Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/b887da-44b9-4be2-866f-d3a85a71b029/1/5dkeGY1pZbXKeN7_YTJeO1i3JwU.roa
File: 5dkeGY1pZbXKeN7_YTJeO1i3JwU.roa (raw, json)
Hash identifier: 0qI0l3xhD7bR92CncHTlHhww2VtoCS2KQlm7dS/PjOE=
Subject key identifier: E5:D9:1E:19:8D:69:65:B5:CA:78:DE:FF:61:32:5E:3B:58:B7:27:05
Certificate issuer: /CN=46acafe61343d710df60cd91de08901fdbba6f8f
Certificate serial: 018CC3B66F69F4DE1757D17B07EB3FC0A16B
Authority key identifier: 46:AC:AF:E6:13:43:D7:10:DF:60:CD:91:DE:08:90:1F:DB:BA:6F:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rqyv5hND1xDfYM2R3giQH9u6b48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/b887da-44b9-4be2-866f-d3a85a71b029/1/5dkeGY1pZbXKeN7_YTJeO1i3JwU.roa
Signing time: Mon 01 Jan 2024 06:29:22 +0000
ROA not before: Mon 01 Jan 2024 06:29:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61010
IP address blocks: 185.20.122.0/24 maxlen: 24
185.20.120.0/22 maxlen: 22
185.20.123.0/24 maxlen: 24
185.20.120.0/24 maxlen: 24
185.20.121.0/24 maxlen: 24
2a00:47a0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/b887da-44b9-4be2-866f-d3a85a71b029/1/Rqyv5hND1xDfYM2R3giQH9u6b48.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/b887da-44b9-4be2-866f-d3a85a71b029/1/Rqyv5hND1xDfYM2R3giQH9u6b48.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rqyv5hND1xDfYM2R3giQH9u6b48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jul 2024 14:20:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:6f:69:f4:de:17:57:d1:7b:07:eb:3f:c0:a1:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46acafe61343d710df60cd91de08901fdbba6f8f
Validity
Not Before: Jan 1 06:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e5d91e198d6965b5ca78deff61325e3b58b72705
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:00:ec:aa:9c:96:5c:01:06:23:33:64:d8:c6:
41:23:5b:3a:cc:8d:42:8a:ff:57:33:de:92:b5:9c:
8e:27:4a:de:46:86:e1:43:65:56:80:e5:50:ee:9c:
07:14:13:c4:ce:ff:ef:11:d3:70:c2:5f:c4:7b:d7:
b7:6e:02:85:6c:16:69:02:88:73:a4:f4:bb:aa:9e:
e4:bd:7a:8c:31:65:a2:50:53:54:24:52:56:d6:f5:
20:87:58:88:0c:ef:d4:65:8c:75:27:c4:81:8c:8d:
e8:67:34:52:26:a4:06:53:b4:ac:bb:52:c6:7a:1a:
28:c1:af:14:d8:02:0c:50:9c:b8:e3:ed:46:e1:1c:
1a:95:7e:78:85:86:72:e3:b0:3b:0a:1e:72:7f:97:
84:dc:ea:8f:6e:85:1f:64:e5:65:66:d5:c7:b9:cc:
9a:09:2a:10:25:19:87:b2:1c:41:ce:32:cd:e8:bd:
30:cd:e8:82:58:27:1c:b5:d7:62:d0:a4:c0:2d:a3:
4e:de:0a:fa:95:64:6d:9a:e4:d5:d2:b7:e5:97:2f:
57:7e:8a:29:56:cc:b2:f0:cd:43:1d:ab:18:a1:97:
72:56:f2:82:7d:6b:8f:f5:8c:f5:2e:58:34:0d:c8:
ce:94:5c:3c:a6:6b:ec:ac:7d:23:ff:40:4c:ad:35:
82:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:D9:1E:19:8D:69:65:B5:CA:78:DE:FF:61:32:5E:3B:58:B7:27:05
X509v3 Authority Key Identifier:
keyid:46:AC:AF:E6:13:43:D7:10:DF:60:CD:91:DE:08:90:1F:DB:BA:6F:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rqyv5hND1xDfYM2R3giQH9u6b48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b887da-44b9-4be2-866f-d3a85a71b029/1/5dkeGY1pZbXKeN7_YTJeO1i3JwU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b887da-44b9-4be2-866f-d3a85a71b029/1/Rqyv5hND1xDfYM2R3giQH9u6b48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.20.120.0/22
IPv6:
2a00:47a0::/32
Signature Algorithm: sha256WithRSAEncryption
65:4d:ac:69:58:99:b8:a8:31:27:56:7e:68:3a:59:c9:7a:a7:
9e:59:e7:95:c5:47:a4:f7:68:21:0a:88:42:a3:19:43:ea:b4:
62:f2:22:f0:50:23:1b:cd:82:b1:a7:ca:27:5f:54:31:23:79:
79:3e:d6:01:17:3b:60:47:09:ba:87:c2:19:15:41:c9:fb:cf:
97:ba:53:05:74:cc:82:91:cd:aa:78:27:9c:d5:02:e0:7b:c6:
60:26:2b:e6:bc:91:82:53:4b:18:97:4f:a4:6b:0c:24:48:53:
71:67:87:5e:80:5e:34:2c:9f:78:cd:21:2a:76:43:71:69:5e:
c5:5a:53:4e:e2:fd:90:17:1a:5c:20:70:32:10:ea:78:c4:54:
15:a2:59:61:4c:3c:71:cf:a7:af:c6:bc:ec:0c:4d:dc:37:7c:
66:bf:45:95:e4:48:69:b7:55:a0:a8:e2:45:2c:91:62:20:2c:
b9:1a:69:d8:85:03:44:e1:bb:95:aa:5d:b2:6e:df:b1:d4:7c:
7c:3e:8e:a8:d7:60:16:e7:bc:24:25:9e:ef:2d:be:e4:5c:e1:
02:e8:51:70:71:28:56:a1:81:bf:e2:77:52:dc:a2:4a:73:ca:
59:67:65:68:a4:32:0c:61:f5:97:b4:34:ac:50:f2:bc:95:4b:
39:ec:c2:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 2 22:17:31 2024 by rpki-client on console-fra.rpki-client.org