Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/vDdp9XSxfMQ0BsvsSIL3FQ4kHUY.roa
File: vDdp9XSxfMQ0BsvsSIL3FQ4kHUY.roa (raw, json)
Hash identifier: m1LkBl2H15c0ZE9Hh+kPW+MTjqVe7SFkB0JjchegkFs=
Subject key identifier: BC:37:69:F5:74:B1:7C:C4:34:06:CB:EC:48:82:F7:15:0E:24:1D:46
Certificate issuer: /CN=4c81273dcb03c3457b79250be109e19a5e74f0fd
Certificate serial: 018E086D0D3F1AEE97E616B541B10BDDF8AB
Authority key identifier: 4C:81:27:3D:CB:03:C3:45:7B:79:25:0B:E1:09:E1:9A:5E:74:F0:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TIEnPcsDw0V7eSUL4Qnhml508P0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/vDdp9XSxfMQ0BsvsSIL3FQ4kHUY.roa
Signing time: Mon 04 Mar 2024 07:45:48 +0000
ROA not before: Mon 04 Mar 2024 07:45:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216408
IP address blocks: 185.87.216.0/24 maxlen: 24
2a13:85c0:100::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIEnPcsDw0V7eSUL4Qnhml508P0.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIEnPcsDw0V7eSUL4Qnhml508P0.mft
rsync://rpki.ripe.net/repository/DEFAULT/TIEnPcsDw0V7eSUL4Qnhml508P0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 May 2024 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:08:6d:0d:3f:1a:ee:97:e6:16:b5:41:b1:0b:dd:f8:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c81273dcb03c3457b79250be109e19a5e74f0fd
Validity
Not Before: Mar 4 07:45:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bc3769f574b17cc43406cbec4882f7150e241d46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:14:22:cc:76:18:91:8c:bc:fa:22:bc:8d:c3:
8d:7f:cd:53:cb:69:8b:85:e2:84:10:3f:2b:f7:36:
b0:54:51:41:f1:a2:82:11:ef:9e:06:ae:f9:99:ec:
dc:0e:1c:44:e1:af:7d:c5:4d:67:54:bc:b4:49:a4:
fd:7b:6c:f2:ad:d2:ed:96:67:50:4e:4e:9f:cf:c5:
09:fe:2d:e0:2f:4e:c0:f1:1e:36:9b:8b:72:a6:ad:
02:4f:7a:a8:5b:57:00:53:0e:09:7d:33:b0:71:e4:
91:3d:1b:66:e6:74:c9:53:47:e8:a8:a1:4a:73:c6:
4b:5f:e7:e9:e0:6c:0b:79:4b:4f:f3:70:f6:c4:ab:
01:c1:8a:6a:5e:38:82:f8:cd:f4:3e:ad:7f:2e:56:
48:7b:3a:87:64:d7:f7:f3:da:7e:1a:7e:83:03:43:
17:4a:22:5d:76:59:73:35:7f:58:bf:cc:e2:f8:43:
b0:6c:fe:97:94:aa:07:e8:98:66:04:ae:46:05:36:
d2:32:2d:b6:d5:1c:4c:8d:10:e7:cc:64:43:e9:8e:
3c:1e:ca:ba:8f:d5:f7:35:b5:65:6b:82:7d:a9:49:
09:21:41:51:1d:93:40:aa:91:b9:e2:07:ba:82:f8:
81:03:9f:b4:e0:e9:74:93:7e:aa:8e:f4:34:fd:5c:
87:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:37:69:F5:74:B1:7C:C4:34:06:CB:EC:48:82:F7:15:0E:24:1D:46
X509v3 Authority Key Identifier:
keyid:4C:81:27:3D:CB:03:C3:45:7B:79:25:0B:E1:09:E1:9A:5E:74:F0:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TIEnPcsDw0V7eSUL4Qnhml508P0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/vDdp9XSxfMQ0BsvsSIL3FQ4kHUY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIEnPcsDw0V7eSUL4Qnhml508P0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.87.216.0/24
IPv6:
2a13:85c0:100::/40
Signature Algorithm: sha256WithRSAEncryption
87:0a:b2:1f:a9:8f:dd:9d:11:31:f8:12:c3:80:ac:31:33:b7:
5f:d9:4b:36:f8:51:9b:b9:9a:2a:a2:f2:47:75:be:44:a6:f2:
29:c7:28:10:df:35:94:b3:32:26:36:a9:25:66:6d:3f:77:a6:
90:78:b3:50:95:87:34:62:da:ff:a0:2c:64:a2:ba:0a:28:f7:
4a:59:49:76:06:9e:88:ea:0f:9e:56:40:e4:49:a7:86:49:53:
65:b4:97:03:67:dc:22:81:6c:9b:f1:bb:82:6b:df:ff:36:8a:
28:a2:4a:55:6c:2b:22:54:20:37:d5:8b:dc:5e:31:76:9e:1a:
dc:6f:b3:a1:61:16:22:ff:f1:fd:22:eb:24:32:64:77:f5:a7:
7c:54:e4:87:f8:e8:71:17:ba:5c:0f:e5:35:54:6d:ac:62:5f:
1f:ab:f6:77:68:60:3a:7c:72:1e:11:11:26:c8:a1:4c:85:db:
d8:9e:7f:fe:a1:e3:e1:9c:69:c6:bd:a4:00:64:5d:a1:4a:67:
a7:31:ed:e5:1b:fe:e9:29:b0:2a:36:f8:16:81:cf:20:e7:b6:
22:eb:53:25:23:74:4c:e1:f8:f1:fc:cf:28:e3:0e:e6:3c:a8:
c8:4f:d7:3b:a4:47:54:97:bd:09:ca:71:3e:d4:09:2e:a9:fb:
a4:e1:46:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 29 07:36:09 2024 by rpki-client on console-ams.rpki-client.org