Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/vQG92r3r5ZEpjOUc-UUZw6HjOo8.roa
File: vQG92r3r5ZEpjOUc-UUZw6HjOo8.roa (raw, json)
Hash identifier: TstkM8iWLe9RWMv0agD7BtjBad/RP9E8xb35rXfvPow=
Subject key identifier: BD:01:BD:DA:BD:EB:E5:91:29:8C:E5:1C:F9:45:19:C3:A1:E3:3A:8F
Certificate issuer: /CN=e180ebbbca0f890de353891421a83dd5b653d940
Certificate serial: 018FA952BC43189D62802223519415189856
Authority key identifier: E1:80:EB:BB:CA:0F:89:0D:E3:53:89:14:21:A8:3D:D5:B6:53:D9:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4YDru8oPiQ3jU4kUIag91bZT2UA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/vQG92r3r5ZEpjOUc-UUZw6HjOo8.roa
Signing time: Fri 24 May 2024 06:38:42 +0000
ROA not before: Fri 24 May 2024 06:38:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215074
IP address blocks: 185.182.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4YDru8oPiQ3jU4kUIag91bZT2UA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Jun 2024 13:57:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:a9:52:bc:43:18:9d:62:80:22:23:51:94:15:18:98:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e180ebbbca0f890de353891421a83dd5b653d940
Validity
Not Before: May 24 06:38:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bd01bddabdebe591298ce51cf94519c3a1e33a8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:98:d8:41:45:cc:31:ad:55:39:d8:47:bb:5b:
bc:f7:fb:5d:61:32:0b:4d:65:88:aa:2e:c5:8c:19:
b9:38:b2:81:87:6f:a1:a7:c3:02:b7:ed:cc:09:3c:
f4:a3:ef:4c:b1:0d:27:28:c7:02:ff:b5:e7:69:bc:
f6:26:51:54:27:b6:27:53:f4:4e:d9:76:5d:5e:d1:
0b:4c:7f:f2:c8:33:55:61:e6:0f:49:46:a1:09:e1:
ac:f1:5e:07:db:89:76:36:0d:a8:b2:4a:07:f4:2c:
ed:b0:25:ff:5e:68:6f:4f:b5:64:ed:37:fe:bb:70:
c8:83:91:64:d8:98:9f:99:3a:cd:7c:bf:c5:95:ee:
0b:1b:df:3c:34:c3:b3:5d:ff:ab:54:11:2c:f2:8f:
2b:8f:ec:06:83:95:2b:ed:bc:07:58:54:cf:47:70:
04:d7:01:da:55:75:1c:b9:f3:70:cd:91:20:cc:f0:
a6:34:3d:5c:d4:42:f1:8a:a8:c9:ee:8a:ec:d5:81:
b3:9f:bc:a8:a1:0d:c6:05:42:c9:4f:2c:06:8c:28:
4f:1e:51:45:96:94:8e:61:b2:a5:cc:f0:6f:15:c5:
52:e0:52:ad:41:e1:10:c4:4c:67:ca:4a:d6:4e:f1:
ae:ca:25:9a:b4:4c:4f:be:1e:d6:96:e9:fb:35:3c:
a5:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:01:BD:DA:BD:EB:E5:91:29:8C:E5:1C:F9:45:19:C3:A1:E3:3A:8F
X509v3 Authority Key Identifier:
keyid:E1:80:EB:BB:CA:0F:89:0D:E3:53:89:14:21:A8:3D:D5:B6:53:D9:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4YDru8oPiQ3jU4kUIag91bZT2UA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/vQG92r3r5ZEpjOUc-UUZw6HjOo8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.182.108.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:7b:75:a5:a6:ca:a3:71:c6:0f:e5:36:1a:92:3f:0a:65:37:
78:32:a5:e6:5b:69:2c:ad:14:4d:43:b4:5b:0a:32:cd:15:22:
c3:0b:6c:54:5f:80:e6:25:ad:8f:2a:8c:1d:ce:ab:2c:63:2b:
af:b9:f4:49:df:f3:7d:16:d5:45:18:ba:f3:57:c5:6f:43:bf:
6f:c8:2b:05:34:d1:59:12:a3:9c:29:a6:5f:6a:4e:99:1d:3b:
3f:e5:3b:8b:c6:0b:31:1d:c0:28:a3:67:73:57:37:2a:1c:fa:
18:37:95:2b:78:84:4f:21:9c:62:d0:48:3b:ea:83:19:54:f3:
e4:4b:78:b0:b9:d9:ae:69:50:2f:65:70:23:cb:c9:59:27:a7:
a4:17:0b:ab:7e:e9:f6:87:3a:c0:e5:10:e7:5a:bb:f4:9b:b9:
c0:04:99:8b:52:04:0c:a2:bb:0d:2f:e1:5f:f0:89:a2:82:86:
84:46:70:f5:36:02:5a:34:bc:49:b6:f4:97:e1:72:3c:72:e9:
0f:98:14:5a:9e:c3:1f:a9:83:ad:bd:8d:76:1e:68:f8:01:27:
d7:21:13:ce:a2:01:87:24:e2:05:d0:56:d8:f8:86:7d:37:9f:
aa:89:da:64:86:ad:f8:42:d4:b1:b3:a9:25:88:0e:31:69:7e:
22:68:f0:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 19:12:49 2024 by rpki-client on console-fra.rpki-client.org