Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/0d33c9-6a84-4ce3-81b0-418af90acb8a/1/R4775irH2w1puK4xacCxrFqZQiU.roa
File: R4775irH2w1puK4xacCxrFqZQiU.roa (raw, json)
Hash identifier: h5PcH340Ctwps1r7RzQf9H8RWi3p9ejdv7VWHM30tNc=
Subject key identifier: 47:8E:FB:E6:2A:C7:DB:0D:69:B8:AE:31:69:C0:B1:AC:5A:99:42:25
Certificate issuer: /CN=96d7ba651403d18dddb7a74b20ddc21deb94220e
Certificate serial: 01916F3F92156868702AA78ED4E035750C06
Authority key identifier: 96:D7:BA:65:14:03:D1:8D:DD:B7:A7:4B:20:DD:C2:1D:EB:94:22:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lte6ZRQD0Y3dt6dLIN3CHeuUIg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/0d33c9-6a84-4ce3-81b0-418af90acb8a/1/R4775irH2w1puK4xacCxrFqZQiU.roa
Signing time: Tue 20 Aug 2024 10:05:22 +0000
ROA not before: Tue 20 Aug 2024 10:05:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6453
IP address blocks: 185.205.24.0/22 maxlen: 24
185.205.24.0/24 maxlen: 24
185.205.25.0/24 maxlen: 24
185.205.26.0/24 maxlen: 24
185.205.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/0d33c9-6a84-4ce3-81b0-418af90acb8a/1/lte6ZRQD0Y3dt6dLIN3CHeuUIg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/0d33c9-6a84-4ce3-81b0-418af90acb8a/1/lte6ZRQD0Y3dt6dLIN3CHeuUIg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lte6ZRQD0Y3dt6dLIN3CHeuUIg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 04:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:6f:3f:92:15:68:68:70:2a:a7:8e:d4:e0:35:75:0c:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96d7ba651403d18dddb7a74b20ddc21deb94220e
Validity
Not Before: Aug 20 10:05:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=478efbe62ac7db0d69b8ae3169c0b1ac5a994225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6a:a1:e3:7a:df:bb:ee:44:12:4a:5e:5f:3b:
f4:64:e7:43:ae:1e:6c:6f:8c:56:c8:9a:83:0b:a0:
c0:f8:dc:4d:3f:ba:52:ab:49:8e:1e:a9:20:0c:6e:
1c:a9:0c:4b:b5:bf:c9:16:5b:9e:b6:4f:fb:df:91:
58:f5:1e:db:1e:d3:25:36:01:99:0c:71:20:48:c2:
e0:01:8f:ac:84:24:bd:25:15:a7:b7:61:9d:c7:83:
11:8e:1d:b7:b4:ae:ee:9c:cc:98:cf:9a:dd:2c:1b:
2a:37:14:93:79:8f:ae:70:94:17:16:3d:56:29:b5:
5b:fd:a0:09:62:e6:8d:46:d3:76:d9:67:f0:4c:14:
66:d5:5b:32:05:7e:8c:3b:40:cc:c1:62:b8:f6:24:
10:14:a4:75:34:19:07:81:f5:a1:00:ef:dc:80:ca:
4a:d3:1f:ff:05:fc:cd:07:37:83:c9:fc:3f:aa:35:
20:88:97:e4:c1:9d:c0:16:a9:11:44:a4:34:03:b8:
5d:2a:d0:d1:56:8b:eb:d3:ab:27:ac:57:fc:41:c0:
6e:8b:c7:7b:1b:fc:6b:5f:87:05:19:25:e7:55:ec:
6d:f6:86:b2:ba:a1:69:a5:d0:32:12:88:89:8d:c6:
fe:40:80:30:c1:d7:d4:f4:29:41:63:04:ea:9e:46:
e3:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:8E:FB:E6:2A:C7:DB:0D:69:B8:AE:31:69:C0:B1:AC:5A:99:42:25
X509v3 Authority Key Identifier:
keyid:96:D7:BA:65:14:03:D1:8D:DD:B7:A7:4B:20:DD:C2:1D:EB:94:22:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lte6ZRQD0Y3dt6dLIN3CHeuUIg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/0d33c9-6a84-4ce3-81b0-418af90acb8a/1/R4775irH2w1puK4xacCxrFqZQiU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/0d33c9-6a84-4ce3-81b0-418af90acb8a/1/lte6ZRQD0Y3dt6dLIN3CHeuUIg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.205.24.0/22
Signature Algorithm: sha256WithRSAEncryption
03:d9:8a:7b:8f:20:c5:7d:42:7c:b7:2c:af:af:46:cf:52:03:
96:bb:03:e9:69:7b:b7:df:2d:0b:d6:41:d8:00:d1:13:0d:aa:
c0:65:f1:4d:15:29:58:06:75:fb:09:52:c3:8c:02:d5:1e:45:
e4:a3:dc:9e:62:5f:36:33:f0:2e:c5:14:d6:e4:48:95:8f:c6:
4d:cb:33:17:ea:38:bc:7d:39:57:53:40:22:eb:e0:5f:dc:72:
b5:73:3e:3a:45:70:b3:b1:3b:f1:4a:d2:4e:43:93:98:e1:ce:
88:7f:ef:f3:80:0c:a5:c7:ff:98:cc:4c:9d:78:c6:fd:20:91:
3a:c7:b4:94:b1:7d:79:38:3e:ac:c3:25:99:53:79:b3:2f:ef:
b6:bb:6d:24:cf:23:6f:cc:97:64:92:2c:2d:ea:53:37:f3:db:
48:62:d7:2f:5f:78:91:b8:09:d6:1e:5f:00:5c:35:1e:a7:0d:
d9:97:5b:b4:64:77:f8:f5:aa:5e:3c:5a:7a:fc:5d:a3:99:ab:
80:ad:f0:01:f4:b3:78:ef:3e:97:9a:ab:1f:50:7c:7b:89:11:
26:06:9b:b6:73:22:3a:26:14:97:f4:7d:84:c3:26:13:66:06:
0f:b7:17:e3:d4:26:fb:4d:18:fd:35:c0:62:04:0c:9c:03:6f:
6a:36:09:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:02:37 2024 by rpki-client on console-fra.rpki-client.org