Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/e03808-d2db-40d9-81f4-87c2e8f3914e/1/b11ES4K34kzkFX2wQjPi5XJ27t0.roa
File: b11ES4K34kzkFX2wQjPi5XJ27t0.roa (raw, json)
Hash identifier: Ybxb1k6+561Kf4bOilN5swYgic4XETYq7gLqrpKTmPU=
Subject key identifier: 6F:5D:44:4B:82:B7:E2:4C:E4:15:7D:B0:42:33:E2:E5:72:76:EE:DD
Certificate issuer: /CN=e4d32a3e18b84ee3c54e34fa67dc68ef19d2b7b3
Certificate serial: 018DE9BFA9645DF0A3910719945A1032A54C
Authority key identifier: E4:D3:2A:3E:18:B8:4E:E3:C5:4E:34:FA:67:DC:68:EF:19:D2:B7:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5NMqPhi4TuPFTjT6Z9xo7xnSt7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/e03808-d2db-40d9-81f4-87c2e8f3914e/1/b11ES4K34kzkFX2wQjPi5XJ27t0.roa
Signing time: Tue 27 Feb 2024 08:47:48 +0000
ROA not before: Tue 27 Feb 2024 08:47:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215540
IP address blocks: 185.28.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/e03808-d2db-40d9-81f4-87c2e8f3914e/1/5NMqPhi4TuPFTjT6Z9xo7xnSt7M.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/e03808-d2db-40d9-81f4-87c2e8f3914e/1/5NMqPhi4TuPFTjT6Z9xo7xnSt7M.mft
rsync://rpki.ripe.net/repository/DEFAULT/5NMqPhi4TuPFTjT6Z9xo7xnSt7M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:e9:bf:a9:64:5d:f0:a3:91:07:19:94:5a:10:32:a5:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4d32a3e18b84ee3c54e34fa67dc68ef19d2b7b3
Validity
Not Before: Feb 27 08:47:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6f5d444b82b7e24ce4157db04233e2e57276eedd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:7b:3d:32:d0:a5:7e:c3:2a:b2:8f:eb:7b:f2:
c1:31:d8:19:49:ff:d8:3a:c3:84:75:79:41:7d:72:
a0:e8:b2:d5:43:b3:f0:c9:16:4d:5a:11:a6:bd:ff:
3c:6b:1d:75:ee:d4:5b:27:c8:2e:7b:32:86:5e:49:
12:11:03:6d:9f:10:c2:cd:84:82:72:06:8f:fd:66:
53:0f:d3:94:78:f5:23:84:08:8a:b9:90:e1:c7:67:
3e:55:fd:ad:8f:b0:01:5f:01:b5:25:64:8b:94:fd:
fe:eb:df:1e:0a:df:b0:dd:79:91:e8:21:20:32:87:
c5:ed:3f:34:51:58:cc:0b:9c:b2:07:ac:06:9a:1b:
22:73:50:e7:85:8f:e7:ca:25:45:c9:59:23:28:4c:
a3:84:3a:2a:31:b2:72:c0:ca:a3:1d:99:c3:ef:57:
f0:4a:2b:fb:89:42:1e:e2:79:4d:f3:31:29:b2:9f:
f7:6a:c0:fd:a8:2f:9e:a1:0a:d0:2f:23:a8:6c:a0:
45:8b:3e:ae:13:0b:08:5a:3c:94:53:83:23:f0:53:
4e:11:30:d5:8d:58:cb:09:c8:90:eb:5b:db:62:1e:
10:60:ac:3c:ee:59:c0:bf:1c:44:b1:90:eb:d7:2e:
1c:f7:5e:ce:37:3f:30:f9:65:b0:ca:1a:f7:b7:d8:
bc:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:5D:44:4B:82:B7:E2:4C:E4:15:7D:B0:42:33:E2:E5:72:76:EE:DD
X509v3 Authority Key Identifier:
keyid:E4:D3:2A:3E:18:B8:4E:E3:C5:4E:34:FA:67:DC:68:EF:19:D2:B7:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5NMqPhi4TuPFTjT6Z9xo7xnSt7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/e03808-d2db-40d9-81f4-87c2e8f3914e/1/b11ES4K34kzkFX2wQjPi5XJ27t0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/e03808-d2db-40d9-81f4-87c2e8f3914e/1/5NMqPhi4TuPFTjT6Z9xo7xnSt7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.28.119.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:91:62:f5:32:93:34:42:af:43:69:50:45:f4:70:68:29:76:
b4:0d:d3:54:da:9b:46:89:84:3d:6a:e5:2d:57:53:8d:cc:75:
a4:b4:88:9a:ee:79:2a:f2:78:a1:d9:00:5f:98:0a:df:ed:1b:
0d:85:7e:e6:46:71:0f:1b:ff:48:d5:cd:9c:d3:b4:5d:b9:02:
1b:f4:7e:cb:1e:0e:2d:bf:d5:39:27:bb:fb:2a:f3:7e:35:1f:
7b:0f:88:f4:a0:ed:7f:ad:39:f3:ce:ca:24:5e:dd:83:71:14:
bb:55:6e:26:93:ca:70:82:e0:d9:91:a4:18:01:65:b4:f5:68:
50:9f:d0:d6:49:83:42:6b:d7:2d:cb:bb:fe:f3:cd:0b:f3:ca:
ee:3f:d9:de:dc:fe:10:26:08:b3:65:89:b2:49:6d:77:e2:19:
63:e4:27:28:b2:22:e0:97:97:46:dc:47:86:aa:f9:e9:79:4a:
17:41:f6:cc:ca:c0:bd:4c:e1:d9:b9:6d:0f:59:81:72:56:f8:
99:e9:5f:1f:27:40:c6:c4:c8:c0:84:bc:d4:e9:84:d5:c8:a2:
8e:5d:db:6e:e4:eb:b9:76:ab:4e:46:03:db:3d:35:7a:ce:58:
0d:1a:87:7b:3a:cf:75:f9:ae:3f:78:a2:74:69:6b:aa:cf:94:
0b:c4:86:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 20:58:54 2024 by rpki-client on console-ams.rpki-client.org