Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/RpclTs6m3xOuD28nbhYsCmfLpII.roa
File: RpclTs6m3xOuD28nbhYsCmfLpII.roa (raw, json)
Hash identifier: mHK+tSjhNrdVN+AOPry02CloV2DFCbAQAjqT8L4ysdc=
Subject key identifier: 46:97:25:4E:CE:A6:DF:13:AE:0F:6F:27:6E:16:2C:0A:67:CB:A4:82
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 01916D95D9D8B2727B80A1F0391D7797DDAE
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/RpclTs6m3xOuD28nbhYsCmfLpII.roa
Signing time: Tue 20 Aug 2024 02:20:22 +0000
ROA not before: Tue 20 Aug 2024 02:20:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202984
IP address blocks: 185.39.205.0/24 maxlen: 24
2a09:e2c0::/30 maxlen: 30
2a09:e2c4::/30 maxlen: 30
2a10:4102::/32 maxlen: 32
2a10:4107::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 17:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:6d:95:d9:d8:b2:72:7b:80:a1:f0:39:1d:77:97:dd:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: Aug 20 02:20:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4697254ecea6df13ae0f6f276e162c0a67cba482
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:be:c9:ce:b4:d3:d1:d3:1b:82:a8:ce:7b:89:
99:e1:a1:56:99:54:8e:22:e6:be:79:e4:62:5a:1d:
ee:04:71:4f:e2:74:f4:f0:96:55:d5:a4:02:e2:3d:
ed:74:df:1a:cf:d1:5f:69:cb:44:8b:98:cc:56:d1:
98:0d:dc:d4:61:6e:6e:fd:40:49:b6:83:a1:3c:21:
a3:e1:79:cf:0a:32:c7:5a:1d:d2:36:2d:82:c5:eb:
d4:22:9a:2d:2b:0a:0b:a4:7f:f2:fb:2e:05:68:f2:
3f:09:7d:7f:76:72:48:53:bb:8a:47:f1:8e:45:90:
d1:91:2d:fd:3e:a7:16:51:80:0c:d6:78:67:44:b1:
1b:fd:12:7e:a3:14:eb:a6:32:15:d8:37:13:b3:75:
a6:2f:05:44:be:15:09:72:22:ad:31:40:20:e2:43:
7b:3e:a9:5b:26:c8:90:20:65:4e:87:92:ac:1b:ce:
97:52:35:98:0a:c2:59:c4:fb:68:f1:33:05:19:b7:
58:e1:ed:fc:80:c9:6f:f4:f6:b5:46:df:44:2e:5c:
69:9e:25:d2:82:b0:df:ef:8c:09:31:56:7e:d5:4b:
80:40:c5:4d:42:47:34:70:d4:db:30:09:ca:4b:1a:
80:49:e6:c1:68:39:18:d7:e4:15:4a:67:33:4f:4c:
3e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:97:25:4E:CE:A6:DF:13:AE:0F:6F:27:6E:16:2C:0A:67:CB:A4:82
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/RpclTs6m3xOuD28nbhYsCmfLpII.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.39.205.0/24
IPv6:
2a09:e2c0::/29
2a10:4102::/32
2a10:4107::/32
Signature Algorithm: sha256WithRSAEncryption
2d:f9:f1:47:b7:ac:81:bf:63:4f:4a:8f:8b:b5:7c:be:21:38:
ff:09:66:2d:af:47:70:da:3b:d8:6b:48:ae:86:10:5d:bf:d5:
10:22:fb:c2:07:ca:ad:5d:7e:27:22:c0:be:88:44:6e:f2:b2:
fe:4d:85:ff:3d:17:de:1c:ad:bf:0c:39:9a:3f:3a:7b:9d:18:
bc:08:00:3d:e3:a1:da:36:7d:1a:85:15:3f:9b:90:ee:75:49:
80:d3:72:10:64:19:42:47:a1:fd:0d:4a:07:46:5f:c9:1d:62:
e7:60:ea:90:01:fe:53:37:40:89:15:5d:2c:5c:13:37:56:2b:
69:c1:61:d4:e1:9a:83:1a:8e:81:87:ce:b6:bf:0c:b0:10:3a:
3a:1d:95:e8:fb:c2:85:0b:3f:cb:b7:3c:08:68:fe:54:f1:de:
cc:44:36:4c:0a:28:80:5f:f1:1e:1b:6d:d4:7a:38:a4:c7:71:
c8:03:b0:b1:a3:da:9b:80:c9:64:81:0a:cc:dc:df:2d:e9:15:
18:79:2e:b9:db:ec:ac:8a:12:da:47:39:b3:12:d3:49:d3:55:
c1:2f:ac:bc:f9:a9:9f:d0:50:66:41:77:c8:02:36:6c:eb:ff:
95:ec:8e:22:44:53:02:33:8c:92:0f:ca:1d:7d:7f:df:af:45:
61:16:94:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:19:02 2024 by rpki-client on console-fra.rpki-client.org