Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/CniyY5AABpAmBFunZrTsPdJXdZQ.roa
File: CniyY5AABpAmBFunZrTsPdJXdZQ.roa (raw, json)
Hash identifier: LXQcT1S+8VbypHOqlG40PHSC9L8DF/SiieGdn0rLbYQ=
Subject key identifier: 0A:78:B2:63:90:00:06:90:26:04:5B:A7:66:B4:EC:3D:D2:57:75:94
Certificate issuer: /CN=d7219ec7383fa0610480ddfa62c3f82c400cd56f
Certificate serial: 018D3096963848ECD0D693CECE2FE30B8988
Authority key identifier: D7:21:9E:C7:38:3F:A0:61:04:80:DD:FA:62:C3:F8:2C:40:0C:D5:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1yGexzg_oGEEgN36YsP4LEAM1W8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/CniyY5AABpAmBFunZrTsPdJXdZQ.roa
Signing time: Mon 22 Jan 2024 09:53:11 +0000
ROA not before: Mon 22 Jan 2024 09:53:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207709
IP address blocks: 185.103.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/1yGexzg_oGEEgN36YsP4LEAM1W8.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/1yGexzg_oGEEgN36YsP4LEAM1W8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1yGexzg_oGEEgN36YsP4LEAM1W8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:30:96:96:38:48:ec:d0:d6:93:ce:ce:2f:e3:0b:89:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7219ec7383fa0610480ddfa62c3f82c400cd56f
Validity
Not Before: Jan 22 09:53:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0a78b2639000069026045ba766b4ec3dd2577594
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:96:23:76:f4:5a:0f:27:f1:53:8c:e3:0d:9e:
5c:62:04:f4:a2:8d:d6:e6:e0:ae:f5:00:19:a8:2a:
e8:0a:44:93:b5:fe:8f:d8:f7:d2:8f:82:f5:53:52:
7c:17:62:41:a9:92:61:9a:04:9e:2f:5b:d7:7f:b8:
5b:19:50:0e:4f:b8:26:38:64:cf:be:f4:d8:fe:c3:
c2:b2:74:2c:d3:11:ed:92:82:01:f0:fa:b7:ae:d6:
6d:59:5e:58:c5:bc:2f:5e:b8:3b:4f:f1:1f:e4:19:
5c:05:dd:df:56:1f:a8:f0:cb:a0:0f:55:99:a3:0d:
51:e3:3b:02:cd:50:76:46:b0:f0:ef:18:1d:32:87:
d7:77:6b:23:e2:a2:cd:20:f3:17:4b:66:0c:d6:71:
b8:97:7c:e4:e7:8d:ef:ab:96:82:1e:f7:49:22:8e:
cc:06:bf:2e:52:66:a0:e1:58:ea:1f:7d:83:75:6a:
df:b6:94:da:ae:f7:0a:b6:a0:b6:7f:a3:78:e4:9e:
fd:70:75:bd:7c:ba:f8:40:a7:76:d6:3c:8b:ca:54:
aa:6e:3c:da:b2:cb:4f:bf:dd:be:10:c2:1b:47:0f:
24:76:66:f6:6d:de:a2:9a:79:04:bf:93:c7:90:43:
32:51:0a:c0:48:1c:9a:85:68:36:9f:1e:f5:bf:45:
ea:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:78:B2:63:90:00:06:90:26:04:5B:A7:66:B4:EC:3D:D2:57:75:94
X509v3 Authority Key Identifier:
keyid:D7:21:9E:C7:38:3F:A0:61:04:80:DD:FA:62:C3:F8:2C:40:0C:D5:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1yGexzg_oGEEgN36YsP4LEAM1W8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/CniyY5AABpAmBFunZrTsPdJXdZQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/1yGexzg_oGEEgN36YsP4LEAM1W8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.103.4.0/24
Signature Algorithm: sha256WithRSAEncryption
da:69:2f:70:77:21:01:5a:d9:8b:31:ae:a3:9b:9f:7f:8f:ec:
26:95:42:d7:fa:4c:68:7f:cc:c5:37:c9:45:84:83:c9:1b:5d:
e6:e3:cf:71:df:84:94:e5:0d:80:41:e3:78:b0:4e:2f:b7:60:
98:23:71:a0:cd:35:ec:8d:34:a5:11:82:9f:96:c0:b8:28:bf:
97:34:7f:d3:0b:04:d0:8c:e3:94:1d:96:98:08:36:7d:92:5e:
a8:8b:4c:9b:1a:42:55:99:81:7c:2a:94:2c:03:f9:a9:4c:38:
4a:28:2e:97:5e:25:46:e0:f2:10:d0:46:ec:80:22:8b:2e:e3:
fa:61:de:ae:de:fe:ca:33:f5:3d:75:49:d0:01:9a:9e:24:16:
17:0f:09:57:31:d6:c2:54:28:ee:98:6a:4d:4a:33:7b:77:2d:
4d:38:ca:13:a2:76:f0:cb:b6:95:77:04:b8:37:72:75:c7:29:
4c:1a:d0:3d:f0:f0:0a:c1:9d:12:c4:40:ac:bf:b2:cb:be:05:
98:5b:82:80:b9:0d:60:90:8d:8e:e2:7c:12:46:f3:62:1c:54:
da:1e:b3:bb:0c:a5:09:e0:c2:5f:07:67:85:04:a9:00:f1:12:
ff:13:fb:6e:aa:26:57:c2:81:83:fa:15:1c:da:52:25:8f:44:
d1:d1:9b:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 15:30:38 2024 by rpki-client on console-ams.rpki-client.org