Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/037adf-b9c2-4ad1-960a-4d403369d2a2/1/H9MiAvPpx52ZjvC0LlXQigS5I9c.roa
File: H9MiAvPpx52ZjvC0LlXQigS5I9c.roa (raw, json)
Hash identifier: o0OeVSa+0CyaJXInREQ6qcQMkvzB8CJ0iX+37ZwEzcA=
Subject key identifier: 1F:D3:22:02:F3:E9:C7:9D:99:8E:F0:B4:2E:55:D0:8A:04:B9:23:D7
Certificate issuer: /CN=125ae2cfd315c131193484665acada7c013163ec
Certificate serial: 018CC64AF9F17BF290447D5C0424B8DB5F4D
Authority key identifier: 12:5A:E2:CF:D3:15:C1:31:19:34:84:66:5A:CA:DA:7C:01:31:63:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Elriz9MVwTEZNIRmWsrafAExY-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/037adf-b9c2-4ad1-960a-4d403369d2a2/1/H9MiAvPpx52ZjvC0LlXQigS5I9c.roa
Signing time: Mon 01 Jan 2024 18:30:51 +0000
ROA not before: Mon 01 Jan 2024 18:30:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204736
IP address blocks: 185.241.100.0/24 maxlen: 24
185.241.103.0/24 maxlen: 24
185.241.102.0/24 maxlen: 24
185.241.101.0/24 maxlen: 24
2a0d:4580:60::/48 maxlen: 48
2a0d:4580:120::/48 maxlen: 48
2a0d:4580:100::/48 maxlen: 48
2a0d:4580:80::/48 maxlen: 48
2a0d:4580:40::/48 maxlen: 48
2a0d:4580:20::/48 maxlen: 48
2a0d:4580:131::/48 maxlen: 48
2a0d:4580:130::/48 maxlen: 48
2a0d:4580:110::/48 maxlen: 48
2a0d:4580:90::/48 maxlen: 48
2a0d:4580:70::/48 maxlen: 48
2a0d:4580:50::/48 maxlen: 48
2a0d:4580:30::/48 maxlen: 48
2a0d:4580:10::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/037adf-b9c2-4ad1-960a-4d403369d2a2/1/Elriz9MVwTEZNIRmWsrafAExY-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/037adf-b9c2-4ad1-960a-4d403369d2a2/1/Elriz9MVwTEZNIRmWsrafAExY-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Elriz9MVwTEZNIRmWsrafAExY-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 19:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:f9:f1:7b:f2:90:44:7d:5c:04:24:b8:db:5f:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=125ae2cfd315c131193484665acada7c013163ec
Validity
Not Before: Jan 1 18:30:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1fd32202f3e9c79d998ef0b42e55d08a04b923d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:cd:0c:e7:60:fe:17:8f:69:5b:36:d5:25:8f:
9f:41:42:68:5f:83:2e:c4:10:dd:d6:03:ae:24:8b:
1c:12:c4:3a:1a:09:c8:17:b3:30:de:07:66:71:66:
47:cd:bc:9c:ea:69:bd:af:d1:5e:07:64:98:c4:2b:
db:c4:9c:e6:e3:17:d4:28:45:9f:e8:37:9c:27:65:
7a:84:4f:5f:c0:58:f9:b0:a0:6e:f1:83:90:3f:4e:
2c:83:2f:db:ca:b8:c2:93:a6:52:c7:7f:e8:44:62:
86:ad:ec:88:0c:1f:08:79:67:8a:54:19:02:75:73:
99:50:4b:84:07:67:ab:04:d3:8a:23:50:a3:72:d4:
e8:58:d4:67:6a:5c:c3:da:5b:72:ff:61:f3:42:91:
e2:60:fe:08:9c:75:f9:46:ef:f2:60:93:d1:f6:e3:
3d:b7:5d:66:34:ea:b5:ff:6e:e1:2b:f7:08:1c:7b:
2d:fd:98:1c:76:31:38:0a:bc:e6:87:b3:b0:c8:f8:
9b:b7:5b:f6:07:34:92:30:d7:3e:f1:e4:c0:ff:77:
55:5a:d9:14:e9:59:6f:8a:c2:ec:ff:8c:1a:8b:87:
02:b4:f4:4f:7c:58:99:e7:2f:16:7a:ba:b3:6b:6d:
09:58:47:bb:a2:f1:9c:c9:88:13:c7:6f:7d:e1:a2:
89:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:D3:22:02:F3:E9:C7:9D:99:8E:F0:B4:2E:55:D0:8A:04:B9:23:D7
X509v3 Authority Key Identifier:
keyid:12:5A:E2:CF:D3:15:C1:31:19:34:84:66:5A:CA:DA:7C:01:31:63:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Elriz9MVwTEZNIRmWsrafAExY-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/037adf-b9c2-4ad1-960a-4d403369d2a2/1/H9MiAvPpx52ZjvC0LlXQigS5I9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/037adf-b9c2-4ad1-960a-4d403369d2a2/1/Elriz9MVwTEZNIRmWsrafAExY-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.241.100.0/22
IPv6:
2a0d:4580:10::/48
2a0d:4580:20::/48
2a0d:4580:30::/48
2a0d:4580:40::/48
2a0d:4580:50::/48
2a0d:4580:60::/48
2a0d:4580:70::/48
2a0d:4580:80::/48
2a0d:4580:90::/48
2a0d:4580:100::/48
2a0d:4580:110::/48
2a0d:4580:120::/48
2a0d:4580:130::/47
Signature Algorithm: sha256WithRSAEncryption
65:51:b5:30:0f:3a:1d:e2:ba:30:d6:53:30:48:2f:80:ab:10:
1b:94:d1:d6:fd:4d:0d:02:75:c6:ad:0d:3b:c0:55:93:1b:c5:
8a:fa:73:c6:2c:72:31:d6:ba:2e:1c:99:0b:fa:fc:69:ca:d3:
0c:87:89:4b:1b:5a:f0:0c:ca:64:7b:6c:5b:94:77:83:b2:59:
6e:43:ad:78:f5:77:c1:40:f7:49:51:1e:de:f6:74:7d:84:77:
48:d9:c3:4f:ed:94:9c:75:8b:2b:b7:54:ab:34:8a:4d:82:c4:
53:10:f4:93:6c:c2:bc:40:1c:06:29:e6:8a:57:e9:09:1c:1b:
a5:2b:f5:a4:df:22:b5:e7:b5:b6:e8:8f:12:b4:f1:45:68:b2:
08:a5:78:e0:ee:84:bd:73:f7:70:c6:7a:3a:f9:b8:65:16:3e:
13:81:69:f7:a6:c8:a4:78:94:d6:d4:46:65:d7:a5:dd:1c:7f:
3f:ad:4a:d7:6c:f9:e5:98:69:26:a8:9b:a7:e0:a5:fa:02:4d:
30:99:0d:a9:4c:fd:55:5b:46:f7:c3:e0:b1:56:c0:b6:37:cc:
49:d7:d3:5d:9a:92:01:f3:05:b4:ed:14:b4:c6:f7:1c:5b:e9:
6e:f7:54:d2:c2:85:1d:f5:5e:9e:30:d9:67:bb:b3:32:d5:1d:
0e:b5:04:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 23:31:51 2024 by rpki-client on console-ams.rpki-client.org