Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/b3019c-66cf-4f98-a856-134c47b94913/1/lsAyzCphbEUIPNN-rbDSf7AdbxQ.roa
File: lsAyzCphbEUIPNN-rbDSf7AdbxQ.roa (raw, json)
Hash identifier: pw3vzQAn5UZydG9onYXOW74FA/BONOF1cyhfmpCv3yc=
Subject key identifier: 96:C0:32:CC:2A:61:6C:45:08:3C:D3:7E:AD:B0:D2:7F:B0:1D:6F:14
Certificate issuer: /CN=dd29c370460bec753010fc7e68365c5770bf45e4
Certificate serial: 018CCA996976C21308E2C2B7614D87851ABC
Authority key identifier: DD:29:C3:70:46:0B:EC:75:30:10:FC:7E:68:36:5C:57:70:BF:45:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/b3019c-66cf-4f98-a856-134c47b94913/1/lsAyzCphbEUIPNN-rbDSf7AdbxQ.roa
Signing time: Tue 02 Jan 2024 14:35:00 +0000
ROA not before: Tue 02 Jan 2024 14:35:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15576
IP address blocks: 185.243.161.0/24 maxlen: 24
185.243.160.0/24 maxlen: 24
2a09:900:2::/47 maxlen: 47
2a09:900:200::/40 maxlen: 40
2a09:900:100::/40 maxlen: 40
2a09:900::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/b3019c-66cf-4f98-a856-134c47b94913/1/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/b3019c-66cf-4f98-a856-134c47b94913/1/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 10:03:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:99:69:76:c2:13:08:e2:c2:b7:61:4d:87:85:1a:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd29c370460bec753010fc7e68365c5770bf45e4
Validity
Not Before: Jan 2 14:35:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=96c032cc2a616c45083cd37eadb0d27fb01d6f14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3c:9f:34:db:4b:60:75:c8:97:0e:3d:36:ab:
35:b6:ed:17:f1:53:44:98:4c:50:aa:f8:9a:a8:fb:
d1:60:1e:13:b0:ed:65:33:d8:a5:1a:95:51:b8:0a:
c4:bf:c2:8c:39:96:1d:aa:58:94:b6:68:fe:a2:d0:
71:ab:94:aa:a1:4f:92:c4:06:8e:c6:1e:99:d8:8f:
75:49:a9:62:71:17:82:a4:fe:b9:77:fd:a9:c3:8c:
1f:2e:47:41:9e:de:8f:88:1e:9c:65:2c:11:11:3d:
f2:e7:86:21:db:7b:8a:22:e6:6b:74:a9:e1:55:8d:
98:3b:ba:0e:14:0a:3d:5c:17:d6:3e:b6:a4:27:5b:
44:96:11:c9:b2:de:c3:19:49:fb:27:21:1a:09:29:
2e:45:e7:87:cd:70:b5:c7:de:df:95:32:d3:67:b5:
f3:4b:40:c2:cf:0a:83:eb:93:7a:bc:93:87:b8:3a:
6c:4c:fd:ef:19:80:74:8e:00:66:56:e8:89:8c:b7:
b7:9f:54:64:47:c0:30:a6:9c:f3:e5:dd:a7:33:90:
53:3c:72:0a:80:4b:ea:83:c3:13:34:56:1c:92:b3:
04:df:c7:73:be:c2:61:51:2c:c3:7a:59:69:9a:05:
0a:d2:13:5d:a3:83:3a:a6:6d:4f:f8:6f:8f:63:60:
e7:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:C0:32:CC:2A:61:6C:45:08:3C:D3:7E:AD:B0:D2:7F:B0:1D:6F:14
X509v3 Authority Key Identifier:
keyid:DD:29:C3:70:46:0B:EC:75:30:10:FC:7E:68:36:5C:57:70:BF:45:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b3019c-66cf-4f98-a856-134c47b94913/1/lsAyzCphbEUIPNN-rbDSf7AdbxQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b3019c-66cf-4f98-a856-134c47b94913/1/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.243.160.0/23
IPv6:
2a09:900::/46
2a09:900:100::-2a09:900:2ff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
2c:8f:0b:3f:11:64:0e:95:fd:aa:32:61:8d:f6:6a:d1:b0:24:
8f:54:fc:5e:3e:38:c9:f0:79:24:ae:fd:88:ab:05:20:99:f2:
d1:b4:97:1c:03:4f:4f:4e:cc:19:6d:07:e5:19:53:ff:0f:1a:
51:3b:75:be:b6:0f:43:d0:8c:b7:33:aa:8f:4b:78:8a:d6:f6:
61:a7:bb:0a:43:4d:79:88:d9:f7:3e:fc:d9:d1:a8:73:63:f9:
e8:dd:44:d4:79:b1:bc:f4:26:98:45:e2:8e:12:cd:29:85:36:
73:65:52:8f:79:61:a5:26:a0:66:f4:70:34:38:77:c6:64:02:
c3:37:68:ed:21:8e:f9:27:2f:40:f4:f2:23:60:c8:f2:30:20:
f0:da:00:c0:fe:f7:4e:b8:00:e1:6e:be:87:4b:49:f8:54:ca:
1c:3c:80:1b:d6:24:dc:81:59:81:70:35:6a:77:f1:12:32:da:
5c:ef:53:78:fe:9c:32:24:2d:c0:9d:bb:bd:30:2f:51:56:eb:
4d:5b:73:c7:0a:7a:17:ef:35:3c:f7:c7:d6:56:8b:a2:55:c3:
0d:56:e4:17:b3:40:8b:97:10:8f:f8:b9:80:b7:10:b2:68:8b:
4d:4f:15:b6:73:95:93:3a:ab:c3:fa:ee:7b:bb:9a:a4:c2:6a:
c4:73:21:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 14:43:27 2024 by rpki-client on console-ams.rpki-client.org