Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/Dh86mckR-Sq_nG2HRu6P6RwP-m0.roa
File: Dh86mckR-Sq_nG2HRu6P6RwP-m0.roa (raw, json)
Hash identifier: DFafzPPWEbA15YDi1oBUS7ZktMxgLwp5obqEYx7nDtI=
Subject key identifier: 0E:1F:3A:99:C9:11:F9:2A:BF:9C:6D:87:46:EE:8F:E9:1C:0F:FA:6D
Certificate issuer: /CN=2c71c96005e13a84a3f31ef1d991777f4b6e31a7
Certificate serial: 0191E4FA3857C7F752A0A1018F6F6244085E
Authority key identifier: 2C:71:C9:60:05:E1:3A:84:A3:F3:1E:F1:D9:91:77:7F:4B:6E:31:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/Dh86mckR-Sq_nG2HRu6P6RwP-m0.roa
Signing time: Thu 12 Sep 2024 06:44:49 +0000
ROA not before: Thu 12 Sep 2024 06:44:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215074
IP address blocks: 185.185.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft
rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:e4:fa:38:57:c7:f7:52:a0:a1:01:8f:6f:62:44:08:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c71c96005e13a84a3f31ef1d991777f4b6e31a7
Validity
Not Before: Sep 12 06:44:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0e1f3a99c911f92abf9c6d8746ee8fe91c0ffa6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:8c:7f:b3:40:e8:41:c6:89:01:89:0a:36:ee:
02:ff:52:f1:09:4d:7d:b5:f4:67:e5:ab:90:68:9a:
1b:59:ae:6d:b1:b6:20:0a:93:25:a3:0e:e9:ad:28:
1b:25:1f:f5:ae:8d:98:fd:b9:b6:13:db:98:9e:28:
39:f8:2a:25:c7:16:81:a8:fe:04:d9:06:d0:29:7d:
3c:34:dd:c2:f3:55:4f:c0:6d:8e:d7:c5:ba:f9:f5:
6f:d0:32:e4:53:6b:f0:71:14:71:48:12:b6:45:d9:
3a:0e:3b:b8:3e:08:49:56:e6:84:58:cf:0d:f6:93:
0e:c7:f7:e8:af:8d:5f:bf:b5:56:17:3e:b6:ea:2e:
e0:ba:6d:48:d2:c6:4c:02:ee:56:cf:a2:b9:00:80:
34:59:fc:04:e5:b1:1d:fb:c7:cd:48:fc:85:8a:80:
76:04:0d:4c:cc:1e:8b:ce:c6:f1:00:19:6e:f2:d7:
a3:7f:a1:33:ec:5d:87:c1:45:16:21:39:4b:ee:cc:
46:4b:de:36:5a:b5:9e:c5:28:20:13:4f:0d:81:ce:
9a:5a:a8:44:a1:2f:7f:63:03:83:75:d5:0f:8b:8d:
47:1d:fa:db:20:a3:96:98:33:f0:90:95:cd:d4:de:
71:fe:92:75:cc:14:1d:30:e5:ef:51:07:20:86:06:
a2:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:1F:3A:99:C9:11:F9:2A:BF:9C:6D:87:46:EE:8F:E9:1C:0F:FA:6D
X509v3 Authority Key Identifier:
keyid:2C:71:C9:60:05:E1:3A:84:A3:F3:1E:F1:D9:91:77:7F:4B:6E:31:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/Dh86mckR-Sq_nG2HRu6P6RwP-m0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.185.141.0/24
Signature Algorithm: sha256WithRSAEncryption
93:00:e1:a4:a4:34:49:64:37:45:95:98:ab:16:ac:fa:82:fe:
aa:26:6c:67:d4:f5:dd:8f:a0:46:e3:6f:f7:75:72:41:19:57:
f8:e5:f2:4d:75:09:e7:76:9f:79:db:f4:5e:0a:94:c3:49:f7:
72:3e:72:6c:85:41:ea:dd:c4:33:52:db:ed:b9:b4:b7:03:ad:
32:26:93:db:4f:13:a5:cc:5c:b7:d3:c2:0c:cd:08:a0:ff:e1:
09:74:44:27:f9:1b:a7:7e:78:34:32:70:6c:d0:21:7b:54:48:
a5:2c:c9:60:06:1b:8f:d2:1c:65:9b:63:3b:f1:13:35:1c:dd:
83:37:f8:b0:83:8a:be:14:44:b8:a8:1d:9a:42:1e:5f:a2:8e:
98:f2:9a:72:e3:8c:ed:07:7d:d7:80:2a:1b:ce:1c:e6:f1:5b:
74:c2:7a:9d:6b:4f:17:b0:48:06:29:2f:dd:a8:28:59:3e:21:
cb:05:1c:39:23:64:13:be:a1:26:7a:6e:9f:b3:4c:3f:ef:e1:
0a:73:6d:5e:2d:ee:63:1e:60:fe:ca:1d:02:87:ad:7a:68:d2:
22:da:0d:a6:79:10:98:ba:a1:70:5c:da:cd:f2:af:16:8a:db:
bc:6f:bb:85:82:ac:d8:26:bc:3a:0f:51:77:e3:ea:c7:76:4f:
a8:7c:e5:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 21:16:08 2024 by rpki-client on console-fra.rpki-client.org