Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/bX0oaiwG7MdJHdRsJSJsa4zTkVk.roa
File: bX0oaiwG7MdJHdRsJSJsa4zTkVk.roa (raw, json)
Hash identifier: MiJ8tC8UZ9aq0pDkC3uP60NhzC5wfelidzzeAY/qlJI=
Subject key identifier: 6D:7D:28:6A:2C:06:EC:C7:49:1D:D4:6C:25:22:6C:6B:8C:D3:91:59
Certificate issuer: /CN=6363bb65895f3a54a4b324a10c79ac98efe2a1ca
Certificate serial: 018CC86F36CAB96C2F172E6A3976101B51D9
Authority key identifier: 63:63:BB:65:89:5F:3A:54:A4:B3:24:A1:0C:79:AC:98:EF:E2:A1:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/bX0oaiwG7MdJHdRsJSJsa4zTkVk.roa
Signing time: Tue 02 Jan 2024 04:29:40 +0000
ROA not before: Tue 02 Jan 2024 04:29:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 152179
IP address blocks: 185.126.134.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 19 Jun 2024 07:33:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:36:ca:b9:6c:2f:17:2e:6a:39:76:10:1b:51:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6363bb65895f3a54a4b324a10c79ac98efe2a1ca
Validity
Not Before: Jan 2 04:29:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6d7d286a2c06ecc7491dd46c25226c6b8cd39159
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:fe:88:2a:57:b4:5d:6f:59:07:18:ac:ba:7a:
e3:74:7a:81:fe:e2:83:d8:34:c7:63:1c:d4:22:ca:
8d:ef:76:e1:37:aa:0d:01:08:83:d2:e3:56:c5:53:
61:ef:51:39:12:eb:16:36:ab:ec:c7:f1:df:b3:1d:
81:fe:c4:5b:ed:cc:40:14:42:d7:14:df:bb:a0:b8:
76:5c:55:a6:eb:32:d2:9d:c8:db:c5:29:84:53:cf:
44:37:53:33:7b:22:08:db:a2:a9:77:a5:c2:a8:0b:
7a:f7:5c:70:d3:e7:62:51:38:1b:aa:ee:07:21:f3:
98:13:9b:1d:c8:6f:d7:13:46:4f:89:42:3b:e8:f1:
27:47:63:97:fe:f1:81:63:04:11:e4:9f:4e:e9:3b:
58:a6:a5:1b:a0:b2:50:e1:1d:de:48:97:83:ba:fd:
7f:4e:ac:c4:2e:06:99:ce:d4:28:58:4c:fa:72:ef:
82:c3:7d:37:7e:9a:eb:19:84:3f:8a:58:5e:9a:c9:
91:b3:26:fb:d4:f8:56:b2:4d:ec:26:aa:66:e9:2b:
9a:b0:23:34:3e:c5:25:ec:00:c5:0e:aa:9c:26:d3:
54:30:fd:b0:9c:8a:7b:e6:ca:5f:f1:30:40:67:f9:
0d:9d:3a:2d:ce:f2:50:68:8f:d1:e3:27:44:10:c1:
3d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:7D:28:6A:2C:06:EC:C7:49:1D:D4:6C:25:22:6C:6B:8C:D3:91:59
X509v3 Authority Key Identifier:
keyid:63:63:BB:65:89:5F:3A:54:A4:B3:24:A1:0C:79:AC:98:EF:E2:A1:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/bX0oaiwG7MdJHdRsJSJsa4zTkVk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.126.134.0/23
Signature Algorithm: sha256WithRSAEncryption
2a:ef:c3:43:11:a3:80:14:6c:c4:96:7a:b8:ac:07:b2:92:96:
3f:5b:a7:a5:02:02:e0:35:3e:c6:53:ee:33:ed:91:4e:fb:64:
3f:30:4d:86:95:0b:02:20:5e:cf:85:7c:ad:fd:51:43:cf:ea:
b5:22:a4:c7:44:3f:51:0e:3c:a5:a1:50:46:3d:49:a5:0c:e7:
6d:4a:28:d5:f0:ca:ca:69:89:c7:f2:fc:de:94:bd:45:7d:de:
2f:91:72:77:34:24:6f:31:73:2e:10:55:a6:33:aa:22:c2:af:
9e:b0:f0:6e:f6:df:65:f1:1b:a8:2b:0a:fc:4d:0c:5c:60:4e:
3b:9b:92:47:5a:10:c1:e9:d6:fa:d7:0d:3c:12:c2:22:af:00:
e1:9d:a5:9e:c0:94:32:6e:6f:41:d7:d3:df:0d:29:b6:90:a5:
ad:26:4d:7c:86:2d:96:e0:70:2b:00:8c:22:0a:57:1a:f9:c7:
5a:a3:ac:0d:69:59:e4:28:be:20:b6:5c:14:cb:c6:f9:85:5d:
84:77:ba:c8:f2:45:0f:e8:a6:aa:c1:b8:09:ad:d2:3d:b0:5a:
62:21:ce:e7:a5:a1:fc:ed:67:83:b1:89:31:c4:47:97:1f:00:
ac:88:3b:ad:91:df:b8:1b:16:a5:20:5d:ad:31:37:79:63:ca:
79:94:0d:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 18 11:05:12 2024 by rpki-client on console-ams.rpki-client.org