Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/JOQua4WvKtrx54aLg5zVw47yyHo.roa
File: JOQua4WvKtrx54aLg5zVw47yyHo.roa (raw, json)
Hash identifier: BkBKTDnMq++2hmlfNuseiG+BjhSNW4GvQA0wkUrwYE8=
Subject key identifier: 24:E4:2E:6B:85:AF:2A:DA:F1:E7:86:8B:83:9C:D5:C3:8E:F2:C8:7A
Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Certificate serial: 018CC2DAD4FD243EB99D808630EBF17A1C41
Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/JOQua4WvKtrx54aLg5zVw47yyHo.roa
Signing time: Mon 01 Jan 2024 02:29:30 +0000
ROA not before: Mon 01 Jan 2024 02:29:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209451
IP address blocks: 185.245.132.0/22 maxlen: 24
2a09:55c0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 04:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:d4:fd:24:3e:b9:9d:80:86:30:eb:f1:7a:1c:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Validity
Not Before: Jan 1 02:29:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=24e42e6b85af2adaf1e7868b839cd5c38ef2c87a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f8:3d:66:04:4d:e0:c2:7b:02:95:a1:7d:14:
b7:94:15:ab:25:e0:7a:18:e1:e4:9b:2e:7d:40:bc:
3c:f8:07:7f:75:22:6b:a4:5f:d9:9d:81:d9:48:58:
1b:57:3e:2d:fb:a1:9a:ad:c7:dd:65:64:bb:9c:40:
f9:bf:07:fa:47:ca:d3:80:67:02:6e:97:60:7f:6e:
ac:47:1f:66:09:41:e7:fe:e1:16:ae:79:b5:bd:19:
10:74:8e:80:88:1d:02:a2:fa:bd:c1:84:b9:19:c7:
bb:27:4a:05:1d:d6:65:e0:3e:cd:51:0e:0c:e5:c3:
97:7f:cc:92:62:3c:bb:39:00:89:fb:ab:42:b8:81:
82:83:7c:ad:22:f8:a1:52:64:64:e6:0d:ed:44:d0:
08:75:08:31:9b:52:91:7e:e9:69:f1:8e:f5:0e:e6:
3f:9b:ce:84:e8:65:5a:41:b8:78:e1:68:f3:99:47:
4a:0c:7e:a7:21:45:8c:41:a6:62:08:1d:89:3a:45:
c7:3b:47:96:c3:9a:bc:47:92:47:1e:6d:01:9e:fe:
a6:af:d2:6e:60:0d:69:8c:ed:f4:d5:16:34:86:bd:
4a:c1:9d:db:b0:e4:70:ef:08:8f:66:4a:85:dd:fc:
b5:31:9f:c7:89:ee:f4:9b:4f:bc:e8:f0:6f:7e:5c:
96:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:E4:2E:6B:85:AF:2A:DA:F1:E7:86:8B:83:9C:D5:C3:8E:F2:C8:7A
X509v3 Authority Key Identifier:
keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/JOQua4WvKtrx54aLg5zVw47yyHo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.245.132.0/22
IPv6:
2a09:55c0::/29
Signature Algorithm: sha256WithRSAEncryption
a8:6c:a7:55:40:ab:85:ec:4a:2b:fc:39:8e:7d:c0:4f:aa:27:
16:99:58:05:b7:55:72:1d:31:df:20:ec:01:0d:cb:dd:1a:a4:
40:cb:9c:c3:da:d9:4c:14:57:3a:d5:69:44:e4:c5:6d:a1:be:
30:ce:ae:a2:c3:a2:4b:b7:82:12:d6:43:b0:0a:d0:90:2b:57:
5e:25:e7:00:32:a3:1d:ae:25:34:a4:17:af:cf:cc:fb:c0:0a:
66:d2:2b:7c:1a:c9:91:64:31:94:8e:50:87:cb:f4:9c:3a:44:
b5:ce:fb:cb:10:d5:68:16:d1:91:09:38:7b:b5:a0:38:54:0d:
5a:83:44:49:5e:a4:09:9a:85:a0:b8:e1:77:3f:3a:b5:e1:32:
d4:45:1a:77:f8:2f:84:4f:29:74:e6:b4:26:39:8f:1f:10:a1:
d3:52:42:53:6a:b5:c7:f8:20:94:d2:4e:5c:e7:fc:f5:cb:73:
1d:31:72:f8:6d:ac:32:f7:8c:c6:fc:16:80:d8:96:2f:81:f9:
3f:5d:4f:1d:54:dd:41:8b:40:87:eb:61:d6:1e:72:db:4e:5c:
81:7d:45:45:d2:c5:5e:5b:4d:75:2c:c6:7c:58:1f:71:c7:43:
7f:a8:a4:e3:6d:74:af:ff:24:2c:18:83:c6:a3:45:4d:a1:b4:
88:fa:c1:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 11:22:54 2024 by rpki-client on console-ams.rpki-client.org