Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/18d132-9951-4055-b5a6-dc0e1a725221/1/2nL0RuNnVof_eR4JXYeWcfTWHKE.roa
File: 2nL0RuNnVof_eR4JXYeWcfTWHKE.roa (raw, json)
Hash identifier: ii1xy9H61dc7eJuIIrP38Q5ZtAN32ErmgGdcDXJbNf8=
Subject key identifier: DA:72:F4:46:E3:67:56:87:FF:79:1E:09:5D:87:96:71:F4:D6:1C:A1
Certificate issuer: /CN=d03046d16cfc391b028b88743773ce005cf97b1d
Certificate serial: 018CC64AF17E9B5E202F0C2BB30C1B4BF48E
Authority key identifier: D0:30:46:D1:6C:FC:39:1B:02:8B:88:74:37:73:CE:00:5C:F9:7B:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0DBG0Wz8ORsCi4h0N3POAFz5ex0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/18d132-9951-4055-b5a6-dc0e1a725221/1/2nL0RuNnVof_eR4JXYeWcfTWHKE.roa
Signing time: Mon 01 Jan 2024 18:30:49 +0000
ROA not before: Mon 01 Jan 2024 18:30:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 396982
IP address blocks: 185.168.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/18d132-9951-4055-b5a6-dc0e1a725221/1/0DBG0Wz8ORsCi4h0N3POAFz5ex0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/18d132-9951-4055-b5a6-dc0e1a725221/1/0DBG0Wz8ORsCi4h0N3POAFz5ex0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0DBG0Wz8ORsCi4h0N3POAFz5ex0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 16:02:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:f1:7e:9b:5e:20:2f:0c:2b:b3:0c:1b:4b:f4:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d03046d16cfc391b028b88743773ce005cf97b1d
Validity
Not Before: Jan 1 18:30:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=da72f446e3675687ff791e095d879671f4d61ca1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:86:8b:5c:78:69:8a:c2:5a:71:a6:ff:73:5d:
3b:ae:40:40:5a:76:07:f8:68:72:50:31:7f:24:b6:
79:71:6d:0d:b6:90:1e:2c:5c:78:e7:2d:77:ea:05:
96:b4:64:dd:a4:72:98:25:dd:b8:f3:23:17:bf:10:
eb:2f:9f:91:88:99:c5:6c:b1:ff:db:bd:89:87:91:
e0:35:9d:81:49:0c:7c:bb:c2:b2:25:39:80:cb:c7:
b7:8a:2b:14:d9:ec:0f:32:7c:f8:be:6f:8e:e9:78:
48:e7:f0:bc:5e:70:df:ed:bb:be:6f:f7:6a:10:0d:
c4:f4:08:1d:3d:ab:12:74:e3:a1:3d:93:30:49:ab:
55:14:83:6e:53:3e:52:c6:95:1c:ec:8d:cd:dc:43:
89:46:a3:11:61:13:d5:4a:be:91:f1:98:1f:e5:f0:
6d:a9:5d:9b:34:2e:a8:5b:22:ac:d7:42:e1:c8:46:
fc:01:4b:0a:ad:b5:f5:25:12:2b:f6:ff:00:51:83:
00:32:7e:2f:86:6a:4d:32:ee:65:74:42:be:c1:9f:
71:f6:7e:d0:5b:7a:a2:6a:0f:f8:b2:fa:ae:b0:86:
d1:a0:64:20:6e:32:9c:6a:f1:c5:bf:a4:8d:a3:4f:
fc:2c:3b:0d:a6:ca:3a:13:75:ee:5c:11:95:c5:32:
5f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:72:F4:46:E3:67:56:87:FF:79:1E:09:5D:87:96:71:F4:D6:1C:A1
X509v3 Authority Key Identifier:
keyid:D0:30:46:D1:6C:FC:39:1B:02:8B:88:74:37:73:CE:00:5C:F9:7B:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0DBG0Wz8ORsCi4h0N3POAFz5ex0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/18d132-9951-4055-b5a6-dc0e1a725221/1/2nL0RuNnVof_eR4JXYeWcfTWHKE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/18d132-9951-4055-b5a6-dc0e1a725221/1/0DBG0Wz8ORsCi4h0N3POAFz5ex0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.168.204.0/24
Signature Algorithm: sha256WithRSAEncryption
82:4a:0c:63:18:4d:35:74:90:d1:c9:0d:22:0f:25:8c:ff:e5:
9a:07:a1:be:fa:25:0e:9c:02:83:0f:0e:3f:e3:39:61:79:6a:
b4:16:76:99:b2:18:3b:3c:8c:29:e0:dd:ce:57:c7:f4:08:32:
3b:c2:fb:85:13:df:1c:77:47:e5:e6:66:cb:e5:02:72:21:d7:
d7:a7:91:bd:90:26:f1:68:53:0e:10:85:18:8e:21:f8:f0:14:
b2:99:c7:3a:78:ff:e4:bd:94:c7:0c:3c:03:c8:9f:05:51:64:
9d:5d:c8:8d:c7:77:0c:1e:3c:5b:9c:f0:5f:2a:62:46:2f:dd:
5b:48:55:81:90:77:a5:b4:be:22:df:19:e0:97:f9:ab:80:50:
82:c1:48:6f:94:f2:6d:36:77:c4:2d:b5:22:1b:f1:da:3f:9f:
6c:23:c4:6a:e9:be:d9:56:90:b2:ca:da:a4:dd:2f:a9:63:0c:
68:66:68:07:0b:f1:11:6e:1e:59:65:60:14:d8:d8:93:90:98:
5c:0e:13:b5:5e:ee:9f:92:66:31:cf:cf:cf:63:7c:8b:ad:96:
78:b1:2d:d8:97:47:c9:a1:7d:ca:67:c9:d0:bb:e1:87:5a:9f:
3e:0c:f8:a9:d1:70:cb:e2:c4:82:c4:e3:f5:18:0b:36:59:5c:
cf:24:3b:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 19:53:18 2024 by rpki-client on console-fra.rpki-client.org