Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/970cf0-9298-4ff0-baf5-210ae0569a45/1/n5f3AmmhF3Lbj24erb9mt0NLXOU.roa
File: n5f3AmmhF3Lbj24erb9mt0NLXOU.roa (raw, json)
Hash identifier: oCzHZVqJ6FXGBEnt7soEf16ZQrU8eZmPKjkyybvcpFo=
Subject key identifier: 9F:97:F7:02:69:A1:17:72:DB:8F:6E:1E:AD:BF:66:B7:43:4B:5C:E5
Certificate issuer: /CN=f83faec93d403f3713823fa39c7d27c62e921471
Certificate serial: 018CC5DC73ED87D3F6F3CD04FF7A113C62C2
Authority key identifier: F8:3F:AE:C9:3D:40:3F:37:13:82:3F:A3:9C:7D:27:C6:2E:92:14:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-D-uyT1APzcTgj-jnH0nxi6SFHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/970cf0-9298-4ff0-baf5-210ae0569a45/1/n5f3AmmhF3Lbj24erb9mt0NLXOU.roa
Signing time: Mon 01 Jan 2024 16:30:08 +0000
ROA not before: Mon 01 Jan 2024 16:30:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206712
IP address blocks: 185.174.168.0/24 maxlen: 24
185.174.170.0/24 maxlen: 24
185.174.169.0/24 maxlen: 24
2a0b:a902::/32 maxlen: 32
2a0b:a901::/32 maxlen: 32
2a0b:a900::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/970cf0-9298-4ff0-baf5-210ae0569a45/1/1-D-uyT1APzcTgj-jnH0nxi6SFHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/970cf0-9298-4ff0-baf5-210ae0569a45/1/1-D-uyT1APzcTgj-jnH0nxi6SFHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-D-uyT1APzcTgj-jnH0nxi6SFHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Dec 2024 18:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:73:ed:87:d3:f6:f3:cd:04:ff:7a:11:3c:62:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f83faec93d403f3713823fa39c7d27c62e921471
Validity
Not Before: Jan 1 16:30:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9f97f70269a11772db8f6e1eadbf66b7434b5ce5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:54:ce:fb:50:39:c9:fc:cf:a8:bf:14:2b:dd:
f1:06:12:15:61:0e:0f:b2:86:29:5d:bf:eb:f9:6f:
b4:da:39:8a:44:b1:91:55:3d:5c:f8:86:45:a6:f5:
4e:52:e1:85:8a:12:0f:f1:97:82:50:a3:5e:85:69:
08:bc:7e:1d:b2:80:75:f4:2c:a0:a3:4e:5e:40:8e:
7b:15:29:2a:ef:08:b8:ba:6d:17:99:c5:73:63:b6:
12:0a:81:cb:79:57:f8:8b:f4:d1:a4:19:85:e0:88:
c0:55:0c:89:d4:cb:8c:aa:b6:25:2d:4a:f3:e4:5d:
3d:7d:de:a2:09:33:5c:f9:c6:d2:f8:02:c4:34:41:
98:29:e2:ac:51:43:31:42:39:71:dd:42:ef:b5:36:
c2:8a:61:c5:a1:f1:3a:7d:69:d7:9d:63:a3:e1:f5:
0b:27:b6:53:eb:06:8c:df:b4:28:e3:a2:79:00:03:
cf:24:11:dc:2c:e4:17:7e:66:13:bd:13:95:77:6f:
78:cb:f5:9d:38:42:19:d2:d4:d7:aa:af:fd:06:cf:
c1:b1:19:d1:30:e2:26:a3:7d:e3:0d:5b:c4:45:68:
84:2c:f7:a2:0b:8c:11:9c:9a:37:cc:b8:b1:49:24:
f3:21:67:ee:61:11:e8:93:03:3e:d8:37:70:11:76:
14:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:97:F7:02:69:A1:17:72:DB:8F:6E:1E:AD:BF:66:B7:43:4B:5C:E5
X509v3 Authority Key Identifier:
keyid:F8:3F:AE:C9:3D:40:3F:37:13:82:3F:A3:9C:7D:27:C6:2E:92:14:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-D-uyT1APzcTgj-jnH0nxi6SFHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/970cf0-9298-4ff0-baf5-210ae0569a45/1/n5f3AmmhF3Lbj24erb9mt0NLXOU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/970cf0-9298-4ff0-baf5-210ae0569a45/1/1-D-uyT1APzcTgj-jnH0nxi6SFHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.174.168.0-185.174.170.255
IPv6:
2a0b:a900::-2a0b:a902:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
52:e7:df:9f:50:fb:6f:60:5f:d5:09:7d:e7:e2:3d:2d:82:f7:
50:67:c5:66:96:83:c6:90:fb:66:09:56:61:86:75:3f:ae:09:
e6:f6:df:f5:f6:b7:2f:b7:35:00:e6:cf:a7:71:0c:f2:c1:f2:
d7:dc:5b:d1:91:20:57:d6:c7:a8:b1:cc:a2:59:fd:b8:b1:d3:
27:d9:bd:ca:34:69:fd:dd:5c:c4:5d:ac:9b:d0:d5:18:6e:1e:
1c:d2:e9:a5:7d:d8:42:ff:b5:aa:a2:86:77:72:b0:2a:3d:d2:
c5:ac:86:30:8c:53:7b:8d:a0:91:f8:4b:c0:10:a5:ee:32:15:
3b:ae:9d:45:a6:48:53:4e:ad:eb:ff:2c:21:06:f7:13:18:d5:
42:e0:0d:62:93:fe:f8:00:60:2e:2a:a1:3b:e0:d4:48:8e:a6:
e1:be:5d:53:5c:e6:f0:c8:33:e1:fd:97:bd:cc:df:4e:de:a2:
b0:b6:78:86:d9:7f:fe:84:d8:8c:b8:ac:b4:e4:18:49:75:95:
b7:07:f1:34:8f:e8:96:af:fa:cc:cf:7a:b7:a0:fb:47:5d:3f:
60:4b:b7:3e:1e:ca:c2:7c:b6:a2:08:86:f0:00:04:24:66:11:
c5:4e:e9:d7:7b:cf:95:ed:57:f7:b0:56:3a:6a:6c:18:2f:05:
d5:a4:82:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 23:32:35 2024 by rpki-client on console-ams.rpki-client.org