Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/9vFLlgG5Z3C0tEvNCKb3a5CespE.roa
File: 9vFLlgG5Z3C0tEvNCKb3a5CespE.roa (raw, json)
Hash identifier: j6rahznw5CtUoaAxhkxB7bdYaaoyyo3nDAWPFn6YeKU=
Subject key identifier: F6:F1:4B:96:01:B9:67:70:B4:B4:4B:CD:08:A6:F7:6B:90:9E:B2:91
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 018F7C7E581BAB6804FE003CE7881F1295E4
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/9vFLlgG5Z3C0tEvNCKb3a5CespE.roa
Signing time: Wed 15 May 2024 13:43:25 +0000
ROA not before: Wed 15 May 2024 13:43:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42922
IP address blocks: 185.252.145.0/24 maxlen: 24
2a0e:d601:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 14:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:7c:7e:58:1b:ab:68:04:fe:00:3c:e7:88:1f:12:95:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: May 15 13:43:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f6f14b9601b96770b4b44bcd08a6f76b909eb291
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:9f:5e:d4:ec:dd:24:d6:f3:77:9d:e7:5f:45:
51:d9:03:0c:2e:74:45:86:5b:a8:d5:d0:52:a2:8b:
e8:f0:33:88:74:ce:b2:cb:a3:11:3e:ff:18:77:6e:
87:c7:e1:bf:f9:53:9e:e9:1e:3c:a9:b3:f3:5d:e8:
0c:7b:ad:cc:c3:b0:33:5f:cb:dc:6d:06:b2:8b:ee:
49:7f:b8:d3:4c:50:71:4e:81:9e:b8:63:a2:1f:2c:
d0:dc:c7:f7:9d:59:a8:48:37:69:e3:a7:41:53:b1:
38:5c:26:3a:9f:7e:f8:2e:fa:3c:4c:d6:28:67:55:
b3:82:d0:92:1d:cd:aa:04:04:b6:ab:74:06:8b:3c:
f2:2a:92:18:3f:66:69:c3:90:ad:bd:37:6d:43:5b:
a7:b2:04:06:6e:88:bc:d9:67:5b:8f:28:38:b1:2a:
33:6e:f3:a6:d6:6d:be:10:5a:be:de:4b:bd:3d:c5:
63:df:05:9d:05:ab:71:7e:b6:e5:c1:f5:a2:3c:65:
18:9c:70:71:1a:56:ef:f7:7d:a8:2f:4e:8c:5c:58:
c8:16:7d:b7:97:19:19:5c:85:94:c1:57:5d:70:75:
c6:83:46:16:5e:2b:1b:b7:77:86:c6:9d:d0:2c:1f:
39:b0:ca:34:5d:45:d7:23:ca:e5:bc:3c:a5:b5:5a:
1d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:F1:4B:96:01:B9:67:70:B4:B4:4B:CD:08:A6:F7:6B:90:9E:B2:91
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/9vFLlgG5Z3C0tEvNCKb3a5CespE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.252.145.0/24
IPv6:
2a0e:d601:1::/48
Signature Algorithm: sha256WithRSAEncryption
19:66:d2:9b:a4:90:d1:47:26:1c:ba:db:ff:47:af:e2:c0:72:
1e:34:f0:0d:99:1f:b7:47:9d:d0:91:a8:73:74:a1:13:de:87:
b5:e4:f7:0c:04:65:cf:53:df:a7:4a:98:2a:5b:3d:f8:a6:f2:
64:43:4e:db:53:7e:61:13:82:4f:3b:ed:92:cd:7e:4e:7c:8a:
d8:2f:24:3a:37:eb:29:d1:b1:b5:0f:60:00:77:85:81:a6:f2:
2c:bf:1d:f9:20:54:7d:2c:7e:4a:f9:33:36:7f:bf:5d:e7:fe:
8a:b4:a7:60:41:49:ae:4c:23:fe:ec:22:c4:70:c9:aa:89:31:
0f:04:32:1f:04:bc:8b:b1:b2:b4:0f:af:b9:6b:bd:66:89:01:
a4:a6:7e:72:e2:79:36:01:9f:64:24:75:c0:20:ca:fc:dc:54:
c4:d3:33:05:36:93:f5:c8:ae:ab:5f:08:1a:a8:5d:1c:c6:6f:
2d:80:03:13:1d:09:6e:9f:da:15:ed:26:be:67:3d:e9:2e:f1:
e8:05:ca:67:fb:a3:2d:0e:d4:68:14:93:b6:04:e9:4c:5d:fe:
4b:0c:d7:d5:78:28:a0:93:42:23:f8:b2:1e:f8:0b:68:43:2a:
c1:54:a3:14:35:2d:d8:98:38:84:39:ae:37:af:fb:98:0d:ca:
c1:50:27:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 21:57:46 2024 by rpki-client on console-fra.rpki-client.org