Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a12069-a061-442e-9bfb-338bdd439ee1/1/RRBxSQQvKLqFG-va3Boh67Y6L3M.roa
File: RRBxSQQvKLqFG-va3Boh67Y6L3M.roa (raw, json)
Hash identifier: YKk1jAGbEOWpeoDRmvpfdKa/SuXDCg0bwGgIIOR1iwg=
Subject key identifier: 45:10:71:49:04:2F:28:BA:85:1B:EB:DA:DC:1A:21:EB:B6:3A:2F:73
Certificate issuer: /CN=2995944e84dc37ba6a42d68bb1e2b9a4421e84a4
Certificate serial: 018CC5DCEAB2B17A86C0E8F8721F41E50A79
Authority key identifier: 29:95:94:4E:84:DC:37:BA:6A:42:D6:8B:B1:E2:B9:A4:42:1E:84:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KZWUToTcN7pqQtaLseK5pEIehKQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a12069-a061-442e-9bfb-338bdd439ee1/1/RRBxSQQvKLqFG-va3Boh67Y6L3M.roa
Signing time: Mon 01 Jan 2024 16:30:38 +0000
ROA not before: Mon 01 Jan 2024 16:30:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48520
IP address blocks: 185.114.187.0/24 maxlen: 24
185.114.184.0/24 maxlen: 24
185.114.184.0/22 maxlen: 22
185.114.186.0/24 maxlen: 24
185.114.185.0/24 maxlen: 24
2a06:7100::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a12069-a061-442e-9bfb-338bdd439ee1/1/KZWUToTcN7pqQtaLseK5pEIehKQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/a12069-a061-442e-9bfb-338bdd439ee1/1/KZWUToTcN7pqQtaLseK5pEIehKQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KZWUToTcN7pqQtaLseK5pEIehKQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 01:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:ea:b2:b1:7a:86:c0:e8:f8:72:1f:41:e5:0a:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2995944e84dc37ba6a42d68bb1e2b9a4421e84a4
Validity
Not Before: Jan 1 16:30:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=45107149042f28ba851bebdadc1a21ebb63a2f73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:4f:f2:6e:96:0f:ae:63:e5:c3:48:fb:40:02:
b7:f1:22:53:a7:1b:d7:13:d0:df:ce:7d:7f:fb:be:
0e:61:1f:ba:bb:3a:ed:c8:21:3a:4f:81:44:e1:aa:
7e:39:e0:5e:1a:06:ab:a5:d3:b5:ad:65:9e:04:d0:
a6:73:dd:70:c0:be:f6:cd:ce:8d:11:09:96:e3:58:
b6:34:50:ce:62:05:09:ca:c4:54:aa:9d:9a:5d:f4:
c0:f3:c8:f8:79:3b:67:2f:64:c1:a0:fb:43:ce:85:
2d:1d:76:be:d9:0e:94:8c:7f:03:f0:63:35:69:6f:
65:75:2c:1b:53:20:07:e0:a8:b4:ab:bc:f2:fd:90:
e7:b2:ea:4a:2b:96:fd:75:f6:fc:b6:01:b9:84:fd:
14:f5:0d:bc:35:8e:a7:9c:85:8c:5f:b8:28:a2:e9:
eb:8d:6d:62:11:24:b1:2d:2a:a2:24:58:1f:17:28:
83:15:ef:09:e9:47:f4:e5:06:4a:d1:ce:e8:0e:18:
a1:e2:a0:65:76:28:f2:65:47:ca:90:a7:62:d3:0a:
e8:dc:7d:49:59:f7:d2:9c:da:9a:53:ae:fc:d4:18:
9e:33:bc:95:dc:86:84:fb:0b:44:c4:c0:3e:34:54:
ed:c7:98:61:60:38:87:84:bf:ca:a1:55:ff:5e:52:
de:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:10:71:49:04:2F:28:BA:85:1B:EB:DA:DC:1A:21:EB:B6:3A:2F:73
X509v3 Authority Key Identifier:
keyid:29:95:94:4E:84:DC:37:BA:6A:42:D6:8B:B1:E2:B9:A4:42:1E:84:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KZWUToTcN7pqQtaLseK5pEIehKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a12069-a061-442e-9bfb-338bdd439ee1/1/RRBxSQQvKLqFG-va3Boh67Y6L3M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a12069-a061-442e-9bfb-338bdd439ee1/1/KZWUToTcN7pqQtaLseK5pEIehKQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.114.184.0/22
IPv6:
2a06:7100::/29
Signature Algorithm: sha256WithRSAEncryption
42:19:99:66:0f:0b:64:1f:1d:11:b1:00:1f:a6:74:7f:92:9b:
da:00:fb:35:91:41:32:1b:e6:e0:c5:ce:45:a9:09:50:eb:70:
71:f6:23:ec:d5:ea:9c:b4:36:23:78:db:de:07:bb:1b:e4:91:
02:22:01:c8:f8:e7:1f:49:d0:2e:a7:35:ea:07:b1:a9:09:79:
c4:8c:0c:62:00:f8:07:2c:2c:37:c9:4f:e5:13:c0:53:df:ee:
93:0a:ee:fd:8b:b0:10:ce:b7:1b:a2:b9:a5:0f:fe:8f:da:4e:
1d:ae:67:72:4d:75:fd:5f:0a:63:7e:c0:ae:6a:d2:2f:aa:3c:
a8:e9:38:9c:18:f9:1e:85:db:f6:fb:52:b5:ee:1d:f8:3a:7f:
1a:09:99:b9:69:71:70:14:b0:1d:fa:09:84:f2:2b:32:4e:92:
b9:07:33:60:e1:18:36:ec:1b:01:d6:7d:c4:8f:47:df:a6:c7:
49:76:d0:78:a7:44:34:39:09:1a:f3:19:9e:18:53:d7:f2:ef:
91:b7:79:6d:bf:b3:0f:49:24:8f:4b:94:4e:5d:92:b3:ce:2b:
7e:56:3d:e1:25:e8:8a:3f:33:62:c1:8d:e2:06:cf:97:5d:77:
61:69:78:a5:53:58:6f:1d:b5:f6:1b:82:a0:08:02:8d:8d:8e:
7e:71:0b:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 09:46:33 2024 by rpki-client on console-ams.rpki-client.org