Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/DOfMqXQ35r6v-OEi3WKLLOptQPg.roa
File: DOfMqXQ35r6v-OEi3WKLLOptQPg.roa (raw, json)
Hash identifier: 0voUcs2/9l4q99oS0600tIBEO7OeeiCfTPM1ZJxYIXs=
Subject key identifier: 0C:E7:CC:A9:74:37:E6:BE:AF:F8:E1:22:DD:62:8B:2C:EA:6D:40:F8
Certificate issuer: /CN=7554ac4c7f451c5bb9382fbcd46d70c4c0f9de56
Certificate serial: 018CC6B786191F0C310DA0781AAA86CFF5E0
Authority key identifier: 75:54:AC:4C:7F:45:1C:5B:B9:38:2F:BC:D4:6D:70:C4:C0:F9:DE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dVSsTH9FHFu5OC-81G1wxMD53lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/DOfMqXQ35r6v-OEi3WKLLOptQPg.roa
Signing time: Mon 01 Jan 2024 20:29:25 +0000
ROA not before: Mon 01 Jan 2024 20:29:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57043
IP address blocks: 185.177.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dVSsTH9FHFu5OC-81G1wxMD53lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:86:19:1f:0c:31:0d:a0:78:1a:aa:86:cf:f5:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7554ac4c7f451c5bb9382fbcd46d70c4c0f9de56
Validity
Not Before: Jan 1 20:29:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0ce7cca97437e6beaff8e122dd628b2cea6d40f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:36:46:12:38:a2:b6:83:63:11:88:4c:09:24:
ef:e3:76:77:a6:b7:10:52:49:73:3f:9e:b2:42:df:
d7:96:d1:ba:af:ee:f4:33:3a:24:45:84:3c:e8:b4:
27:47:50:28:25:cb:b3:00:61:fd:a4:ed:52:68:76:
4a:e0:ad:5e:ad:59:b0:ee:8c:18:4f:be:98:6c:e0:
c6:36:94:8a:99:c6:04:49:fc:c5:f6:14:a4:d7:f9:
ec:7a:36:5a:35:40:c4:a1:19:64:61:9f:21:90:e3:
00:c8:e7:ea:97:90:ce:e9:b9:59:a0:a1:7c:59:41:
d1:c0:d0:cb:cc:63:df:cc:5a:76:34:4a:cf:f6:6b:
b0:ba:fe:79:ee:a2:da:f5:62:5b:bc:31:3f:03:59:
68:a6:09:9e:dc:ad:d8:f5:91:61:67:69:05:ce:52:
8c:93:a8:4f:2b:6d:52:25:78:a8:c5:9b:ca:d1:0a:
e8:dd:c0:a9:73:f3:e6:a4:3e:38:aa:82:8f:1d:9d:
a9:98:3d:59:8e:16:b8:d2:ee:64:5e:5d:65:d5:d5:
11:55:ec:70:f4:7f:e5:24:39:72:f5:cf:02:80:dd:
75:a1:81:d3:02:26:f6:71:14:64:53:25:97:12:d3:
43:33:a1:20:ef:83:15:c3:69:aa:4b:ee:45:c7:bd:
51:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:E7:CC:A9:74:37:E6:BE:AF:F8:E1:22:DD:62:8B:2C:EA:6D:40:F8
X509v3 Authority Key Identifier:
keyid:75:54:AC:4C:7F:45:1C:5B:B9:38:2F:BC:D4:6D:70:C4:C0:F9:DE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dVSsTH9FHFu5OC-81G1wxMD53lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/DOfMqXQ35r6v-OEi3WKLLOptQPg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.177.230.0/24
Signature Algorithm: sha256WithRSAEncryption
91:9f:85:8c:c9:00:ba:67:0f:e7:df:7e:4a:9c:6e:f5:d9:da:
9a:eb:3d:47:cd:45:f6:da:ef:18:f3:6f:b6:83:c4:76:10:6e:
34:19:fa:97:f1:2b:6f:d4:bc:8d:eb:99:e1:83:21:43:8e:75:
af:ac:5c:cb:be:ed:1b:85:9a:9c:c5:58:ed:03:35:9d:b5:f9:
65:58:53:e7:fd:73:a9:c6:c6:e2:20:25:f3:be:73:5e:3c:3a:
b3:c4:c9:87:58:75:f4:6e:0b:32:96:15:de:22:c5:54:bb:2b:
bb:a7:7f:70:7b:ac:8e:45:0e:5e:01:ec:4a:10:92:1b:f4:52:
a8:6a:b3:26:71:a1:ad:98:46:75:47:ab:dd:bf:38:ac:0c:59:
ad:98:96:4f:a4:ae:d9:70:b2:97:2f:26:22:20:59:48:d3:e2:
a1:eb:51:83:c4:11:88:81:dd:c3:1b:b9:e5:d9:d5:f9:63:8b:
3e:c4:de:fd:75:92:df:d4:4e:b2:6f:9b:ab:c8:a9:f2:e7:8d:
7d:3e:5b:bc:09:02:4a:6e:47:37:9d:b3:c8:e4:c0:ea:52:ed:
5f:d4:4c:e2:a3:b3:9d:62:49:b2:75:fe:ae:f1:85:10:db:9c:
3d:3f:07:11:d8:6c:b1:28:fa:91:6f:5d:35:5d:c7:3c:6e:3a:
99:f3:49:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:45:32 2024 by rpki-client on console-fra.rpki-client.org