Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/f491a0-b666-4e9f-b0f9-6eed52968b1c/1/vJ2ZdHfgPpkJnwaOOm2qi-yITLQ.roa
File: vJ2ZdHfgPpkJnwaOOm2qi-yITLQ.roa (raw, json)
Hash identifier: VE0xw7OHTJUYot/rEAinkKVPhx8jsPS1AuxOAQJd1t8=
Subject key identifier: BC:9D:99:74:77:E0:3E:99:09:9F:06:8E:3A:6D:AA:8B:EC:88:4C:B4
Certificate issuer: /CN=5a0aa9682c683a9c1b95ce9676d51b20d39fd2ae
Certificate serial: 018CC6B8DECB02221590BEDFDF2CD2411C38
Authority key identifier: 5A:0A:A9:68:2C:68:3A:9C:1B:95:CE:96:76:D5:1B:20:D3:9F:D2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WgqpaCxoOpwblc6WdtUbINOf0q4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/f491a0-b666-4e9f-b0f9-6eed52968b1c/1/vJ2ZdHfgPpkJnwaOOm2qi-yITLQ.roa
Signing time: Mon 01 Jan 2024 20:30:53 +0000
ROA not before: Mon 01 Jan 2024 20:30:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210687
IP address blocks: 185.153.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/f491a0-b666-4e9f-b0f9-6eed52968b1c/1/WgqpaCxoOpwblc6WdtUbINOf0q4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/f491a0-b666-4e9f-b0f9-6eed52968b1c/1/WgqpaCxoOpwblc6WdtUbINOf0q4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WgqpaCxoOpwblc6WdtUbINOf0q4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 16:02:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:de:cb:02:22:15:90:be:df:df:2c:d2:41:1c:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a0aa9682c683a9c1b95ce9676d51b20d39fd2ae
Validity
Not Before: Jan 1 20:30:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bc9d997477e03e99099f068e3a6daa8bec884cb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:35:e6:93:8d:b2:03:79:73:b3:35:8c:04:d4:
a3:0c:c0:56:22:c7:23:91:9c:da:be:0f:bb:43:a6:
43:4a:65:cc:0f:e5:90:6a:37:b3:d1:a3:6a:f9:3c:
dc:1c:c2:eb:2f:f5:f4:6c:f9:e8:51:b8:cd:e6:c5:
5c:0d:e9:d9:76:dc:2e:d5:42:cf:54:8a:3f:5b:28:
d3:27:ca:64:6a:e0:8b:0a:71:a8:38:53:ac:6a:fe:
b4:5f:f5:18:e3:e8:0f:e7:b7:fc:8c:d1:a7:c8:f7:
36:b5:8b:26:3c:5c:7f:bb:6d:c2:9e:fa:e9:0f:4d:
f1:15:73:55:21:d3:9d:cb:29:4c:3a:88:bd:eb:72:
6a:66:5e:4a:be:b3:cf:1a:7b:ba:66:85:c7:0f:1d:
9a:31:6e:7f:22:d0:7e:46:7e:aa:18:7c:cb:f1:83:
0c:19:52:bd:52:32:03:26:68:7b:5c:b3:a9:77:75:
07:37:5d:19:19:5d:78:cb:8d:ce:2d:06:07:11:00:
b5:f4:b6:49:7b:62:bf:6b:f0:3e:00:07:87:10:a8:
1a:f7:fc:d1:f9:5a:28:3d:38:da:09:c2:e9:18:a4:
80:66:33:41:93:3e:cb:42:0e:20:57:0f:79:16:ca:
70:46:32:65:6d:02:97:cf:09:31:bd:e9:d9:b8:4b:
7f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:9D:99:74:77:E0:3E:99:09:9F:06:8E:3A:6D:AA:8B:EC:88:4C:B4
X509v3 Authority Key Identifier:
keyid:5A:0A:A9:68:2C:68:3A:9C:1B:95:CE:96:76:D5:1B:20:D3:9F:D2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WgqpaCxoOpwblc6WdtUbINOf0q4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f491a0-b666-4e9f-b0f9-6eed52968b1c/1/vJ2ZdHfgPpkJnwaOOm2qi-yITLQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f491a0-b666-4e9f-b0f9-6eed52968b1c/1/WgqpaCxoOpwblc6WdtUbINOf0q4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.153.234.0/24
Signature Algorithm: sha256WithRSAEncryption
13:58:95:a4:d7:e1:1f:ef:15:f4:bf:8e:be:8d:00:82:a2:31:
70:27:c5:fd:3e:7e:f8:a4:b8:93:e8:f8:3e:ab:c9:94:cc:0d:
99:95:f7:bc:ff:7d:78:6a:d4:3d:36:00:f6:38:29:b6:29:64:
78:31:e9:64:16:42:2e:70:9b:bd:4a:bc:0f:0d:6a:26:4a:80:
35:45:83:ff:04:c6:5e:29:0e:1b:18:a5:c8:85:b1:3e:10:d7:
88:f0:95:9c:0a:b7:44:60:a4:58:1d:4b:4c:87:5a:fe:95:1c:
3e:6d:a0:3f:5d:a7:aa:26:9e:86:42:52:de:63:d9:d5:3a:e2:
b7:55:63:53:c0:83:70:d9:56:59:cc:ef:e4:51:6c:23:01:dd:
a3:64:f7:92:63:52:35:0d:0c:6f:97:f9:9d:fd:92:3f:af:73:
80:cb:a1:60:56:2b:56:9d:cd:9b:c7:55:c2:cf:94:d2:11:ff:
2a:43:89:8b:be:30:82:14:7d:03:46:1f:02:8e:03:9c:23:9d:
e7:39:4d:f1:18:90:71:ac:fa:62:f1:3d:6e:ab:06:54:f1:e8:
b0:7a:17:d6:32:79:a5:a9:55:f7:2c:11:38:ac:79:44:4f:f7:
c2:75:05:53:ae:15:8e:4c:b7:33:52:4d:84:a0:62:5f:7e:a0:
0c:22:78:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 02:25:04 2024 by rpki-client on console-ams.rpki-client.org