Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/b8f50e-475f-4b47-85c0-5f123555cfb1/1/cYo-Xd9uOQQIIM3qBV-vEOq0o7w.roa
File: cYo-Xd9uOQQIIM3qBV-vEOq0o7w.roa (raw, json)
Hash identifier: Jp8PvDdkC03BV/r29hiVHDJtEyRbEEcdPdnn6ubXslQ=
Subject key identifier: 71:8A:3E:5D:DF:6E:39:04:08:20:CD:EA:05:5F:AF:10:EA:B4:A3:BC
Certificate issuer: /CN=4feb9457ec519e8237867710bcc82fa30eae67c0
Certificate serial: 018CC794E5F86ADAD6AE5A0FE007100BB557
Authority key identifier: 4F:EB:94:57:EC:51:9E:82:37:86:77:10:BC:C8:2F:A3:0E:AE:67:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T-uUV-xRnoI3hncQvMgvow6uZ8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/b8f50e-475f-4b47-85c0-5f123555cfb1/1/cYo-Xd9uOQQIIM3qBV-vEOq0o7w.roa
Signing time: Tue 02 Jan 2024 00:31:13 +0000
ROA not before: Tue 02 Jan 2024 00:31:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210567
IP address blocks: 185.163.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/b8f50e-475f-4b47-85c0-5f123555cfb1/1/T-uUV-xRnoI3hncQvMgvow6uZ8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/b8f50e-475f-4b47-85c0-5f123555cfb1/1/T-uUV-xRnoI3hncQvMgvow6uZ8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/T-uUV-xRnoI3hncQvMgvow6uZ8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 21:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:e5:f8:6a:da:d6:ae:5a:0f:e0:07:10:0b:b5:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4feb9457ec519e8237867710bcc82fa30eae67c0
Validity
Not Before: Jan 2 00:31:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=718a3e5ddf6e39040820cdea055faf10eab4a3bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:99:03:85:00:d3:7a:6e:11:22:24:26:5d:b5:
66:cc:40:c1:e7:34:4e:48:e2:83:72:14:53:ca:9a:
07:9f:d7:50:60:48:e5:c9:12:91:1f:cc:46:d0:55:
68:fc:de:b2:6a:a0:b0:73:d3:d0:eb:ed:f9:98:11:
cb:89:2a:b8:a0:9d:9b:d2:8f:50:02:34:1a:15:a6:
a4:b7:ec:d4:e9:e7:8a:6f:b4:c3:26:ee:6b:5e:18:
24:5d:f4:1d:7a:92:79:7e:fb:cb:ca:bf:22:7c:c8:
cc:51:37:83:ca:a6:0f:2f:3d:6a:96:cf:71:87:05:
a0:2d:77:29:df:0d:ba:fc:87:8e:b9:cf:43:bb:05:
08:47:be:16:f6:81:7e:4f:e6:a6:52:fa:27:4b:b0:
aa:6c:1f:e5:23:61:f5:26:71:fd:80:37:44:3f:87:
a4:62:b6:4e:15:a0:97:c6:70:86:51:54:8a:ae:70:
46:27:7f:20:17:4a:ff:28:fe:d4:42:18:23:b4:78:
3e:a8:e0:96:17:6d:d9:40:1e:6c:de:cc:40:2f:8a:
7f:23:20:2c:d3:87:b9:05:ad:bc:58:ae:69:19:19:
7b:fd:7e:3b:02:f1:f7:1b:8d:03:b2:03:47:5e:6a:
31:92:93:a7:1e:37:90:34:60:23:77:92:63:3c:24:
f4:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:8A:3E:5D:DF:6E:39:04:08:20:CD:EA:05:5F:AF:10:EA:B4:A3:BC
X509v3 Authority Key Identifier:
keyid:4F:EB:94:57:EC:51:9E:82:37:86:77:10:BC:C8:2F:A3:0E:AE:67:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T-uUV-xRnoI3hncQvMgvow6uZ8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/b8f50e-475f-4b47-85c0-5f123555cfb1/1/cYo-Xd9uOQQIIM3qBV-vEOq0o7w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/b8f50e-475f-4b47-85c0-5f123555cfb1/1/T-uUV-xRnoI3hncQvMgvow6uZ8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.163.247.0/24
Signature Algorithm: sha256WithRSAEncryption
89:af:bd:d7:81:99:b4:03:07:fe:80:ce:23:7a:3f:5f:39:b2:
8f:24:78:f4:bc:75:98:c5:07:50:ad:08:a1:b8:c9:ed:44:d0:
36:99:58:2d:9c:08:d6:17:07:4a:cd:3f:43:73:68:56:11:e9:
cf:2d:b6:f3:5b:f8:58:9f:db:6f:2c:dd:83:7b:31:8b:84:1f:
0f:09:fc:17:a9:f8:f1:03:de:99:9a:f6:56:33:b9:d6:94:44:
ed:58:6b:a9:e3:95:e5:25:15:7c:4f:18:73:f5:5f:f8:01:65:
66:cb:a9:23:a3:9f:c8:7b:ac:19:f5:8b:4a:ee:37:45:ad:7d:
c4:74:fc:e6:27:8a:a3:bf:c7:d7:f2:ef:91:5a:f6:98:b1:2e:
eb:c8:34:28:6b:d0:d2:79:95:ed:e2:b9:7d:77:a1:56:2e:ac:
b3:f0:de:f6:c4:8e:71:2d:f0:e7:46:87:7f:a7:1a:4e:9e:6c:
b1:c2:e9:05:8c:21:ba:19:5b:98:f5:e1:91:b2:a3:c4:59:3b:
8d:67:a8:00:01:1e:16:07:fe:db:61:1f:bd:5a:c7:a4:3f:a5:
47:74:c2:34:0c:ed:bc:82:5c:95:2d:9b:fa:38:2a:ee:29:47:
3d:37:f9:9f:ee:1f:ef:9a:3c:3e:e9:83:d8:be:48:6e:68:ed:
5b:70:ce:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:24:59 2024 by rpki-client on console-ams.rpki-client.org