Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/f67d09-8923-4152-95f2-7c7db21230a3/1/0nP54OB7eLtKipqoeFdQi2g6jgA.roa
File: 0nP54OB7eLtKipqoeFdQi2g6jgA.roa (raw, json)
Hash identifier: MxVKs4LPXDkTZ6NJBcmBW3o8kgM6RTumioJMJVGpqqI=
Subject key identifier: D2:73:F9:E0:E0:7B:78:BB:4A:8A:9A:A8:78:57:50:8B:68:3A:8E:00
Certificate issuer: /CN=ed64691c31892cc991ad4e9a9671147759e417ab
Certificate serial: 018CC86F3A06294FBC109B318FD917300E31
Authority key identifier: ED:64:69:1C:31:89:2C:C9:91:AD:4E:9A:96:71:14:77:59:E4:17:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7WRpHDGJLMmRrU6alnEUd1nkF6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/f67d09-8923-4152-95f2-7c7db21230a3/1/0nP54OB7eLtKipqoeFdQi2g6jgA.roa
Signing time: Tue 02 Jan 2024 04:29:41 +0000
ROA not before: Tue 02 Jan 2024 04:29:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207645
IP address blocks: 185.75.242.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/f67d09-8923-4152-95f2-7c7db21230a3/1/7WRpHDGJLMmRrU6alnEUd1nkF6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/f67d09-8923-4152-95f2-7c7db21230a3/1/7WRpHDGJLMmRrU6alnEUd1nkF6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/7WRpHDGJLMmRrU6alnEUd1nkF6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 21:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:3a:06:29:4f:bc:10:9b:31:8f:d9:17:30:0e:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed64691c31892cc991ad4e9a9671147759e417ab
Validity
Not Before: Jan 2 04:29:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d273f9e0e07b78bb4a8a9aa87857508b683a8e00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:63:9f:43:53:91:4b:fa:20:09:e6:1c:a7:8e:
c1:bf:bd:d1:ac:be:59:5d:74:72:7b:ae:ab:90:90:
10:88:16:78:0d:8f:8f:e3:cb:bd:d1:7c:55:4f:01:
c0:42:e4:c6:62:df:23:5e:d9:a3:f4:0f:0a:8d:fb:
81:61:b3:f6:e3:97:c6:90:9a:d6:8c:b0:84:9f:67:
59:cb:6d:58:88:00:7e:df:f5:b8:4d:45:f5:9f:a2:
b5:96:f5:9f:29:0e:75:0a:82:1c:6c:79:2c:9b:1f:
62:83:d7:f6:ed:22:77:04:72:30:c5:db:53:9b:9c:
bc:5f:e6:a3:d9:48:1f:65:83:0b:a1:00:30:91:32:
64:70:da:7a:2e:38:79:9f:4c:51:cb:41:a0:bf:fa:
5d:68:bb:8e:28:bb:ab:b5:8d:bd:91:f1:ef:88:0b:
09:1f:94:2a:1f:cc:1d:4c:de:4c:ad:53:35:fc:03:
ee:6c:cb:d6:13:e2:63:af:de:ce:23:1d:bf:00:43:
c1:54:3d:62:bc:8f:19:d7:d9:67:5a:79:97:d3:f7:
67:23:d6:0c:b0:3a:32:fb:07:d3:3a:df:66:1a:72:
2e:d7:48:7a:bb:ae:5e:9d:d1:9b:a6:a9:7e:5d:80:
8c:1f:ed:d9:6c:bf:0b:e0:1b:3c:07:f9:cc:a7:9a:
8b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:73:F9:E0:E0:7B:78:BB:4A:8A:9A:A8:78:57:50:8B:68:3A:8E:00
X509v3 Authority Key Identifier:
keyid:ED:64:69:1C:31:89:2C:C9:91:AD:4E:9A:96:71:14:77:59:E4:17:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7WRpHDGJLMmRrU6alnEUd1nkF6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f67d09-8923-4152-95f2-7c7db21230a3/1/0nP54OB7eLtKipqoeFdQi2g6jgA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f67d09-8923-4152-95f2-7c7db21230a3/1/7WRpHDGJLMmRrU6alnEUd1nkF6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.75.242.0/23
Signature Algorithm: sha256WithRSAEncryption
1a:fc:ce:13:4a:5d:62:2a:ae:20:bf:d9:0d:90:03:48:b5:c6:
1c:d6:3e:22:40:c5:48:67:8a:94:75:c6:54:66:b0:ba:cb:f6:
39:e2:61:53:e0:ce:50:9c:6b:eb:1a:29:fb:06:1b:4d:1a:39:
10:93:31:d3:57:bb:b8:ba:a9:a7:27:9e:eb:58:a5:37:32:9b:
a2:16:13:d2:7a:b7:a0:15:0c:bc:4c:04:0f:30:ec:f6:66:c4:
2d:05:59:72:50:91:aa:b7:50:19:e3:33:dc:04:3f:19:b5:fc:
55:be:c2:8d:a2:1a:a0:b1:62:87:9c:9c:09:7c:bc:04:49:11:
0c:77:2d:4b:42:1c:18:6e:d9:67:c0:b0:ee:89:f5:13:71:ac:
ec:3c:cf:61:ac:ed:98:b4:0c:42:d4:85:63:c1:48:1f:6d:09:
23:28:2b:f1:43:7c:84:7e:ee:64:9d:f2:5c:0d:18:56:03:bd:
8a:c5:43:16:02:7d:d8:97:7a:bc:49:2f:da:98:7a:ae:55:2e:
9f:64:a2:a7:80:e4:ad:c7:fa:bb:43:89:f7:2c:54:8f:86:c9:
33:3e:eb:2e:45:bc:d6:8d:77:46:c3:a5:c7:35:8f:62:f7:a0:
90:1a:5a:62:1a:34:69:b4:de:9e:1b:bf:8e:3f:6f:56:58:24:
44:0f:77:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:38:00 2024 by rpki-client on console-ams.rpki-client.org