Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/SEIOQ4mdZb_iSheEz1F1Bg-CtNU.roa
File: SEIOQ4mdZb_iSheEz1F1Bg-CtNU.roa (raw, json)
Hash identifier: 7Ej2rU0OZFZbGapajcLDwx0yeguHS93IaKcHLxYpbQw=
Subject key identifier: 48:42:0E:43:89:9D:65:BF:E2:4A:17:84:CF:51:75:06:0F:82:B4:D5
Certificate issuer: /CN=b1af12f5ca75c922a4aa5dacb49c04a93237f4ed
Certificate serial: 018CC94CC88C353283D71654987D83E1F93E
Authority key identifier: B1:AF:12:F5:CA:75:C9:22:A4:AA:5D:AC:B4:9C:04:A9:32:37:F4:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/SEIOQ4mdZb_iSheEz1F1Bg-CtNU.roa
Signing time: Tue 02 Jan 2024 08:31:41 +0000
ROA not before: Tue 02 Jan 2024 08:31:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209242
IP address blocks: 185.148.107.0/24 maxlen: 24
185.148.106.0/24 maxlen: 24
185.176.24.0/24 maxlen: 24
185.176.26.0/24 maxlen: 24
185.148.104.0/24 maxlen: 24
185.148.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft
rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 May 2024 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4c:c8:8c:35:32:83:d7:16:54:98:7d:83:e1:f9:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1af12f5ca75c922a4aa5dacb49c04a93237f4ed
Validity
Not Before: Jan 2 08:31:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=48420e43899d65bfe24a1784cf5175060f82b4d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:69:1e:17:28:b2:a5:7e:ae:46:2b:03:85:26:
3b:1f:3e:11:ac:82:16:01:a0:83:f1:eb:61:48:2a:
b8:ca:25:2f:09:8a:5b:1d:fc:45:02:a2:a6:ce:07:
b9:dd:62:2d:4f:cf:61:0c:8b:8e:3e:9b:b2:c2:17:
1d:54:72:6f:ac:f3:2a:45:1e:ef:9d:3d:ad:21:85:
1b:c4:7e:de:67:24:c7:00:62:80:ae:55:0e:29:c2:
bf:1c:84:78:6b:1c:bb:9d:bf:0c:fb:41:77:a5:6c:
91:c5:9f:d4:5c:53:d0:d5:9e:63:ca:f0:f5:2a:73:
66:a1:ea:8d:22:8e:32:dd:3a:6e:a1:31:56:a0:9b:
7e:4b:8e:3b:8c:fa:1c:a8:69:c0:b9:32:80:92:48:
47:5a:cf:d9:ec:0c:dc:5d:b0:6c:59:7d:a1:a0:40:
e5:a2:49:ad:65:45:68:52:83:d7:47:28:23:44:54:
80:80:4b:83:e2:75:74:ba:44:37:be:9e:d6:cf:46:
9d:d7:8b:f9:db:3e:2b:52:c5:f7:2f:ae:ee:3f:ad:
88:e0:bf:98:d5:5c:6b:b3:96:82:f7:92:93:8f:d4:
d0:47:ba:21:0b:8b:bc:f3:d0:bb:09:a6:fe:75:16:
93:dc:6f:cb:ba:e1:0b:d5:f9:0a:74:f3:81:36:7f:
34:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:42:0E:43:89:9D:65:BF:E2:4A:17:84:CF:51:75:06:0F:82:B4:D5
X509v3 Authority Key Identifier:
keyid:B1:AF:12:F5:CA:75:C9:22:A4:AA:5D:AC:B4:9C:04:A9:32:37:F4:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/SEIOQ4mdZb_iSheEz1F1Bg-CtNU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.148.104.0/22
185.176.24.0/24
185.176.26.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:cc:0a:9d:07:4a:c8:24:a0:40:04:31:72:7b:75:66:9a:f4:
ba:23:1c:11:b1:28:f7:b8:ef:0f:54:47:d0:07:6d:85:c9:fc:
15:69:f9:88:eb:0d:47:e7:ae:10:71:c1:27:96:07:40:a6:f8:
42:5d:9f:26:8e:97:49:28:80:03:18:31:13:9a:11:e2:6a:12:
91:59:f4:75:fc:71:68:ba:fc:b7:d3:13:6d:bd:60:9f:2f:44:
5c:3f:00:e2:ed:fa:e8:23:97:36:68:f2:f9:71:bb:f9:48:f6:
e5:bf:44:7a:e1:be:36:ad:e2:e5:4a:78:6b:5b:96:c7:63:8a:
71:28:98:9c:b3:8e:37:51:23:61:5c:8a:74:da:9b:5a:45:2c:
cd:65:20:12:26:9c:86:60:26:08:aa:f1:d9:67:d1:cb:b5:b6:
c3:e5:70:fa:13:b5:8f:04:f3:13:51:9a:1c:24:a2:e1:01:a4:
46:81:77:b9:e9:bf:82:ab:33:67:25:8b:1d:79:1e:40:02:a5:
a2:59:a4:16:42:a1:e7:34:5e:eb:fc:89:f0:65:6a:07:cd:d4:
45:14:5b:f0:88:70:33:1a:04:25:20:8a:ff:a0:d3:6f:e4:e5:
b4:28:75:71:22:8b:d1:9f:1d:56:5a:ca:b4:15:eb:4e:90:8c:
4e:5b:81:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 20:24:31 2024 by rpki-client on console-ams.rpki-client.org