: 95:7C:F5:48:86:D7:B9:EB:C4:6E:C8:46:3A:0D:6D:24:26:A1:D0:2A
Certificate issuer: /CN=09c746f67b7ac56ea6dd85951ec022cbbd67af06
Certificate serial: 018CC6B93577A6AC920725329CEF6EFB4633
Authority key identifier: 09:C7:46:F6:7B:7A:C5:6E:A6:DD:85:95:1E:C0:22:CB:BD:67:AF:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CcdG9nt6xW6m3YWVHsAiy71nrwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/lXz1SIbXuevEbshGOg1tJCah0Co.roa
Signing time: Mon 01 Jan 2024 20:31:15 +0000
ROA not before: Mon 01 Jan 2024 20:31:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 30742
IP address blocks: 185.204.97.0/24 maxlen: 24
185.204.96.0/22 maxlen: 24
185.204.96.0/24 maxlen: 24
185.204.98.0/24 maxlen: 24
185.204.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/CcdG9nt6xW6m3YWVHsAiy71nrwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/CcdG9nt6xW6m3YWVHsAiy71nrwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CcdG9nt6xW6m3YWVHsAiy71nrwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 29 Jun 2024 16:02:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:35:77:a6:ac:92:07:25:32:9c:ef:6e:fb:46:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09c746f67b7ac56ea6dd85951ec022cbbd67af06
Validity
Not Before: Jan 1 20:31:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=957cf54886d7b9ebc46ec8463a0d6d2426a1d02a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c3:a4:44:17:b8:ab:2f:6e:8d:5f:26:e9:67:
3a:a8:3c:3c:21:53:9d:d9:f4:3a:6d:4d:01:e9:13:
3a:e8:9f:06:96:5c:54:ea:c1:1e:8c:88:5d:c7:07:
cd:d4:67:9c:f2:8b:b7:e4:f8:80:79:6a:0e:d1:e5:
c0:a0:c5:ab:15:1e:35:29:37:4b:85:92:32:98:6e:
59:31:30:f0:54:40:96:5a:c5:c6:f6:98:e6:5a:4b:
f7:2e:77:4d:9f:80:e9:4d:1e:24:50:6e:fe:3b:c4:
fb:e8:ca:d2:54:b5:da:1b:01:55:fe:87:8c:2b:3b:
ba:ff:b7:e2:23:e1:6f:f9:db:7c:4a:df:eb:d5:2b:
a7:05:f8:2d:ff:71:1c:dc:d7:c6:b8:1d:7d:51:9e:
61:58:28:fc:24:fe:84:93:1f:e1:37:6a:a5:22:6c:
fc:d0:81:7b:7b:e6:a8:7c:b0:cc:b3:6a:b3:a7:43:
6f:a4:7e:24:9c:e0:29:1e:12:cb:85:e1:27:8f:a6:
dc:d8:e6:dc:61:ad:2b:0f:76:ef:88:cc:a6:da:2f:
75:c5:ba:b2:db:1d:bf:9d:78:c2:f7:93:5d:98:45:
78:98:d6:d8:ab:07:ba:94:c9:32:f1:8e:c4:cd:32:
f3:c5:48:20:30:3a:8d:49:76:fc:27:8b:cd:d3:d5:
7d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:7C:F5:48:86:D7:B9:EB:C4:6E:C8:46:3A:0D:6D:24:26:A1:D0:2A
X509v3 Authority Key Identifier:
keyid:09:C7:46:F6:7B:7A:C5:6E:A6:DD:85:95:1E:C0:22:CB:BD:67:AF:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CcdG9nt6xW6m3YWVHsAiy71nrwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/lXz1SIbXuevEbshGOg1tJCah0Co.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/CcdG9nt6xW6m3YWVHsAiy71nrwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.204.96.0/22
Signature Algorithm: sha256WithRSAEncryption
b5:ed:a9:03:e5:62:d8:97:b3:2f:71:d4:77:2a:11:85:50:af:
cc:dc:d9:6e:60:24:a1:1f:da:b6:10:b2:fe:09:bc:bf:b5:e9:
23:3a:da:b0:2a:59:cb:c8:ef:a8:45:63:90:b2:fe:d7:8b:77:
a0:4c:92:2e:0f:45:5e:6c:f1:53:d2:9a:25:99:7e:68:55:4d:
b1:e5:a8:56:7c:41:79:cc:ca:57:cf:b4:87:3e:3c:d8:de:63:
91:43:3c:2f:d4:71:3f:52:e3:dc:8b:29:b2:34:95:e7:8d:5f:
72:08:28:b0:27:d8:ab:85:ea:e7:67:5f:93:eb:1a:54:d4:32:
06:ec:4a:60:db:b1:63:52:56:2f:83:ed:9a:89:22:ad:88:d5:
97:50:85:4d:19:1a:f6:3c:d3:6c:35:89:ef:bd:dd:c5:50:21:
a4:c1:44:e1:11:ea:f1:7d:d1:25:bb:43:6a:16:8f:71:d4:44:
8a:01:30:31:48:4f:63:d6:23:94:5e:25:8e:22:83:a9:20:c0:
1f:9e:6b:14:c3:20:07:b2:d2:c7:1a:9d:6b:47:15:eb:92:1d:
7d:9b:11:d5:87:b0:6f:69:be:c8:64:d5:af:d7:76:7a:36:0c:
e1:da:2e:2f:7e:52:c9:38:24:e9:e9:b8:1f:44:6f:4d:d8:31:
06:1f:48:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 22:31:04 2024 by rpki-client on console-ams.rpki-client.org