Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/oDG92IltuWRAout8DiuQOd6mwN0.roa
File: oDG92IltuWRAout8DiuQOd6mwN0.roa (raw, json)
Hash identifier: Dy1sckAy6SnN985aUfcG6wjjvbDmMJgvgTUIqqrAY6U=
Subject key identifier: A0:31:BD:D8:89:6D:B9:64:40:A2:EB:7C:0E:2B:90:39:DE:A6:C0:DD
Certificate issuer: /CN=b40d494333cb4d9e5fd10c846c47cf56445c503a
Certificate serial: 018CC7259A038D75A33C8EACC2B2E7CDF548
Authority key identifier: B4:0D:49:43:33:CB:4D:9E:5F:D1:0C:84:6C:47:CF:56:44:5C:50:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/oDG92IltuWRAout8DiuQOd6mwN0.roa
Signing time: Mon 01 Jan 2024 22:29:39 +0000
ROA not before: Mon 01 Jan 2024 22:29:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203068
IP address blocks: 185.145.179.0/24 maxlen: 24
185.145.176.0/24 maxlen: 24
185.145.177.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.mft
rsync://rpki.ripe.net/repository/DEFAULT/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 17:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:25:9a:03:8d:75:a3:3c:8e:ac:c2:b2:e7:cd:f5:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b40d494333cb4d9e5fd10c846c47cf56445c503a
Validity
Not Before: Jan 1 22:29:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a031bdd8896db96440a2eb7c0e2b9039dea6c0dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b7:7f:0a:f5:ae:de:40:36:d2:26:1a:f3:1a:
4c:4a:6b:5c:b5:f8:c2:6e:6d:cc:bc:c6:e3:7a:63:
69:da:30:75:7f:cd:f7:80:5f:7b:6f:5e:aa:d3:0d:
df:e6:59:2e:b1:1d:e9:81:73:ad:84:f0:9b:22:85:
98:d8:bf:90:bb:6e:cc:c2:96:29:00:d9:29:f2:9f:
af:e3:bd:40:75:62:7d:b1:4e:3f:0e:df:4e:ed:72:
6f:56:50:0d:4f:df:f7:df:dd:02:f0:c5:4b:be:7d:
35:8b:0c:25:7a:70:16:ec:18:12:e7:56:1e:28:ac:
cb:ed:28:6f:23:b4:e4:75:73:9a:45:a3:de:6b:47:
60:07:72:98:12:64:bd:65:45:f0:15:27:88:fb:36:
11:34:4d:d5:ce:c7:1c:cc:1b:15:6d:02:8e:95:8a:
e9:f2:4f:9f:e2:0c:f0:6a:9a:d2:2d:09:b5:0a:b9:
dd:c8:d3:1a:26:c2:cb:2c:ba:81:c6:f6:07:e8:b9:
e4:65:f9:27:e3:f9:67:12:0d:a6:2b:71:9f:da:58:
b4:7b:bb:66:00:5d:3c:0a:e9:e0:4a:60:c1:38:1c:
55:7d:e4:7f:dd:e0:14:77:19:f0:cb:8b:9a:96:2d:
9a:50:81:a8:08:04:a0:7f:0c:10:43:9b:e4:0f:30:
f7:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:31:BD:D8:89:6D:B9:64:40:A2:EB:7C:0E:2B:90:39:DE:A6:C0:DD
X509v3 Authority Key Identifier:
keyid:B4:0D:49:43:33:CB:4D:9E:5F:D1:0C:84:6C:47:CF:56:44:5C:50:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/oDG92IltuWRAout8DiuQOd6mwN0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.145.176.0/23
185.145.179.0/24
Signature Algorithm: sha256WithRSAEncryption
09:49:13:6b:6c:7e:02:db:d2:08:72:6f:69:d5:ae:09:ee:43:
ed:46:f8:5d:dd:c3:ce:34:e5:14:50:e4:7c:7a:99:98:c3:df:
b9:7a:a7:f8:36:b3:56:46:d0:bd:bd:4f:89:c4:9a:c1:00:b9:
03:d7:07:38:e3:be:ae:1c:03:0c:c4:7d:79:4b:7d:36:ea:d8:
75:aa:f0:90:14:6e:ed:ea:db:ef:2d:41:5a:24:fc:19:ca:99:
4c:49:c4:7b:ad:ce:b4:5b:51:6e:9c:37:68:fd:80:ec:92:d8:
e8:c4:0d:09:d5:a9:cd:ef:5d:ed:4d:b4:5c:09:08:6a:0a:cd:
63:84:44:f0:3b:18:45:09:96:6f:34:36:41:ab:c7:13:e2:60:
c3:72:c3:fc:6f:94:80:ac:a2:0f:c1:2a:6c:e1:a1:ba:23:98:
cb:60:eb:dd:72:a9:cc:99:7a:99:fb:5d:b3:83:7a:c3:8d:74:
cb:3b:01:30:0f:07:f5:a9:83:84:db:07:77:bb:89:77:13:75:
e8:c6:c5:7c:b8:7d:c5:4d:ac:11:bb:5a:56:16:6d:ea:5b:a4:
38:77:57:23:bb:f9:8b:77:1a:5a:b8:16:84:d5:a0:ee:70:ab:
d3:68:d4:a8:ec:b4:2c:52:32:ff:ee:b7:e8:7c:80:66:19:4f:
40:c2:60:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:34:34 2024 by rpki-client on console-ams.rpki-client.org