Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/sX3liQBRn4p4V8_RSD4gr8DM690.roa
File: sX3liQBRn4p4V8_RSD4gr8DM690.roa (raw, json)
Hash identifier: ubZWvwQ2yko+rFLh/VtO5zRcm13d5m89kX8eyur3BTg=
Subject key identifier: B1:7D:E5:89:00:51:9F:8A:78:57:CF:D1:48:3E:20:AF:C0:CC:EB:DD
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01914116E455CD117E5EB003BBD98538447C
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/sX3liQBRn4p4V8_RSD4gr8DM690.roa
Signing time: Sun 11 Aug 2024 10:58:24 +0000
ROA not before: Sun 11 Aug 2024 10:58:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215607
IP address blocks: 185.253.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:41:16:e4:55:cd:11:7e:5e:b0:03:bb:d9:85:38:44:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Aug 11 10:58:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b17de58900519f8a7857cfd1483e20afc0ccebdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:40:1b:5a:fb:d1:4c:7b:3b:a6:87:dd:6b:29:
67:f4:fd:85:11:f2:7e:6a:e6:14:85:8e:4b:97:be:
0c:da:d9:97:25:d3:ee:ce:72:28:14:46:98:cc:46:
05:f5:ad:77:22:f0:ae:ea:13:3b:60:3b:28:e3:ac:
36:2d:ef:6c:9c:cc:ac:80:1c:e4:34:ae:94:95:13:
50:93:4e:05:2c:89:01:be:87:9d:ae:f7:45:4f:4c:
4e:95:3f:ef:7c:54:8c:81:63:3c:84:97:8f:27:0c:
d2:41:89:2f:7d:f3:a3:62:a3:59:43:d3:47:ba:04:
9e:86:a9:e8:b4:66:e9:c0:12:67:82:ee:c8:df:f5:
9b:e8:23:25:9d:17:a1:d0:17:95:ab:3d:90:52:80:
bf:23:be:20:cd:52:09:74:0c:fa:61:34:b8:74:1b:
c1:23:6c:63:7a:fc:68:1a:d8:43:4d:5a:88:b5:83:
9c:27:21:9a:0f:88:05:b8:89:5e:dd:9a:0f:cb:fb:
1b:d2:b4:d3:f2:49:74:3f:f7:07:4a:1a:bd:a4:9c:
9d:7f:82:53:67:10:f7:94:b1:a7:84:a0:b5:41:37:
87:26:3d:29:5f:26:c6:df:6a:ba:ae:d9:a5:e8:8c:
17:3c:7e:29:2e:a9:7a:60:ab:a4:91:75:02:4e:87:
e9:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:7D:E5:89:00:51:9F:8A:78:57:CF:D1:48:3E:20:AF:C0:CC:EB:DD
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/sX3liQBRn4p4V8_RSD4gr8DM690.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.253.54.0/24
Signature Algorithm: sha256WithRSAEncryption
19:c9:c8:f9:39:85:91:44:0e:5b:13:83:21:1f:d0:a8:9e:3f:
67:fc:e8:92:c1:7e:79:b0:94:64:75:81:97:86:92:f3:60:dc:
4c:a9:4e:cd:1a:ea:b8:ef:a3:2a:4c:b7:de:4f:67:e6:76:e2:
76:ae:d1:d5:ac:3c:0a:ea:f0:be:95:b1:73:09:78:5c:75:57:
11:ce:8d:c3:94:64:4d:89:fc:05:dc:e0:83:d7:3e:79:48:d2:
99:ed:26:c2:1f:d9:b6:88:bf:f7:ff:30:f1:22:bb:0b:77:6e:
11:41:f1:97:ed:6e:5b:40:09:82:8a:e3:ff:1d:14:c8:7d:06:
7c:e8:c3:06:88:1f:9e:0c:ca:35:ca:e3:44:3d:ad:a0:22:46:
3b:fb:7d:d1:2c:5c:c8:17:be:9f:9e:4e:8b:25:2f:6e:f3:8f:
e2:a2:35:b1:f7:8e:c7:e7:91:48:53:8c:e8:29:24:b6:21:16:
ab:64:8c:6f:f3:7a:b2:eb:51:87:de:6d:d8:a7:24:7f:6e:92:
ed:25:f6:e8:fa:97:b2:e8:73:1e:85:f5:b7:19:b9:d4:49:ee:
27:ec:a9:1c:f4:99:bc:a1:6b:9b:e4:0a:84:42:c8:26:fa:ee:
cd:62:7a:4f:c1:0a:4a:55:78:d5:5b:7b:9c:7f:14:f7:46:5b:
60:91:1a:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:18:19 2024 by rpki-client on console-ams.rpki-client.org