Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/_-0M0FWoGC3JdZf56S3jra7cLtE.roa
File: _-0M0FWoGC3JdZf56S3jra7cLtE.roa (raw, json)
Hash identifier: vdoF2MYwDsIhxiar1LJ0MLv/FzzSRUZ72GzNlBhZ8Aw=
Subject key identifier: FF:ED:0C:D0:55:A8:18:2D:C9:75:97:F9:E9:2D:E3:AD:AE:DC:2E:D1
Certificate issuer: /CN=8d66032e08894118d7998c5c060ca46eb3871338
Certificate serial: 018CC500197677EA05C2C47071E5642EC7EC
Authority key identifier: 8D:66:03:2E:08:89:41:18:D7:99:8C:5C:06:0C:A4:6E:B3:87:13:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jWYDLgiJQRjXmYxcBgykbrOHEzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/_-0M0FWoGC3JdZf56S3jra7cLtE.roa
Signing time: Mon 01 Jan 2024 12:29:27 +0000
ROA not before: Mon 01 Jan 2024 12:29:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49425
IP address blocks: 185.169.144.0/23 maxlen: 24
45.75.128.0/17 maxlen: 24
2a0a:4900::/29 maxlen: 29
2a0a:4900::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/jWYDLgiJQRjXmYxcBgykbrOHEzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Sep 2024 13:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:19:76:77:ea:05:c2:c4:70:71:e5:64:2e:c7:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d66032e08894118d7998c5c060ca46eb3871338
Validity
Not Before: Jan 1 12:29:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ffed0cd055a8182dc97597f9e92de3adaedc2ed1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a8:20:7a:86:5e:b1:a7:fd:3f:1c:63:f1:27:
5a:ed:48:f5:b6:b0:ac:09:09:4b:3c:40:c3:ee:f3:
56:22:b3:32:a9:b3:f3:5c:a1:f0:24:06:dd:4e:d0:
2f:99:78:b6:f8:b6:04:7a:92:6b:41:76:78:f1:87:
b2:4d:24:ef:1f:a2:41:8f:b6:fe:4a:e5:e5:38:1a:
cd:42:a7:35:fc:73:13:f9:43:0e:00:fc:02:15:c2:
d7:c7:76:40:94:2c:24:bc:ab:34:78:6d:13:ba:2b:
bb:1c:a8:e1:85:88:da:48:96:f6:39:20:38:73:ff:
41:ad:19:74:b4:d6:64:70:b6:cf:fa:02:eb:b0:d4:
5a:3e:03:cb:6e:6e:44:99:3c:af:52:ca:73:6d:0c:
e6:27:89:97:2b:ac:09:af:43:89:8f:b6:f8:07:01:
ce:da:75:8e:36:32:f5:84:89:a9:da:a6:b2:14:4f:
ea:a6:3e:c5:61:6b:e0:f4:45:ec:f1:ed:41:72:49:
67:d7:49:a7:40:cb:81:90:79:62:a9:4a:bd:25:e6:
ab:0f:33:c1:55:b4:18:6d:0b:34:b2:1f:12:7e:70:
5b:35:d8:6f:fe:fe:bf:4a:cc:16:7b:00:ec:4c:2e:
17:24:90:e8:80:92:c8:cb:fa:4f:a3:39:b1:56:fc:
e1:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:ED:0C:D0:55:A8:18:2D:C9:75:97:F9:E9:2D:E3:AD:AE:DC:2E:D1
X509v3 Authority Key Identifier:
keyid:8D:66:03:2E:08:89:41:18:D7:99:8C:5C:06:0C:A4:6E:B3:87:13:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jWYDLgiJQRjXmYxcBgykbrOHEzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/_-0M0FWoGC3JdZf56S3jra7cLtE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.75.128.0/17
185.169.144.0/23
IPv6:
2a0a:4900::/29
Signature Algorithm: sha256WithRSAEncryption
5a:88:2e:f5:d4:15:8e:7a:b8:3d:25:ab:97:72:4a:47:ae:af:
f6:2a:07:b1:6f:0a:59:7a:00:80:60:db:87:12:16:f1:07:2f:
ae:5f:19:99:50:c6:b0:03:3d:a1:8f:e7:d0:97:9b:c4:16:06:
3c:1f:d8:3d:22:cb:7f:58:87:a8:76:f9:1a:b8:d5:0b:3d:cc:
0f:7c:28:7c:0e:10:f4:a4:3f:06:b7:61:6f:a0:28:49:55:1b:
e0:23:84:29:08:89:3b:ed:63:17:08:ce:4f:1b:ca:88:10:b7:
54:fc:25:80:46:cf:27:35:66:46:bd:a5:94:a1:e8:1c:32:c5:
cf:69:90:d4:c2:00:4f:c7:12:de:71:58:32:59:7a:f0:3d:a0:
3b:6b:42:b8:8e:ca:b1:23:a8:4e:0e:90:4d:13:f4:e0:ad:04:
83:4b:9f:36:8f:49:1e:9c:90:2b:9c:1b:af:f9:da:39:c7:0b:
6b:6d:9f:97:b9:66:5d:58:2c:b5:98:c4:7e:07:ec:ca:62:a3:
e1:53:9b:4a:69:4d:77:e2:56:0f:6a:26:6a:23:59:20:7a:55:
65:54:58:26:90:eb:c5:3e:2d:86:58:d2:6d:d5:92:2e:de:77:
d0:f6:3f:75:fa:4f:20:0f:50:49:dc:30:30:5f:da:7e:64:25:
8c:f8:9f:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 22:12:56 2024 by rpki-client on console-ams.rpki-client.org