Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/Pv_KQhEikbXbX4UFHynCT9TSJRg.roa
File: Pv_KQhEikbXbX4UFHynCT9TSJRg.roa (raw, json)
Hash identifier: /NrSvueUoL3QZwJV+jF2qjwklCRWUVPDsrHokaMAJDo=
Subject key identifier: 3E:FF:CA:42:11:22:91:B5:DB:5F:85:05:1F:29:C2:4F:D4:D2:25:18
Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Certificate serial: 018CC2DACDECF90CFC85CDFDD38865A8BC64
Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/Pv_KQhEikbXbX4UFHynCT9TSJRg.roa
Signing time: Mon 01 Jan 2024 02:29:28 +0000
ROA not before: Mon 01 Jan 2024 02:29:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203704
IP address blocks: 185.124.4.0/22 maxlen: 24
185.207.144.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:cd:ec:f9:0c:fc:85:cd:fd:d3:88:65:a8:bc:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Validity
Not Before: Jan 1 02:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3effca42112291b5db5f85051f29c24fd4d22518
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:1e:64:11:30:19:0d:0a:46:89:a4:bd:ca:bf:
5c:ed:da:3a:b1:1e:b2:ca:d8:7f:ab:56:91:c5:e4:
c7:ea:3a:7a:88:97:e8:85:d1:7e:dd:38:6a:fb:30:
90:cc:a4:1d:8e:73:ff:db:be:65:d9:67:73:0b:e7:
f8:29:7d:f1:61:eb:b5:52:cf:23:2d:91:fa:4a:e4:
20:b4:0b:97:ae:53:79:79:01:a2:d2:78:77:29:d6:
55:37:49:c8:11:dc:02:1e:8c:57:29:83:ab:3a:88:
a6:69:ac:10:38:f3:94:cc:bf:9d:18:7d:3f:cf:c5:
00:79:fd:e5:e8:21:4e:09:db:69:41:f1:47:ff:f7:
2c:b6:d7:e5:32:1f:a1:8f:15:38:36:e6:95:a9:46:
be:80:16:df:7d:56:1b:2b:6e:08:bb:87:1f:2d:7c:
ad:1e:41:93:1f:96:7d:81:34:8a:05:44:cf:33:45:
b2:a3:ca:b4:6e:ed:23:07:02:0e:6f:e9:89:24:42:
01:e8:43:8c:50:ab:03:0f:de:8b:f9:c1:d5:ae:6b:
f8:26:ed:55:d3:fd:85:ee:1a:96:3e:0b:48:fb:9f:
55:89:fb:b6:95:cb:7b:a8:fa:47:79:6f:f1:ee:a0:
8e:c9:56:32:d6:e8:d9:dd:ef:e5:b5:31:b6:92:e2:
ca:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:FF:CA:42:11:22:91:B5:DB:5F:85:05:1F:29:C2:4F:D4:D2:25:18
X509v3 Authority Key Identifier:
keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/Pv_KQhEikbXbX4UFHynCT9TSJRg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.124.4.0/22
185.207.144.0/22
Signature Algorithm: sha256WithRSAEncryption
13:f0:76:da:d7:73:3a:8b:83:6f:46:07:d8:94:81:e3:b6:69:
8a:c8:68:e5:07:11:11:3b:c8:52:30:98:14:7f:51:f5:22:d7:
41:89:f1:09:17:39:9e:91:3c:08:3d:38:fc:cd:7c:fa:45:fd:
c2:fb:3b:55:b1:41:6a:16:85:a2:53:21:85:80:ec:08:96:6d:
6b:c9:93:a8:92:be:83:f3:77:05:0d:2e:e0:46:e1:f0:56:56:
e0:f1:4e:95:0c:fe:52:60:7f:e1:0b:e5:1f:76:8a:d1:f2:64:
50:a7:d8:bb:96:50:4a:28:95:df:c1:b0:ee:53:11:8c:ee:f6:
ad:c8:f3:ed:ce:f2:c0:33:a8:3a:64:de:3d:15:b8:c6:10:2b:
fb:38:ea:0b:1a:ed:56:aa:aa:a0:a8:5c:7a:eb:bd:46:a1:c9:
3d:33:f3:69:9f:d4:a0:11:f6:ef:be:2e:c7:6d:c9:01:12:d2:
0f:2a:15:5e:5b:d0:ae:ac:69:ec:58:a8:a7:6b:b6:84:53:95:
24:0f:88:bc:8e:ce:60:eb:bc:68:30:0f:19:ac:30:36:59:4e:
a2:4f:07:ce:b1:71:10:db:c9:72:8c:64:4b:31:64:f3:e8:87:
86:53:0e:90:2a:97:38:05:e1:60:4c:3f:90:ca:b3:44:21:cf:
3b:12:ea:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 20:26:08 2024 by rpki-client on console-ams.rpki-client.org