Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/aG-Y-ddp1r-51_lGCW2u9ywseEE.roa
File: aG-Y-ddp1r-51_lGCW2u9ywseEE.roa (raw, json)
Hash identifier: I//DRTipyveLvwbt0E8Zl6gLqLjfjj3fuxb2X7jE+04=
Subject key identifier: 68:6F:98:F9:D7:69:D6:BF:B9:D7:F9:46:09:6D:AE:F7:2C:2C:78:41
Certificate issuer: /CN=44e888a76e99851b01fb86cec537d4d8e610de16
Certificate serial: 018CC5012326399B6943168AA3880FD925D9
Authority key identifier: 44:E8:88:A7:6E:99:85:1B:01:FB:86:CE:C5:37:D4:D8:E6:10:DE:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/aG-Y-ddp1r-51_lGCW2u9ywseEE.roa
Signing time: Mon 01 Jan 2024 12:30:35 +0000
ROA not before: Mon 01 Jan 2024 12:30:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35577
IP address blocks: 185.245.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Jun 2024 01:03:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:23:26:39:9b:69:43:16:8a:a3:88:0f:d9:25:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44e888a76e99851b01fb86cec537d4d8e610de16
Validity
Not Before: Jan 1 12:30:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=686f98f9d769d6bfb9d7f946096daef72c2c7841
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e6:87:31:6d:f1:eb:e6:c1:f2:ac:ed:b2:86:
59:06:0d:e2:86:3c:95:f8:06:35:3c:6c:82:ff:6f:
7a:06:90:98:0b:f2:62:e3:b8:67:f9:09:d7:b3:c7:
2a:6a:04:f7:a0:6b:0d:b2:74:96:f2:60:a3:71:e7:
a5:1e:df:cf:87:5d:aa:54:e7:bb:37:bd:9e:80:13:
c0:e5:0e:a3:93:66:e9:b2:3e:e0:bb:71:7f:b0:80:
67:a7:b2:0f:92:a4:5c:13:12:a4:be:fb:39:02:dc:
98:5a:dd:38:07:1d:da:19:58:aa:eb:58:93:0a:22:
5f:96:55:f6:fe:af:91:ef:01:8b:c8:16:ca:96:24:
e0:7f:62:20:c1:3e:b4:68:bb:75:49:15:16:c6:69:
0a:65:0e:32:d9:d6:ed:da:c5:3e:ad:be:ff:4f:ba:
af:b7:7b:0a:5b:ad:37:84:71:14:44:b5:f7:ce:dc:
52:0e:a0:95:d8:a5:13:b9:61:d6:54:be:81:5d:d8:
d9:0e:9e:3c:aa:a8:c2:7f:af:70:9e:0e:55:3c:e0:
1a:ff:c9:93:c5:b4:2b:b1:64:6f:da:71:25:a3:28:
63:61:a1:f5:13:a1:a5:7f:bb:54:8d:aa:62:10:ae:
c3:35:0c:c7:fa:ef:41:a1:0f:92:0a:18:06:23:f5:
e0:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:6F:98:F9:D7:69:D6:BF:B9:D7:F9:46:09:6D:AE:F7:2C:2C:78:41
X509v3 Authority Key Identifier:
keyid:44:E8:88:A7:6E:99:85:1B:01:FB:86:CE:C5:37:D4:D8:E6:10:DE:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/aG-Y-ddp1r-51_lGCW2u9ywseEE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.245.244.0/24
Signature Algorithm: sha256WithRSAEncryption
28:c0:ad:b9:dd:27:7f:2e:87:2c:0d:7c:37:8a:a0:06:1a:de:
0d:51:81:1a:c8:b8:01:8f:14:e1:43:55:d8:e0:77:4b:a7:47:
8e:e2:b4:62:87:e8:a2:86:15:a4:e7:9a:6f:db:05:b9:45:a8:
00:15:38:cc:16:64:d6:15:0f:3f:16:37:d1:b4:33:b6:64:f2:
44:f0:c4:39:0a:3d:a7:90:9c:7a:e0:23:bc:d7:84:08:af:cf:
0b:b6:76:38:63:c7:4f:15:90:5d:ce:22:21:93:45:0a:c6:9b:
c1:03:4e:2a:cf:a4:37:5f:17:7e:5c:bc:8a:55:65:75:a4:85:
b9:25:57:6c:cd:b6:5a:2c:5f:b6:b9:a2:e1:54:53:7f:fa:bf:
d9:42:31:45:b0:64:0c:a0:01:1d:e1:47:03:fb:80:b3:e0:48:
cf:94:44:5f:d7:1e:2d:89:0c:59:89:11:b2:99:0b:1b:43:29:
ef:f8:a3:c4:40:a6:5b:6f:cb:25:41:da:8a:25:14:ca:d8:d8:
fc:1b:c9:3f:34:08:70:55:5d:c9:d7:68:2f:68:85:da:d6:60:
38:02:e4:30:c5:d5:52:51:79:0b:04:bf:5f:f3:2e:2b:31:17:
97:bd:d4:33:03:8b:a1:e1:c1:e0:a0:67:b9:f0:cd:de:73:e3:
e7:78:ed:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 10:12:41 2024 by rpki-client on console-fra.rpki-client.org