Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/_9zahHIznNBBCUQcTrRh3_q8MWg.roa
File: _9zahHIznNBBCUQcTrRh3_q8MWg.roa (raw, json)
Hash identifier: rgXqbM1PPOvYNMAiQDxczru/poPbczjN9cZ9zMH9I6Q=
Subject key identifier: FF:DC:DA:84:72:33:9C:D0:41:09:44:1C:4E:B4:61:DF:FA:BC:31:68
Certificate issuer: /CN=045010194440ee40f5de42f0c1b2b3d371bcd863
Certificate serial: 018CC795405F29DE6F82634E1ED02920ABA5
Authority key identifier: 04:50:10:19:44:40:EE:40:F5:DE:42:F0:C1:B2:B3:D3:71:BC:D8:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BFAQGURA7kD13kLwwbKz03G82GM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/_9zahHIznNBBCUQcTrRh3_q8MWg.roa
Signing time: Tue 02 Jan 2024 00:31:36 +0000
ROA not before: Tue 02 Jan 2024 00:31:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 394434
IP address blocks: 185.194.138.0/23 maxlen: 24
185.194.136.0/23 maxlen: 24
2a0a:4bc0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/BFAQGURA7kD13kLwwbKz03G82GM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/BFAQGURA7kD13kLwwbKz03G82GM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BFAQGURA7kD13kLwwbKz03G82GM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 29 Apr 2024 05:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:40:5f:29:de:6f:82:63:4e:1e:d0:29:20:ab:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=045010194440ee40f5de42f0c1b2b3d371bcd863
Validity
Not Before: Jan 2 00:31:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ffdcda8472339cd04109441c4eb461dffabc3168
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:43:93:8f:11:7c:0e:49:a8:2d:50:9e:e0:40:
be:2c:fe:3b:fe:f9:3f:cc:eb:e1:a6:1a:81:f2:6d:
a0:ef:69:c5:bd:d8:35:14:cd:b7:ae:3d:06:62:b0:
b8:05:29:39:72:c5:46:94:e2:2a:0b:78:71:d7:e6:
24:16:ff:67:48:a4:15:ce:41:f5:80:ab:57:e7:2f:
cd:e5:b1:61:ff:60:76:72:2f:f2:a8:4d:f9:c2:50:
b3:70:92:cf:7a:41:1d:a8:19:5e:1e:dd:ec:21:c8:
da:e5:40:1a:73:ef:fc:7b:a6:f7:bb:98:5d:15:1e:
aa:a7:8e:37:f8:9a:95:3f:a4:b5:d0:72:92:d4:5e:
fa:72:72:65:f2:84:b0:dc:a2:a9:43:c8:c7:4d:48:
7c:f4:04:78:20:cd:9f:ac:10:43:4e:6b:9f:32:63:
23:20:05:2d:d6:f1:7a:ec:d6:9f:a1:c9:d4:2a:c9:
2b:08:63:fc:08:50:26:cc:62:07:fa:9c:c2:5c:ae:
7d:3a:57:89:42:a5:36:a4:5c:2d:36:f6:2e:d1:80:
59:1f:b2:71:4d:7d:ff:0f:b5:b9:e0:d7:4c:2d:77:
04:c9:4d:c4:55:91:8a:00:d3:09:49:4c:8e:5b:8a:
f2:99:6c:2f:8b:b6:eb:7f:10:81:bf:82:87:44:73:
51:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:DC:DA:84:72:33:9C:D0:41:09:44:1C:4E:B4:61:DF:FA:BC:31:68
X509v3 Authority Key Identifier:
keyid:04:50:10:19:44:40:EE:40:F5:DE:42:F0:C1:B2:B3:D3:71:BC:D8:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BFAQGURA7kD13kLwwbKz03G82GM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/_9zahHIznNBBCUQcTrRh3_q8MWg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/BFAQGURA7kD13kLwwbKz03G82GM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.194.136.0/22
IPv6:
2a0a:4bc0::/29
Signature Algorithm: sha256WithRSAEncryption
85:42:5a:2e:92:98:d7:ca:2c:db:62:b8:d1:57:fb:66:af:54:
83:b4:19:6d:56:d1:1a:92:6f:20:1a:41:d8:3d:2d:6a:52:7a:
f3:4f:d1:c0:27:fd:7c:c8:82:ba:42:06:ee:8c:38:88:d4:78:
3e:ba:fe:6d:b5:2d:15:2b:92:b6:4c:87:e9:0b:3c:3f:1b:ca:
b8:43:6e:db:24:27:3d:33:4e:f3:71:9d:28:11:98:af:83:2e:
33:41:30:e5:f8:ab:04:f0:f8:18:06:cd:4d:3f:a1:6c:5b:4f:
ad:81:76:a8:d5:fe:0f:c0:b8:4e:3e:f1:14:83:06:50:9a:50:
cb:1a:98:88:1e:8f:b3:9d:da:b8:74:49:6b:c2:0f:6a:4a:63:
bc:a8:43:dc:56:a6:2b:bb:91:2a:1b:4e:21:b7:96:fb:3b:52:
16:2a:3f:34:79:bc:aa:4b:7d:a1:2c:f6:ff:85:60:a8:54:04:
e5:06:27:43:79:24:e0:c2:24:9d:8d:f5:63:d6:85:a7:e0:3c:
e5:16:c1:86:a9:58:f6:ba:3b:eb:87:e2:33:42:45:7f:d6:35:
aa:ab:55:a9:4e:76:b2:84:70:d5:55:19:1e:58:7f:0c:5c:d3:
30:97:69:5c:7a:0f:72:f8:dd:7c:48:01:ad:4b:3f:75:4a:1e:
28:37:9f:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 11:09:36 2024 by rpki-client on console-ams.rpki-client.org