Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/cITYM7v7m49qs9UPVTnlRdf7EGM.roa
File: cITYM7v7m49qs9UPVTnlRdf7EGM.roa (raw, json)
Hash identifier: 2fKtQ2pcVxH0iQVAH10hU5B+PBgW4jeZPlXY1I6eJQw=
Subject key identifier: 70:84:D8:33:BB:FB:9B:8F:6A:B3:D5:0F:55:39:E5:45:D7:FB:10:63
Certificate issuer: /CN=4456c14cd8724f9a909627b94e006cf69d12307b
Certificate serial: 018F20C14024C92CC710B037B5265CEDA0E3
Authority key identifier: 44:56:C1:4C:D8:72:4F:9A:90:96:27:B9:4E:00:6C:F6:9D:12:30:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/cITYM7v7m49qs9UPVTnlRdf7EGM.roa
Signing time: Sat 27 Apr 2024 18:11:26 +0000
ROA not before: Sat 27 Apr 2024 18:11:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215791
IP address blocks: 185.36.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:20:c1:40:24:c9:2c:c7:10:b0:37:b5:26:5c:ed:a0:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4456c14cd8724f9a909627b94e006cf69d12307b
Validity
Not Before: Apr 27 18:11:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7084d833bbfb9b8f6ab3d50f5539e545d7fb1063
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a7:06:63:1e:99:0e:2f:c0:f1:7f:ee:6b:dc:
2c:b9:0a:36:d4:fa:b5:f1:e7:ef:60:6b:88:24:09:
6d:d6:8e:0d:41:3c:6f:e3:b5:fe:9b:2b:dd:18:41:
f3:1e:05:8b:5f:00:8a:8f:0e:a3:0d:6f:ff:16:a9:
46:8e:d5:7a:24:48:0a:1c:99:3d:28:b6:96:b7:79:
4f:d9:ff:af:ff:ce:21:37:68:b5:5d:3b:19:11:cc:
4e:3f:25:89:a5:c0:38:87:02:38:db:65:19:81:6d:
ce:62:85:51:6a:d7:e0:ac:40:00:66:43:20:77:01:
05:b7:07:80:a9:c4:c0:40:0b:ab:30:3f:f4:21:f0:
38:f5:6b:bd:90:b9:9d:83:76:ed:20:ee:2e:06:cf:
f3:89:6e:81:58:a7:51:90:db:78:e9:a4:1b:35:9d:
e9:c0:5c:dc:01:e1:2e:c8:90:10:4b:ed:41:f8:90:
50:9a:bc:75:d1:6f:ba:01:40:8f:04:0f:8a:51:ba:
f5:3d:81:92:82:ec:b6:8c:b4:20:4f:79:35:7b:f6:
60:21:6a:fd:3b:a5:02:31:ee:a9:a7:9c:b8:de:ca:
9c:4e:6e:99:4a:dc:38:50:b5:94:83:e4:eb:90:1c:
b4:5d:e9:c1:0a:a4:d2:78:4d:d1:c0:a5:32:89:ef:
52:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:84:D8:33:BB:FB:9B:8F:6A:B3:D5:0F:55:39:E5:45:D7:FB:10:63
X509v3 Authority Key Identifier:
keyid:44:56:C1:4C:D8:72:4F:9A:90:96:27:B9:4E:00:6C:F6:9D:12:30:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/cITYM7v7m49qs9UPVTnlRdf7EGM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.36.125.0/24
Signature Algorithm: sha256WithRSAEncryption
12:96:56:a0:53:9b:50:a9:e0:0b:ed:39:4e:1d:1c:a5:09:43:
70:cf:26:05:2e:f3:8d:8e:04:54:58:8a:77:c2:6b:4b:79:71:
60:2c:bf:03:5a:3c:1b:73:6d:2c:1b:c4:6f:15:9e:26:fe:fd:
82:a1:9a:4b:d3:62:bb:b6:65:1e:5b:b0:b1:33:2a:7f:60:46:
0f:84:fb:b2:21:b1:25:e8:9f:2b:3c:77:27:ef:23:58:e7:e5:
d2:ba:0e:47:83:96:ed:08:57:64:be:53:32:8a:2c:a9:87:05:
20:e7:d7:fa:b7:90:1b:9c:9c:09:d7:1c:91:14:ba:08:11:26:
ff:58:c4:94:ed:be:eb:4e:70:89:be:01:78:bf:89:9a:89:38:
ce:e9:0d:8e:ca:33:0c:33:bb:1a:64:51:13:8e:7e:80:84:f3:
f4:c5:93:9a:e4:ed:39:9a:1e:1e:cc:d0:1b:08:6a:e3:06:2d:
c7:36:47:c0:1a:be:3c:99:c8:f2:d1:4c:a4:42:1a:55:07:75:
be:97:f9:78:4f:a2:4d:3c:21:0f:1c:ff:5d:d3:ad:53:27:d1:
57:98:59:a1:f8:35:2c:57:da:b5:e7:49:03:a7:d3:1d:eb:28:
88:2c:96:01:95:66:06:1a:e0:c5:57:0a:8f:d1:a2:ad:fd:f0:
1c:0b:07:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 06:42:18 2024 by rpki-client on console-fra.rpki-client.org