Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/6065db-93b2-41ec-b19a-688ce013671e/1/9Mh_lHpaAS3LRZCn4YDWDWgVGqI.roa
File: 9Mh_lHpaAS3LRZCn4YDWDWgVGqI.roa (raw, json)
Hash identifier: U1j5j+nmEHi5d6bk/nwvd/XPfejeX11l7HhCUbmF4HI=
Subject key identifier: F4:C8:7F:94:7A:5A:01:2D:CB:45:90:A7:E1:80:D6:0D:68:15:1A:A2
Certificate issuer: /CN=5d783be8b5f7add008d712b437bd9f997c084fdf
Certificate serial: 018CC424648D9956EABB821FA9E91F782BF9
Authority key identifier: 5D:78:3B:E8:B5:F7:AD:D0:08:D7:12:B4:37:BD:9F:99:7C:08:4F:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XXg76LX3rdAI1xK0N72fmXwIT98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/6065db-93b2-41ec-b19a-688ce013671e/1/9Mh_lHpaAS3LRZCn4YDWDWgVGqI.roa
Signing time: Mon 01 Jan 2024 08:29:28 +0000
ROA not before: Mon 01 Jan 2024 08:29:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207176
IP address blocks: 185.177.136.0/22 maxlen: 24
171.22.64.0/22 maxlen: 22
185.40.96.0/22 maxlen: 24
88.202.160.0/21 maxlen: 24
45.93.48.0/22 maxlen: 22
2a04:8400::/29 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/6065db-93b2-41ec-b19a-688ce013671e/1/XXg76LX3rdAI1xK0N72fmXwIT98.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/6065db-93b2-41ec-b19a-688ce013671e/1/XXg76LX3rdAI1xK0N72fmXwIT98.mft
rsync://rpki.ripe.net/repository/DEFAULT/XXg76LX3rdAI1xK0N72fmXwIT98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:64:8d:99:56:ea:bb:82:1f:a9:e9:1f:78:2b:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d783be8b5f7add008d712b437bd9f997c084fdf
Validity
Not Before: Jan 1 08:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f4c87f947a5a012dcb4590a7e180d60d68151aa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a9:bf:6c:45:a6:e9:b2:a8:d5:1e:b6:3a:2f:
5e:65:29:50:93:52:90:8a:8b:6c:36:8f:d3:4a:db:
25:84:66:82:db:98:10:d8:90:45:ac:37:93:94:34:
fa:cd:80:28:24:cd:ca:42:f8:64:bb:b2:fd:fe:d4:
83:30:4b:ce:bb:dc:31:e4:a7:34:37:63:48:9e:8b:
08:b8:8b:da:0e:4d:4b:d0:b2:7f:a7:ab:fd:ac:93:
5e:93:f0:ad:7d:63:d3:61:1b:0b:b2:06:ee:09:bb:
3b:f6:79:1f:db:7d:1a:72:75:97:c8:5d:03:61:cd:
8a:2e:59:b4:8a:e5:46:bb:ed:f4:1e:00:ba:ea:d7:
fe:fb:a2:f5:3e:70:bc:31:74:24:35:cc:00:50:79:
79:ef:9c:96:4f:37:60:e9:df:3d:9d:5e:01:4d:c8:
40:3b:69:48:65:a8:be:af:16:43:4d:4a:66:61:35:
6e:7e:36:f1:89:ac:17:3f:60:09:ca:3e:1a:44:37:
34:2e:2c:ec:cb:5d:31:9d:9d:0d:17:51:fc:66:fd:
a3:b1:ae:d2:4d:8b:e2:5b:83:45:1a:20:eb:99:d6:
26:2d:06:bd:f7:2a:99:5d:7f:ff:de:33:7d:ea:29:
be:8f:30:4f:f7:96:bc:41:7a:d2:07:39:5e:f8:01:
3d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:C8:7F:94:7A:5A:01:2D:CB:45:90:A7:E1:80:D6:0D:68:15:1A:A2
X509v3 Authority Key Identifier:
keyid:5D:78:3B:E8:B5:F7:AD:D0:08:D7:12:B4:37:BD:9F:99:7C:08:4F:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XXg76LX3rdAI1xK0N72fmXwIT98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6065db-93b2-41ec-b19a-688ce013671e/1/9Mh_lHpaAS3LRZCn4YDWDWgVGqI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6065db-93b2-41ec-b19a-688ce013671e/1/XXg76LX3rdAI1xK0N72fmXwIT98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.48.0/22
88.202.160.0/21
171.22.64.0/22
185.40.96.0/22
185.177.136.0/22
IPv6:
2a04:8400::/29
Signature Algorithm: sha256WithRSAEncryption
09:1c:3f:9b:3e:24:cb:25:c0:ac:e7:0e:33:50:ee:20:9d:99:
bc:6e:45:ff:1a:36:ed:c4:e4:65:e8:ff:b1:09:cb:63:dd:91:
29:f9:ae:85:f1:fe:05:66:cc:31:c8:b3:87:87:b9:70:9f:5e:
f3:1f:8f:19:12:24:3b:4c:a2:ea:19:c7:ce:c3:bf:d8:7b:fa:
0d:d1:ad:8f:47:c2:6a:39:70:5b:b1:7d:dd:44:41:75:bf:13:
59:52:2c:1b:c0:dd:a7:53:37:d0:1d:e1:18:da:a5:1c:54:89:
b0:0c:f0:63:38:28:07:de:85:30:15:28:bc:be:fe:06:c8:fc:
8e:42:bd:f1:92:a6:c2:76:b6:a8:5a:d2:66:64:db:44:19:5f:
7e:3f:2f:87:01:4c:e6:f3:57:cc:77:33:f1:3d:12:cf:a1:3e:
56:b8:2a:73:7b:f8:bf:d5:5a:52:54:82:34:93:6b:e5:8c:76:
1d:7c:67:a4:37:a2:d3:68:24:c8:7e:e3:fe:a1:b4:f7:a6:bf:
eb:e1:42:9b:f6:bd:94:07:fe:ab:22:5d:64:7c:6a:fb:70:f3:
a5:3d:84:e5:66:28:ac:95:fd:64:31:1b:7a:56:03:4e:4b:95:
0a:02:b3:50:23:ba:ca:ab:80:af:1b:27:2c:15:52:35:a6:46:
13:78:77:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:42:33 2024 by rpki-client on console-fra.rpki-client.org