Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/aM4b72fwLxyWaNtXeAtL52Pnye0.roa
File: aM4b72fwLxyWaNtXeAtL52Pnye0.roa (raw, json)
Hash identifier: 7IidiQ1Si8IpF8MC68ohP1xPnBUSRwZ8orCRTORWeYg=
Subject key identifier: 68:CE:1B:EF:67:F0:2F:1C:96:68:DB:57:78:0B:4B:E7:63:E7:C9:ED
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 018CCA2B55088967862D3A7536C67A945638
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/aM4b72fwLxyWaNtXeAtL52Pnye0.roa
Signing time: Tue 02 Jan 2024 12:34:46 +0000
ROA not before: Tue 02 Jan 2024 12:34:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48105
IP address blocks: 185.142.141.0/24 maxlen: 32
2a06:7a04::/43 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 20:58:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:55:08:89:67:86:2d:3a:75:36:c6:7a:94:56:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 2 12:34:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=68ce1bef67f02f1c9668db57780b4be763e7c9ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f9:8b:43:9f:7d:73:bd:42:6f:d0:45:bc:ad:
3b:7a:29:e1:9e:23:be:08:c0:54:78:b8:9e:d1:24:
5a:0b:05:7f:a6:e0:94:4e:f6:b2:8b:39:d8:6c:e7:
7d:cd:96:50:1b:b5:ec:ef:4a:79:e2:57:58:d7:3c:
b7:c8:a5:fb:5a:cd:5c:20:55:e4:db:e1:c8:70:4b:
61:65:75:f5:f8:c2:9e:73:9b:b3:53:25:02:11:09:
e7:da:18:ef:0d:a5:d8:02:63:c3:4b:a3:f6:38:e6:
07:48:7e:4f:9b:93:d4:18:f9:86:0e:74:bb:df:e2:
55:27:72:66:6c:1e:35:b9:e3:6b:a7:d3:e6:60:7d:
94:e6:7e:39:bd:33:a7:c6:19:00:b2:9f:24:ce:e0:
79:62:98:7c:c5:91:3a:4c:d5:2c:d0:38:11:a6:f7:
75:71:66:85:3c:87:d7:62:75:ae:ed:e6:3d:20:6e:
02:fb:cf:41:76:b3:50:de:28:c1:1a:eb:44:01:87:
41:3d:05:26:ee:b6:16:20:f6:6f:eb:55:0e:b5:52:
da:99:cf:e8:8a:e4:96:39:9b:05:47:0e:0b:0d:2b:
b4:5c:1c:12:82:6e:6b:a2:2d:9b:0b:5b:8a:73:53:
20:fd:8b:75:a3:9d:b7:6b:79:af:3c:92:14:d7:e7:
99:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:CE:1B:EF:67:F0:2F:1C:96:68:DB:57:78:0B:4B:E7:63:E7:C9:ED
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/aM4b72fwLxyWaNtXeAtL52Pnye0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.142.141.0/24
IPv6:
2a06:7a04::/43
Signature Algorithm: sha256WithRSAEncryption
ce:56:70:a6:a1:15:bc:d0:5b:b0:4e:f1:a8:e7:fa:47:46:19:
8d:2b:32:cc:90:6c:4e:3d:dc:88:11:7c:1b:bf:3c:53:1d:6c:
e3:37:5f:5e:4a:c8:1b:79:96:64:25:3c:74:68:39:a9:42:0d:
e2:10:86:e3:6c:b6:af:ea:b0:9d:89:33:d6:31:6a:1b:9d:1c:
4a:04:ca:ca:30:00:4b:23:71:c9:a6:2a:de:bd:da:76:0e:6c:
ca:90:6c:8e:63:bd:46:75:98:2b:a0:b6:d3:69:3f:64:7c:df:
2d:44:5a:f0:c8:18:9f:65:85:14:ab:98:8e:5c:03:9f:e3:58:
54:c1:aa:77:3a:f4:80:be:08:90:c0:4d:61:3d:c8:17:a1:f0:
33:42:31:30:7a:09:78:c4:b1:fd:16:84:b2:1d:f9:8e:d5:e3:
ef:50:69:76:fc:f1:d3:1a:15:12:dc:5d:34:2e:aa:d1:09:bf:
7e:11:af:c5:d6:fb:12:09:e9:f0:90:1e:7e:bc:84:35:51:6d:
46:2c:e8:f6:20:5c:37:e9:68:8b:60:11:bb:83:eb:eb:05:f0:
9d:c3:1a:27:24:13:42:60:04:9e:0f:c4:f4:32:cf:24:6d:3a:
0b:78:27:71:8d:22:10:de:d9:bf:ae:5a:9e:08:bb:b8:2d:e9:
ba:dd:ca:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 00:35:58 2024 by rpki-client on console-fra.rpki-client.org