Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/1hVmOvWIQ_wYr8AsxLcTymIO1C4.roa
File: 1hVmOvWIQ_wYr8AsxLcTymIO1C4.roa (raw, json)
Hash identifier: 462FalhaQLLmzsdecaU9Ph7+A1K2olY8Ro/Cw+dPnZw=
Subject key identifier: D6:15:66:3A:F5:88:43:FC:18:AF:C0:2C:C4:B7:13:CA:62:0E:D4:2E
Certificate issuer: /CN=a2ddaeb164e398214a171a0410e6b0232d642f50
Certificate serial: 018CC6B8E1B023F877E7F39F45D15FF5E79F
Authority key identifier: A2:DD:AE:B1:64:E3:98:21:4A:17:1A:04:10:E6:B0:23:2D:64:2F:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ot2usWTjmCFKFxoEEOawIy1kL1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/1hVmOvWIQ_wYr8AsxLcTymIO1C4.roa
Signing time: Mon 01 Jan 2024 20:30:54 +0000
ROA not before: Mon 01 Jan 2024 20:30:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47915
IP address blocks: 85.204.118.0/24 maxlen: 24
86.104.211.0/24 maxlen: 24
89.39.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/ot2usWTjmCFKFxoEEOawIy1kL1A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Jun 2024 14:33:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:e1:b0:23:f8:77:e7:f3:9f:45:d1:5f:f5:e7:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2ddaeb164e398214a171a0410e6b0232d642f50
Validity
Not Before: Jan 1 20:30:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d615663af58843fc18afc02cc4b713ca620ed42e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:da:22:a3:d0:59:5d:5e:bb:8c:46:de:ff:fc:
48:e5:c1:ad:fe:a5:e1:0d:b6:98:16:dc:ec:78:7b:
ae:a5:0b:03:c8:1a:02:86:d8:e1:86:06:e2:0d:19:
6f:c3:a3:66:8c:71:51:30:40:21:cf:0a:e8:bc:6c:
8d:a2:9b:94:9f:ef:90:ae:aa:21:41:bc:39:1c:36:
65:cb:34:72:74:81:d8:03:cc:b4:38:f7:07:18:f5:
1b:09:13:a3:8b:6f:bf:2d:f8:6a:fa:2e:02:f9:a7:
07:82:c7:84:49:8d:d5:69:80:56:4b:ff:0b:a2:19:
6e:d2:49:f2:a0:75:cc:93:19:fc:78:d7:f9:ce:51:
c2:59:ad:a2:27:e8:ab:46:1a:dd:85:fb:6b:98:f6:
f8:50:0a:bf:97:d6:3d:e3:08:b9:8a:b2:46:5d:80:
08:fc:b2:78:68:36:e3:a4:dd:30:1e:5f:d5:1d:a6:
99:eb:32:94:b9:c4:9c:ec:b3:c9:ee:c5:7d:f0:1d:
b6:c8:32:a3:17:d8:8b:67:fa:70:1f:b4:29:c2:fa:
ac:98:60:57:75:0f:d0:8b:d9:5b:08:86:43:f8:ae:
f7:e2:e7:12:43:f1:c5:ec:a2:10:23:c1:82:87:cf:
58:fa:9a:78:9c:b0:46:fc:bb:1b:88:82:14:1a:2a:
4c:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:15:66:3A:F5:88:43:FC:18:AF:C0:2C:C4:B7:13:CA:62:0E:D4:2E
X509v3 Authority Key Identifier:
keyid:A2:DD:AE:B1:64:E3:98:21:4A:17:1A:04:10:E6:B0:23:2D:64:2F:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ot2usWTjmCFKFxoEEOawIy1kL1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/1hVmOvWIQ_wYr8AsxLcTymIO1C4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.204.118.0/24
86.104.211.0/24
89.39.89.0/24
Signature Algorithm: sha256WithRSAEncryption
54:d6:b8:cc:7c:17:c1:3b:b2:89:3a:7d:b6:95:d8:36:9c:14:
d2:d0:a6:1b:1f:60:27:4d:b4:6b:d0:1a:98:d3:22:ce:02:00:
35:86:73:81:a8:a2:b5:0c:46:cd:6b:a4:db:4c:fc:df:55:2d:
5f:9d:9d:c3:80:98:47:bf:aa:4e:7c:09:07:25:e7:ff:32:15:
17:98:9d:90:c6:ea:28:21:5c:af:d5:1d:4c:8c:b1:e2:46:5c:
04:1e:99:42:15:9d:1a:eb:a1:5c:8d:8f:b0:93:8e:b4:a2:91:
07:3e:f5:9e:cd:a1:74:e9:dd:76:84:50:1c:d5:b5:ad:28:85:
5f:44:76:e4:3f:77:6c:3d:ae:92:de:d5:6c:54:b0:fa:8f:94:
8b:52:28:29:ee:47:a6:ee:b1:bd:d1:e1:85:ab:3e:16:a3:6e:
ce:5b:19:2a:6d:c9:b6:4d:77:c3:ef:8f:be:a4:15:df:23:90:
35:a7:c2:96:74:55:d1:7b:8e:ff:5e:cb:cc:31:c5:f5:93:ce:
44:d1:a4:f3:4a:33:2c:26:62:10:a9:ae:93:df:94:56:19:67:
85:27:58:78:ff:ab:d6:1a:a4:2e:ee:2e:c3:50:ef:27:29:0d:
46:b0:59:ed:36:3b:28:ee:85:a0:c5:69:ab:58:55:83:ca:ec:
9d:4c:18:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 00:12:05 2024 by rpki-client on console-ams.rpki-client.org