Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/539171-574b-4451-b6d4-57f9bc6a5c30/1/TAkM8Kse39fYFWrzvcgYoZNIxNU.roa
File: TAkM8Kse39fYFWrzvcgYoZNIxNU.roa (raw, json)
Hash identifier: rBVftS0XyjzgWuJ1u7JhBvhPctvcwb9qnkCw9DXr2zA=
Subject key identifier: 4C:09:0C:F0:AB:1E:DF:D7:D8:15:6A:F3:BD:C8:18:A1:93:48:C4:D5
Certificate issuer: /CN=c7485e29f118c01be86c19e668facfa485de718c
Certificate serial: 018CC5003FDFA647D59CAA072F9E23899037
Authority key identifier: C7:48:5E:29:F1:18:C0:1B:E8:6C:19:E6:68:FA:CF:A4:85:DE:71:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x0heKfEYwBvobBnmaPrPpIXecYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/539171-574b-4451-b6d4-57f9bc6a5c30/1/TAkM8Kse39fYFWrzvcgYoZNIxNU.roa
Signing time: Mon 01 Jan 2024 12:29:37 +0000
ROA not before: Mon 01 Jan 2024 12:29:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44472
IP address blocks: 185.43.147.0/24 maxlen: 24
86.111.52.0/23 maxlen: 24
2a12:c440::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/539171-574b-4451-b6d4-57f9bc6a5c30/1/x0heKfEYwBvobBnmaPrPpIXecYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/539171-574b-4451-b6d4-57f9bc6a5c30/1/x0heKfEYwBvobBnmaPrPpIXecYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/x0heKfEYwBvobBnmaPrPpIXecYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:3f:df:a6:47:d5:9c:aa:07:2f:9e:23:89:90:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7485e29f118c01be86c19e668facfa485de718c
Validity
Not Before: Jan 1 12:29:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4c090cf0ab1edfd7d8156af3bdc818a19348c4d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:42:bd:00:ea:88:88:8c:d6:73:5c:cd:34:3f:
32:9a:c2:41:66:b3:bd:30:1a:b4:b5:51:98:ec:f0:
35:50:11:56:77:55:4d:3f:63:53:6f:c1:26:1c:c5:
28:fa:e6:7f:1b:e5:3f:c8:57:fe:8f:df:2f:9c:4f:
9b:9f:55:c3:2d:73:d2:78:f1:1a:7f:e1:06:aa:f5:
39:b0:ff:95:09:f1:37:50:4f:39:9a:5c:7f:e0:19:
91:f3:1e:d5:4a:e7:d8:83:47:74:c4:51:f8:57:e1:
ce:8e:21:78:84:53:e1:2c:f9:36:31:47:e9:54:1a:
06:a7:03:f4:27:70:4d:74:b5:c1:83:84:d8:32:f8:
b2:a4:ec:e2:97:1e:9b:19:3e:a0:51:4d:95:30:95:
5d:81:63:9e:ce:a9:5b:84:43:e5:12:cf:ca:fa:70:
16:2f:d6:cf:68:ec:7f:dc:17:56:f6:ed:57:1b:c1:
ca:f2:a1:aa:ef:10:57:62:53:c1:01:fa:e2:c7:a2:
34:74:af:21:57:58:74:54:21:b7:7f:62:6b:15:1b:
c8:3e:34:68:d0:0e:97:df:76:fa:bf:e4:bf:d3:c7:
af:43:94:46:76:e7:7e:5d:4f:d6:cf:41:1b:4e:f6:
a2:67:5a:82:b5:20:78:78:5b:29:65:ab:ef:fb:b0:
d7:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:09:0C:F0:AB:1E:DF:D7:D8:15:6A:F3:BD:C8:18:A1:93:48:C4:D5
X509v3 Authority Key Identifier:
keyid:C7:48:5E:29:F1:18:C0:1B:E8:6C:19:E6:68:FA:CF:A4:85:DE:71:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0heKfEYwBvobBnmaPrPpIXecYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/539171-574b-4451-b6d4-57f9bc6a5c30/1/TAkM8Kse39fYFWrzvcgYoZNIxNU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/539171-574b-4451-b6d4-57f9bc6a5c30/1/x0heKfEYwBvobBnmaPrPpIXecYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.111.52.0/23
185.43.147.0/24
IPv6:
2a12:c440::/29
Signature Algorithm: sha256WithRSAEncryption
82:41:01:d4:f3:5e:c8:51:dd:8d:b4:7b:16:e6:10:3c:5f:b9:
0b:ca:fd:16:f9:cf:40:18:9a:ff:10:25:fe:3f:42:f9:b7:31:
89:61:86:33:67:e6:37:52:cd:9e:80:06:fb:8e:c1:40:41:01:
f2:d5:e0:76:73:7b:a1:d7:91:79:2f:62:79:f6:db:c2:5a:3a:
29:fc:4c:3a:de:07:21:3e:fe:66:3f:3c:d6:13:d1:95:04:d8:
4a:59:1b:e9:7f:40:28:29:11:9c:ee:70:fa:de:f4:34:44:52:
1a:2e:ba:21:fa:74:3c:ec:f4:ee:51:89:87:37:a9:f7:2b:75:
b0:10:8a:b1:f6:92:32:34:8a:cf:37:54:67:f1:da:d3:ea:bd:
75:ec:b2:d5:89:41:e4:6b:84:8f:7b:3f:4c:75:d5:5d:b9:91:
0c:20:db:74:17:fd:8e:b2:c5:89:ff:fe:b7:29:56:02:87:99:
55:b3:d3:0f:a3:a8:bb:29:4f:99:e1:a5:d7:74:50:af:40:c5:
3d:44:5a:7d:0e:c4:33:a2:28:46:96:50:0d:05:c4:10:45:d0:
0a:bc:2e:15:fe:10:46:68:0b:10:97:ad:64:0e:1b:66:78:5a:
d3:b3:03:45:91:58:04:63:e1:3f:e5:37:1f:02:ce:c3:1a:a2:
c2:ad:5e:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 19:36:29 2024 by rpki-client on console-fra.rpki-client.org