Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/e59ba1-3d5b-4299-a852-37c86e355267/1/oG_PV7Thz3GFUpLBeLSRtqTpaPA.roa
File: oG_PV7Thz3GFUpLBeLSRtqTpaPA.roa (raw, json)
Hash identifier: BipMNhOwUzY6XWmcsLvzga1HrwujmOf23nSpQnUh8kk=
Subject key identifier: A0:6F:CF:57:B4:E1:CF:71:85:52:92:C1:78:B4:91:B6:A4:E9:68:F0
Certificate issuer: /CN=7b8985faea08598c05cc30b82e282306af793316
Certificate serial: 018CC56EC06DBD1997D2D7084D30B4E1C4B2
Authority key identifier: 7B:89:85:FA:EA:08:59:8C:05:CC:30:B8:2E:28:23:06:AF:79:33:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e4mF-uoIWYwFzDC4LigjBq95MxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/e59ba1-3d5b-4299-a852-37c86e355267/1/oG_PV7Thz3GFUpLBeLSRtqTpaPA.roa
Signing time: Mon 01 Jan 2024 14:30:18 +0000
ROA not before: Mon 01 Jan 2024 14:30:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203352
IP address blocks: 185.131.81.0/24 maxlen: 24
185.131.80.0/24 maxlen: 24
185.131.80.0/23 maxlen: 23
185.131.80.0/22 maxlen: 22
185.131.83.0/24 maxlen: 24
185.131.82.0/23 maxlen: 23
185.131.82.0/24 maxlen: 24
2a06:97c0::/29 maxlen: 29
2a06:97c4::/30 maxlen: 30
2a06:97c0::/30 maxlen: 30
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/e59ba1-3d5b-4299-a852-37c86e355267/1/e4mF-uoIWYwFzDC4LigjBq95MxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/e59ba1-3d5b-4299-a852-37c86e355267/1/e4mF-uoIWYwFzDC4LigjBq95MxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/e4mF-uoIWYwFzDC4LigjBq95MxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 11:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:c0:6d:bd:19:97:d2:d7:08:4d:30:b4:e1:c4:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b8985faea08598c05cc30b82e282306af793316
Validity
Not Before: Jan 1 14:30:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a06fcf57b4e1cf71855292c178b491b6a4e968f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:34:8f:98:08:de:14:58:c0:59:a4:a1:88:ab:
de:8b:5f:cc:dd:44:28:dc:3e:1b:23:d0:49:81:f7:
4b:87:64:69:71:59:18:34:29:11:b5:88:d3:7b:c4:
de:3b:70:0b:fb:12:ca:71:6f:44:ef:c5:74:85:0e:
90:ea:e8:1f:2f:3e:69:5e:d5:c3:cb:60:17:c9:f4:
cf:4c:26:8f:cc:eb:95:8e:6c:d7:e6:05:4c:32:0a:
8c:29:d6:fd:d8:ec:89:e2:e9:4b:e5:87:eb:fc:8d:
3c:c2:0e:86:f5:c7:eb:53:4a:1a:a7:58:35:fd:50:
78:dc:31:dc:0f:f7:79:48:a5:00:3c:68:27:d0:c0:
6c:d2:10:b5:39:87:71:8f:b6:f6:fb:17:69:14:35:
0c:b8:01:b4:bf:a0:e8:f2:05:e9:a1:17:c5:4a:32:
f8:95:f9:46:6d:a2:9b:d5:e3:18:f6:6a:d4:c6:3b:
65:fa:5d:08:8e:8e:e5:85:24:56:90:36:55:17:22:
fc:d0:6a:02:70:29:df:32:43:01:7b:ba:a2:79:e6:
ba:fa:58:27:46:c0:16:3d:b6:d9:d6:c2:98:d7:d6:
8a:e0:36:c3:46:9f:a3:15:1b:fb:52:13:7e:a7:7f:
44:91:ce:b6:6a:e0:ec:a8:e7:94:0a:b3:39:36:31:
7b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:6F:CF:57:B4:E1:CF:71:85:52:92:C1:78:B4:91:B6:A4:E9:68:F0
X509v3 Authority Key Identifier:
keyid:7B:89:85:FA:EA:08:59:8C:05:CC:30:B8:2E:28:23:06:AF:79:33:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4mF-uoIWYwFzDC4LigjBq95MxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e59ba1-3d5b-4299-a852-37c86e355267/1/oG_PV7Thz3GFUpLBeLSRtqTpaPA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e59ba1-3d5b-4299-a852-37c86e355267/1/e4mF-uoIWYwFzDC4LigjBq95MxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.131.80.0/22
IPv6:
2a06:97c0::/29
Signature Algorithm: sha256WithRSAEncryption
7f:6a:3d:fa:a9:8f:78:b4:8c:3f:c5:2d:79:fb:26:43:22:29:
49:bd:09:2b:be:a1:60:be:23:ca:fb:e6:e8:ea:92:63:57:d6:
67:da:e1:d7:af:9b:bc:19:91:6a:86:2d:75:c9:14:b5:c9:57:
37:f4:3f:10:8a:12:7c:78:7b:4d:24:fa:1b:cd:9c:0f:0c:2f:
2c:db:16:a6:21:c4:b4:3f:37:ba:2d:c6:ba:c5:8a:e1:45:9b:
8b:fb:f0:51:ea:8b:d6:53:3e:7b:77:d1:79:b0:f0:ea:aa:4f:
ed:34:72:71:a9:97:69:b9:9e:50:65:18:bd:d2:22:2a:e9:d5:
86:ef:c4:9b:0e:3a:34:c0:08:c3:49:79:05:3c:35:e9:4a:6a:
a4:b2:92:c6:42:9e:f7:a9:39:c3:bb:79:a7:ae:72:33:91:b8:
78:3b:82:bb:15:16:7b:a9:30:d5:5f:90:9a:3e:9c:1b:aa:60:
65:9c:67:0b:aa:84:4c:ad:68:a6:5a:ca:94:f9:1c:1e:ef:27:
4d:55:b1:8d:26:79:06:bc:86:1a:55:a4:b9:26:06:cd:2c:87:
d9:7b:90:ad:ac:e2:94:fb:fb:29:0b:39:08:c6:3e:40:ff:76:
16:f7:29:6c:f5:23:90:fa:19:f9:ba:74:a7:5b:8a:b2:ec:38:
72:88:3a:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 21:25:42 2024 by rpki-client on console-ams.rpki-client.org