Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/1--swjx5Yf6b6P4Bjt6ly0vvj4Y8.roa
File: 1--swjx5Yf6b6P4Bjt6ly0vvj4Y8.roa (raw, json)
Hash identifier: JKS28+2pUQyhZVYlVTh2cbf3l8eO45WDYz9m8IKdlk4=
Subject key identifier: FB:EB:30:8F:1E:58:7F:A6:FA:3F:80:63:B7:A9:72:D2:FB:E3:E1:8F
Certificate issuer: /CN=387d6df7eb7542e0333aeedd14adff8f51f8cbd8
Certificate serial: 018CC6B7AF4B2D190C15DB68AE425A242108
Authority key identifier: 38:7D:6D:F7:EB:75:42:E0:33:3A:EE:DD:14:AD:FF:8F:51:F8:CB:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/1--swjx5Yf6b6P4Bjt6ly0vvj4Y8.roa
Signing time: Mon 01 Jan 2024 20:29:35 +0000
ROA not before: Mon 01 Jan 2024 20:29:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208650
IP address blocks: 185.202.135.0/24 maxlen: 24
185.202.134.0/24 maxlen: 24
2a0a:d6c0:134::/48 maxlen: 48
2a0a:d6c0:135::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jul 2024 08:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:af:4b:2d:19:0c:15:db:68:ae:42:5a:24:21:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=387d6df7eb7542e0333aeedd14adff8f51f8cbd8
Validity
Not Before: Jan 1 20:29:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fbeb308f1e587fa6fa3f8063b7a972d2fbe3e18f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:fa:7b:ef:22:69:68:2b:f1:72:56:f2:10:e9:
61:ee:9a:0d:be:99:cb:02:ed:12:a0:73:7d:0f:59:
f9:ae:8b:5d:62:65:43:cf:f9:0e:7a:6f:b6:2d:03:
f4:7d:ef:ad:41:53:ac:a1:bb:09:71:17:ed:1f:46:
76:c1:d7:66:6f:a0:47:83:6b:62:e6:3d:0e:fc:24:
82:82:a0:6a:58:0b:bf:c5:34:7f:7e:08:fe:e7:10:
31:3c:67:92:dd:1b:59:93:2b:b9:79:0b:09:40:40:
64:ca:19:68:04:70:49:30:70:48:ee:f8:a9:f9:40:
86:b3:17:f6:5a:2d:b3:58:55:62:d1:21:17:a1:5d:
57:1c:44:5a:0e:05:63:d4:16:11:c2:29:65:be:35:
a2:9b:fa:31:d2:ac:f1:15:e3:a3:8e:82:ea:98:ad:
1f:d6:7a:e8:8b:30:71:ce:2a:e4:cf:8a:69:eb:05:
26:77:75:16:dd:ed:b9:4b:a2:b9:4f:fb:5a:03:c8:
a9:4e:93:2f:ba:1f:ea:10:bf:fa:b6:da:c1:a1:96:
1c:46:fc:6f:ba:70:78:1a:67:be:f0:85:5c:bd:d6:
09:20:4e:69:4e:f2:98:10:1c:b8:7d:56:31:8d:3d:
02:e8:65:c2:8d:6f:be:67:c9:6a:41:02:45:7c:f6:
0d:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:EB:30:8F:1E:58:7F:A6:FA:3F:80:63:B7:A9:72:D2:FB:E3:E1:8F
X509v3 Authority Key Identifier:
keyid:38:7D:6D:F7:EB:75:42:E0:33:3A:EE:DD:14:AD:FF:8F:51:F8:CB:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/1--swjx5Yf6b6P4Bjt6ly0vvj4Y8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.202.134.0/23
IPv6:
2a0a:d6c0:134::/47
Signature Algorithm: sha256WithRSAEncryption
9d:56:f1:54:38:a0:d9:5f:e9:23:a3:30:38:5b:97:95:57:fe:
1b:fa:a6:d8:a8:a0:37:d6:a8:45:04:4d:9d:ef:1e:da:c8:a2:
4b:09:76:a6:60:5b:2b:01:1e:89:5b:7f:6e:a9:06:10:1f:85:
a8:7d:39:dd:1a:f1:0a:f4:37:9d:21:0a:85:f9:12:cb:b1:c1:
ea:85:b5:74:f5:b0:19:4a:07:70:4f:20:45:0a:9c:08:0a:1a:
ff:7f:40:ba:58:3f:56:33:04:ec:57:68:24:aa:8b:02:ef:e3:
ba:79:78:05:03:3d:95:ef:c7:3b:2f:55:36:31:18:ef:7d:ae:
32:e8:dc:3c:82:fb:80:d2:91:70:de:a6:7c:e7:fc:ee:d4:e8:
f6:d3:d5:47:c4:81:26:f0:46:c8:4c:d1:8c:36:ea:d0:0d:16:
72:2e:37:5f:92:bd:3f:60:9f:52:3a:47:db:7a:ac:a7:90:ba:
9c:cb:1d:54:6a:61:a7:e5:fe:49:35:e2:28:a3:78:84:b1:8a:
05:98:e0:b0:0a:99:52:54:75:fe:2b:a7:71:82:be:a7:72:b1:
90:a8:2e:5f:71:9e:70:d6:36:6c:35:b8:b0:86:25:2f:74:af:
81:87:15:d6:09:f9:f0:a5:4c:af:fb:fe:fa:7f:8f:b9:38:10:
7c:ec:31:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 4 13:41:17 2024 by rpki-client on console-fra.rpki-client.org