Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/cfa0b5-e1a1-41ff-88cb-029715de4c6f/1/5DwQ5MgXHr_goxu01_jQF4-LUNU.roa
File: 5DwQ5MgXHr_goxu01_jQF4-LUNU.roa (raw, json)
Hash identifier: ANyX02InE6EehGGUcP9Q91SLlRrnob4nkODyk3V6cys=
Subject key identifier: E4:3C:10:E4:C8:17:1E:BF:E0:A3:1B:B4:D7:F8:D0:17:8F:8B:50:D5
Certificate issuer: /CN=0217c666cda23e920d14b90ae9363713350aac1e
Certificate serial: 018CC9BC97D75BBD3AA86EFFE16E64BAF780
Authority key identifier: 02:17:C6:66:CD:A2:3E:92:0D:14:B9:0A:E9:36:37:13:35:0A:AC:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AhfGZs2iPpINFLkK6TY3EzUKrB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/cfa0b5-e1a1-41ff-88cb-029715de4c6f/1/5DwQ5MgXHr_goxu01_jQF4-LUNU.roa
Signing time: Tue 02 Jan 2024 10:33:49 +0000
ROA not before: Tue 02 Jan 2024 10:33:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44833
IP address blocks: 185.66.236.0/22 maxlen: 24
2a03:22a0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/cfa0b5-e1a1-41ff-88cb-029715de4c6f/1/AhfGZs2iPpINFLkK6TY3EzUKrB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/cfa0b5-e1a1-41ff-88cb-029715de4c6f/1/AhfGZs2iPpINFLkK6TY3EzUKrB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/AhfGZs2iPpINFLkK6TY3EzUKrB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 16:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:97:d7:5b:bd:3a:a8:6e:ff:e1:6e:64:ba:f7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0217c666cda23e920d14b90ae9363713350aac1e
Validity
Not Before: Jan 2 10:33:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e43c10e4c8171ebfe0a31bb4d7f8d0178f8b50d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:82:64:28:07:fb:16:1a:74:26:2d:1f:27:72:
d0:b7:77:1e:b7:1b:e4:c6:b6:ae:f5:cd:2d:a0:f1:
a9:d0:ba:a2:f0:3c:f5:c0:4f:d4:b5:e7:29:72:bf:
12:aa:e2:2b:b6:bc:98:be:d8:6a:4f:99:0f:80:7a:
28:6e:88:c8:ce:37:7f:ed:74:76:95:6b:93:b1:6a:
ac:8f:99:8f:b9:f7:40:c0:bc:f6:56:e3:76:d7:e7:
49:5e:92:b1:21:50:cc:91:3f:ca:dd:a3:90:b5:ab:
8c:ce:bd:40:67:9e:63:45:73:56:f1:65:fb:e9:e6:
09:3d:f2:84:ba:3e:fa:4b:38:57:29:50:9c:32:75:
d5:89:58:69:c6:30:33:d5:0c:ff:37:79:d9:21:47:
2f:3c:bc:25:ba:2e:76:70:98:ea:c5:3f:67:67:26:
42:28:f0:69:73:73:5e:cd:55:12:3d:52:ce:5c:23:
a9:b7:bd:2a:17:cb:a0:be:f4:53:55:6e:e0:26:b9:
04:55:16:d5:03:e4:f8:5d:f8:2c:d8:7a:21:41:75:
2a:51:b7:7f:fe:a8:7d:99:07:45:9b:c1:9e:33:69:
5f:32:45:91:a2:8e:a8:1e:61:5a:0d:39:f8:d2:41:
13:4d:6d:1d:a3:c0:37:27:46:cb:1c:e3:b0:55:cd:
33:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:3C:10:E4:C8:17:1E:BF:E0:A3:1B:B4:D7:F8:D0:17:8F:8B:50:D5
X509v3 Authority Key Identifier:
keyid:02:17:C6:66:CD:A2:3E:92:0D:14:B9:0A:E9:36:37:13:35:0A:AC:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AhfGZs2iPpINFLkK6TY3EzUKrB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/cfa0b5-e1a1-41ff-88cb-029715de4c6f/1/5DwQ5MgXHr_goxu01_jQF4-LUNU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/cfa0b5-e1a1-41ff-88cb-029715de4c6f/1/AhfGZs2iPpINFLkK6TY3EzUKrB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.66.236.0/22
IPv6:
2a03:22a0::/32
Signature Algorithm: sha256WithRSAEncryption
97:92:b4:85:e1:60:f5:3f:b2:42:b9:58:93:4a:90:76:43:fc:
b8:33:22:16:20:18:37:6d:ca:3a:76:74:09:e1:b0:85:35:87:
45:54:91:f1:86:11:ec:d8:c5:9e:2b:c8:43:e5:63:5e:a7:37:
5e:02:4c:75:bd:76:45:7a:54:e4:d4:1a:2d:dd:b7:d9:e4:0d:
08:04:6e:04:1f:ce:49:54:4a:38:7b:77:b1:88:02:3a:52:5f:
b3:1f:4d:d3:65:ff:56:82:4a:cc:a3:51:0f:b7:51:64:ab:ba:
6b:c4:f2:3f:07:f3:81:7b:65:9f:e0:95:61:91:41:16:73:b7:
4d:3d:1e:7d:0d:1c:b0:2d:f1:ef:78:7b:c1:b4:2f:f4:f8:c6:
ed:33:59:9f:40:f0:0a:26:a0:ec:33:8c:0f:43:f5:18:2d:ea:
9e:6a:df:02:3f:2a:1c:eb:5d:6b:08:64:dc:28:77:55:91:db:
e4:74:16:6f:c8:76:33:4e:0c:bb:07:db:bf:7e:c1:c7:28:67:
0e:d0:f8:05:fa:53:c0:37:0f:8d:3f:ff:44:0d:8e:d6:29:7f:
2b:23:05:9a:d9:91:08:c6:dc:a0:ad:50:83:56:31:13:82:d5:
5a:d9:d4:cc:01:6e:4c:bb:1a:ff:c5:fb:dc:37:a8:fa:03:85:
94:d6:9d:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 29 00:34:25 2024 by rpki-client on console-fra.rpki-client.org