Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/ac3276-50ad-4ebc-a2a6-9808545933c9/1/usG4bKE3qwZ5Noh47bnc8Qmw89s.roa
File: usG4bKE3qwZ5Noh47bnc8Qmw89s.roa (raw, json)
Hash identifier: YRXSURaDe5prEiyT5gC3U02Wq8teggk1MprQExzhZFw=
Subject key identifier: BA:C1:B8:6C:A1:37:AB:06:79:36:88:78:ED:B9:DC:F1:09:B0:F3:DB
Certificate issuer: /CN=603831a61bc8a8f4cb85887022fb6f86397345dc
Certificate serial: 018F331818B0DFE866517749B357FC650F51
Authority key identifier: 60:38:31:A6:1B:C8:A8:F4:CB:85:88:70:22:FB:6F:86:39:73:45:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YDgxphvIqPTLhYhwIvtvhjlzRdw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/ac3276-50ad-4ebc-a2a6-9808545933c9/1/usG4bKE3qwZ5Noh47bnc8Qmw89s.roa
Signing time: Wed 01 May 2024 07:39:28 +0000
ROA not before: Wed 01 May 2024 07:39:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198949
IP address blocks: 185.34.224.0/24 maxlen: 24
185.34.225.0/24 maxlen: 24
185.34.226.0/24 maxlen: 24
185.34.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/ac3276-50ad-4ebc-a2a6-9808545933c9/1/YDgxphvIqPTLhYhwIvtvhjlzRdw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/ac3276-50ad-4ebc-a2a6-9808545933c9/1/YDgxphvIqPTLhYhwIvtvhjlzRdw.mft
rsync://rpki.ripe.net/repository/DEFAULT/YDgxphvIqPTLhYhwIvtvhjlzRdw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 19:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:33:18:18:b0:df:e8:66:51:77:49:b3:57:fc:65:0f:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=603831a61bc8a8f4cb85887022fb6f86397345dc
Validity
Not Before: May 1 07:39:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bac1b86ca137ab0679368878edb9dcf109b0f3db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:72:58:11:50:fe:2d:c2:0d:b2:aa:ec:de:51:
8b:87:ea:5e:9f:3e:ff:a5:12:27:2f:51:ca:47:20:
5b:4c:f6:be:38:54:df:f4:c5:01:be:ec:39:3a:01:
b8:54:35:3c:79:00:70:47:c6:32:a3:93:1d:cf:76:
21:63:ff:48:6c:dd:bf:9f:16:09:15:17:5f:20:97:
3d:f4:af:60:b2:23:1b:1c:6e:c4:3e:bc:48:ab:33:
97:a0:25:8d:99:6d:4d:10:77:b2:d1:9b:b7:ed:a3:
43:ce:97:b0:04:aa:9a:3a:9b:04:83:1e:dc:71:0b:
a1:3b:80:60:2c:3b:af:7c:ad:e5:ec:50:79:a3:91:
c5:a5:e2:3d:88:80:a5:21:c8:d4:1a:1c:01:39:58:
16:46:5d:d8:61:b0:48:47:4d:f3:6a:a3:85:d5:05:
b3:dc:33:1f:66:13:12:b7:cd:25:91:84:5a:eb:cc:
ac:5f:01:85:42:b5:af:1b:de:98:7e:ef:06:f9:a5:
0c:4a:5e:08:05:37:73:09:d9:8c:bf:43:a1:ba:41:
20:66:ea:e1:8b:df:a8:eb:a2:bd:58:d9:15:e8:c5:
e7:d3:89:08:49:ff:32:21:0b:9b:42:13:dc:22:e6:
4c:81:08:e1:76:f1:49:bd:09:07:06:db:a9:64:dd:
8f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:C1:B8:6C:A1:37:AB:06:79:36:88:78:ED:B9:DC:F1:09:B0:F3:DB
X509v3 Authority Key Identifier:
keyid:60:38:31:A6:1B:C8:A8:F4:CB:85:88:70:22:FB:6F:86:39:73:45:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YDgxphvIqPTLhYhwIvtvhjlzRdw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ac3276-50ad-4ebc-a2a6-9808545933c9/1/usG4bKE3qwZ5Noh47bnc8Qmw89s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ac3276-50ad-4ebc-a2a6-9808545933c9/1/YDgxphvIqPTLhYhwIvtvhjlzRdw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.34.224.0/22
Signature Algorithm: sha256WithRSAEncryption
68:45:31:4f:72:06:2a:07:22:5f:6b:cc:9a:b4:2b:d9:68:61:
6e:cd:0b:37:a5:31:88:bd:b4:d0:2a:59:28:1c:83:99:b5:41:
c2:d7:13:3f:4d:18:5e:4f:71:70:41:ce:10:bb:81:bd:40:78:
0b:e3:2a:12:3b:e2:be:60:33:01:ec:be:f1:77:01:12:97:30:
ce:88:2a:f6:85:2b:bb:cd:a2:45:83:c4:94:c5:09:80:3e:34:
16:c8:de:a9:9d:3b:6d:34:c6:32:0f:a8:06:ee:34:7e:ac:09:
01:8a:03:8e:89:1f:e7:5f:34:e1:f1:fa:d7:91:b5:f8:9f:e6:
14:e4:9c:85:6f:4e:78:32:e3:2e:76:f2:a0:f0:f3:69:8a:00:
f8:c0:a9:27:4b:f9:3d:f0:33:17:a5:37:cb:86:38:dc:bd:26:
d3:55:70:6e:9d:9b:59:8d:ec:32:d9:4d:cf:f5:ad:1a:54:81:
c5:82:a5:dd:f2:cb:a9:2b:d7:ca:ba:df:05:23:53:d4:35:2d:
31:ac:2d:f8:33:92:6c:bd:f0:91:60:9b:31:85:92:49:ad:c3:
b3:95:66:64:d1:20:0c:28:61:66:bf:3f:4b:7c:ca:1b:a8:82:
5c:6b:e5:57:6b:72:a9:76:90:be:d8:fb:ab:7b:07:76:3c:8c:
12:89:98:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 02:22:12 2024 by rpki-client on console-ams.rpki-client.org