Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/361bae-ab14-4aab-bb8f-7418b92aa209/1/_gwaheNkUtx9BBWenbCVyjQTTPQ.roa
File: _gwaheNkUtx9BBWenbCVyjQTTPQ.roa (raw, json)
Hash identifier: m8R0BbZ3qvKevX/xBTKqNmmB7NYYv6xM4saot5BRY9E=
Subject key identifier: FE:0C:1A:85:E3:64:52:DC:7D:04:15:9E:9D:B0:95:CA:34:13:4C:F4
Certificate issuer: /CN=c0520cecba251cd37cdf3c4d5ab03625522bbaac
Certificate serial: 018CC3B7205D90004BEEE5520DFC2E067050
Authority key identifier: C0:52:0C:EC:BA:25:1C:D3:7C:DF:3C:4D:5A:B0:36:25:52:2B:BA:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wFIM7LolHNN83zxNWrA2JVIruqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/361bae-ab14-4aab-bb8f-7418b92aa209/1/_gwaheNkUtx9BBWenbCVyjQTTPQ.roa
Signing time: Mon 01 Jan 2024 06:30:07 +0000
ROA not before: Mon 01 Jan 2024 06:30:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44108
IP address blocks: 185.179.148.0/24 maxlen: 24
185.179.149.0/24 maxlen: 24
185.231.164.0/24 maxlen: 24
185.231.164.0/23 maxlen: 23
185.231.164.0/22 maxlen: 22
185.231.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/361bae-ab14-4aab-bb8f-7418b92aa209/1/wFIM7LolHNN83zxNWrA2JVIruqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/361bae-ab14-4aab-bb8f-7418b92aa209/1/wFIM7LolHNN83zxNWrA2JVIruqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/wFIM7LolHNN83zxNWrA2JVIruqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 31 May 2024 06:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:20:5d:90:00:4b:ee:e5:52:0d:fc:2e:06:70:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0520cecba251cd37cdf3c4d5ab03625522bbaac
Validity
Not Before: Jan 1 06:30:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fe0c1a85e36452dc7d04159e9db095ca34134cf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:db:ce:0e:58:9b:3c:42:05:56:32:9c:14:37:
bf:8b:4d:18:c5:87:ee:ca:79:ac:90:0d:fb:64:ce:
44:4b:27:9b:a7:46:13:3e:5d:bd:91:dc:60:75:fb:
2b:17:58:ce:8e:ee:a4:e4:de:bc:70:f9:50:1f:1d:
8d:b8:1f:37:2f:28:d4:1f:e3:c2:69:84:c9:89:fd:
03:23:59:9c:e3:31:1d:03:7f:6d:d1:e4:2c:b6:9f:
7d:db:bb:5c:2b:9a:62:99:61:5b:65:17:5a:22:7d:
8f:04:45:c4:1e:70:e5:a7:5c:e0:5a:20:97:2b:c9:
9b:3f:38:e0:4c:fc:37:f6:d7:6e:83:1f:f4:03:e9:
97:bb:d1:5b:5f:84:f4:30:d5:4d:8b:ee:67:68:79:
63:57:eb:69:f5:8e:e2:17:3f:3d:8b:43:18:7d:db:
cd:30:94:5a:03:ee:ea:17:45:ec:4d:d6:d8:a9:ad:
d3:41:4f:c9:04:b7:87:e0:90:46:bc:f7:e0:8c:39:
69:80:8f:79:eb:d2:ea:3f:5e:2f:63:21:eb:bf:a0:
5d:1d:c3:9d:8c:36:06:7e:47:46:78:e5:19:b6:3f:
ea:57:f1:ad:86:80:34:59:68:94:d9:05:42:82:73:
8e:96:74:71:e8:68:09:de:51:eb:d8:4d:fd:d8:70:
77:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:0C:1A:85:E3:64:52:DC:7D:04:15:9E:9D:B0:95:CA:34:13:4C:F4
X509v3 Authority Key Identifier:
keyid:C0:52:0C:EC:BA:25:1C:D3:7C:DF:3C:4D:5A:B0:36:25:52:2B:BA:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wFIM7LolHNN83zxNWrA2JVIruqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/361bae-ab14-4aab-bb8f-7418b92aa209/1/_gwaheNkUtx9BBWenbCVyjQTTPQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/361bae-ab14-4aab-bb8f-7418b92aa209/1/wFIM7LolHNN83zxNWrA2JVIruqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.179.148.0/23
185.231.164.0/22
Signature Algorithm: sha256WithRSAEncryption
1a:8e:e6:25:16:85:29:95:da:81:91:61:37:a6:6f:52:84:cd:
f9:87:48:d9:64:85:af:2d:ad:09:e2:c1:9e:55:5e:dc:02:12:
c1:dc:3b:93:2e:32:3f:d9:57:47:7b:b0:c7:9f:aa:73:c4:1f:
d4:13:f7:a1:68:b7:60:f1:18:1e:ee:06:a6:ad:08:5a:14:4d:
e2:bb:f7:88:27:59:48:51:4b:cd:bb:74:27:fc:88:00:17:15:
a0:01:b6:4b:ea:c6:13:49:e9:01:9c:a4:76:3f:d9:c7:26:2f:
20:83:44:80:e5:76:8c:57:7f:36:55:5d:7d:88:34:cd:a2:18:
0a:24:ae:fb:10:a3:aa:ed:3c:49:78:0c:14:20:d0:c9:32:2f:
bc:a2:8a:17:31:38:81:b6:b9:5c:74:d2:5c:6a:0b:1f:44:02:
bb:1f:ae:7e:c2:32:f8:89:69:55:40:6b:4e:dc:17:3e:25:1e:
c0:4f:b4:c5:82:38:f4:45:ee:ec:9a:55:8e:ba:87:a5:00:f4:
c4:03:c3:1a:95:a4:c4:d8:03:d7:2d:ba:16:05:ef:5c:40:37:
fa:b7:4d:55:1a:5a:03:92:12:e3:88:bc:e6:3e:dd:e3:07:20:
29:1c:2d:cb:31:8b:f5:c7:85:38:d6:dc:e2:38:01:6d:d3:f5:
0e:78:a5:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 09:47:50 2024 by rpki-client on console-ams.rpki-client.org