Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/ad08e6-7332-46a1-bf72-4b5957aa747f/1/v4H55Yu4pCMvTfhvRsZ1RpcUC_M.roa
File: v4H55Yu4pCMvTfhvRsZ1RpcUC_M.roa (raw, json)
Hash identifier: pksCtJ+MLkLMG7r+CpZZWbUMjzjlGscfid8ezTNzCyw=
Subject key identifier: BF:81:F9:E5:8B:B8:A4:23:2F:4D:F8:6F:46:C6:75:46:97:14:0B:F3
Certificate issuer: /CN=c7bb24c4b9783ca23b6ed5e750443eed3a72f93b
Certificate serial: 018CC348BF7A7F94195B813DBBCDFE3F41BB
Authority key identifier: C7:BB:24:C4:B9:78:3C:A2:3B:6E:D5:E7:50:44:3E:ED:3A:72:F9:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/ad08e6-7332-46a1-bf72-4b5957aa747f/1/v4H55Yu4pCMvTfhvRsZ1RpcUC_M.roa
Signing time: Mon 01 Jan 2024 04:29:33 +0000
ROA not before: Mon 01 Jan 2024 04:29:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204121
IP address blocks: 185.114.0.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/ad08e6-7332-46a1-bf72-4b5957aa747f/1/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/ad08e6-7332-46a1-bf72-4b5957aa747f/1/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.mft
rsync://rpki.ripe.net/repository/DEFAULT/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Jun 2024 00:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:bf:7a:7f:94:19:5b:81:3d:bb:cd:fe:3f:41:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7bb24c4b9783ca23b6ed5e750443eed3a72f93b
Validity
Not Before: Jan 1 04:29:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bf81f9e58bb8a4232f4df86f46c6754697140bf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:fa:ee:03:14:c5:da:30:1f:82:2e:44:a8:38:
22:62:8b:bf:db:1a:56:b9:a6:b3:b4:ad:b0:c1:d7:
6a:96:09:7d:55:96:a5:43:fb:16:a4:b3:38:ff:32:
af:5c:44:f8:e0:a3:da:65:55:26:4c:2b:5b:e1:49:
da:08:46:3d:fb:ed:71:28:6d:9b:ed:3c:84:15:81:
77:fa:7c:c3:64:5f:8d:80:01:14:ca:a3:99:28:b8:
8b:49:6c:c8:11:29:0a:f3:55:a2:a0:14:ab:f3:37:
9c:0d:cc:37:af:33:e6:cd:46:2c:8a:84:58:32:d0:
e6:1d:87:21:36:8f:ea:46:01:2c:7f:28:10:ce:97:
a3:66:61:ae:05:83:37:49:4b:19:44:16:c3:15:a4:
f2:ba:16:9c:b0:63:20:c6:bc:c2:b0:cd:9d:d8:83:
87:fb:c8:c2:a7:ac:28:f1:a3:f3:12:af:bf:0c:cb:
43:e3:fd:b2:d2:13:09:ae:87:85:ff:46:ed:40:49:
fb:b3:93:90:10:82:56:86:04:75:4c:ac:64:78:3b:
ea:47:0c:33:c6:1e:9f:f9:45:dd:79:eb:c9:98:d4:
14:f0:50:3b:3d:2e:4c:cf:0a:db:91:b5:ec:2d:e6:
31:c8:e7:dd:6a:96:7f:d1:9d:23:de:e1:28:09:3f:
bb:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:81:F9:E5:8B:B8:A4:23:2F:4D:F8:6F:46:C6:75:46:97:14:0B:F3
X509v3 Authority Key Identifier:
keyid:C7:BB:24:C4:B9:78:3C:A2:3B:6E:D5:E7:50:44:3E:ED:3A:72:F9:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/ad08e6-7332-46a1-bf72-4b5957aa747f/1/v4H55Yu4pCMvTfhvRsZ1RpcUC_M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/ad08e6-7332-46a1-bf72-4b5957aa747f/1/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.114.0.0/22
Signature Algorithm: sha256WithRSAEncryption
09:d3:47:d8:10:36:0d:37:88:d6:a9:df:9a:c4:4b:ae:1b:d9:
df:81:6b:0e:8a:c3:ec:6c:51:1b:7c:48:68:99:cd:d1:3d:4d:
2f:7e:ca:e6:99:50:05:9c:7a:40:81:64:9a:f2:4d:c3:c9:4e:
50:83:ea:33:e0:58:12:18:8b:82:17:a7:34:43:5c:be:d2:dc:
a4:ab:9b:ba:40:f4:51:8b:9c:11:31:a2:cd:f9:74:8c:33:f5:
b2:ce:7c:d1:28:93:4b:bf:73:7e:26:94:d0:5c:9b:8f:40:67:
55:db:4b:7f:9a:f6:45:e8:4e:74:5f:12:1a:a6:ba:cf:cc:37:
ce:fd:76:2d:74:4d:09:bb:a9:02:73:ba:f5:d9:98:3a:d2:63:
b2:45:96:6a:23:28:49:fb:ca:9d:ec:8c:28:a2:64:2a:ba:31:
a6:b3:aa:23:c0:e8:f0:b1:93:5a:81:b2:18:8f:bd:4f:b3:92:
ec:98:09:56:5b:3e:92:45:20:6a:1a:6a:52:0b:c2:37:68:fe:
2f:1d:b8:d8:1d:fe:87:df:06:fa:e7:e4:6b:56:9a:ba:fb:64:
48:c1:04:c3:70:9f:9f:c1:a8:a8:80:5b:3d:ef:5d:98:1a:ad:
c5:17:17:8d:a9:e5:a3:7b:65:a1:d6:73:62:71:df:ad:de:23:
98:a3:da:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 10:14:56 2024 by rpki-client on console-fra.rpki-client.org