Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/5a6d01-a375-4e11-871e-99e6141de7f1/1/V9VHtXztBsstEUzOZ16_WCe4uIc.roa
File: V9VHtXztBsstEUzOZ16_WCe4uIc.roa (raw, json)
Hash identifier: oDsuw4vZRmEbb3jz3yvFsgh41s3Qzx07iHdniX/agPA=
Subject key identifier: 57:D5:47:B5:7C:ED:06:CB:2D:11:4C:CE:67:5E:BF:58:27:B8:B8:87
Certificate issuer: /CN=f7bed33ff01e8e09dc4fedcd01139c0e77854aae
Certificate serial: 018CC26D7F4430C8E6EC76B3E7F502887D3C
Authority key identifier: F7:BE:D3:3F:F0:1E:8E:09:DC:4F:ED:CD:01:13:9C:0E:77:85:4A:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/977TP_AejgncT-3NAROcDneFSq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/5a6d01-a375-4e11-871e-99e6141de7f1/1/V9VHtXztBsstEUzOZ16_WCe4uIc.roa
Signing time: Mon 01 Jan 2024 00:30:04 +0000
ROA not before: Mon 01 Jan 2024 00:30:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42926
IP address blocks: 185.70.84.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/5a6d01-a375-4e11-871e-99e6141de7f1/1/977TP_AejgncT-3NAROcDneFSq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/5a6d01-a375-4e11-871e-99e6141de7f1/1/977TP_AejgncT-3NAROcDneFSq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/977TP_AejgncT-3NAROcDneFSq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 May 2024 10:02:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:7f:44:30:c8:e6:ec:76:b3:e7:f5:02:88:7d:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7bed33ff01e8e09dc4fedcd01139c0e77854aae
Validity
Not Before: Jan 1 00:30:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=57d547b57ced06cb2d114cce675ebf5827b8b887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d7:ed:5b:ab:59:da:9b:d1:02:c8:15:fd:79:
8f:6b:e2:44:bd:85:ff:1a:0a:21:43:53:ec:94:f0:
f3:ee:75:cb:07:5c:99:9b:dd:8a:83:ca:e7:00:ad:
63:02:dc:2f:88:55:22:b8:62:8c:4e:43:33:53:d4:
0e:8f:71:1c:19:c6:ca:33:e7:dd:6c:6f:0d:8e:6f:
78:ef:f9:34:04:8b:47:be:ed:ad:8a:2f:e3:56:f0:
76:83:9e:75:d7:d3:eb:16:da:4c:fc:5f:04:a6:ad:
0b:c0:d2:da:0f:0a:cc:c6:2f:ab:70:75:bb:f6:b5:
cf:5e:35:91:48:fe:ba:e2:66:3f:ce:75:5e:ba:3b:
2c:ae:b2:a3:e1:0d:4c:09:0a:1f:99:10:9a:2d:51:
91:6c:9b:2b:24:f7:cc:d2:c8:92:43:49:e5:06:bd:
d6:fb:2f:9e:e0:2b:cb:79:52:e1:6c:97:42:bb:0d:
a1:32:e4:8a:ea:9b:a3:df:7d:cc:29:03:7c:e3:89:
49:1b:3f:e0:90:f2:33:ea:35:d7:52:e0:af:1f:70:
42:fb:99:df:58:51:03:9d:e4:2f:bc:c5:ee:4f:f4:
f2:38:8d:37:59:46:07:2d:2a:95:b0:b8:f0:40:4e:
31:e2:8c:81:8c:38:84:ac:61:cc:1a:31:66:ad:9b:
55:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:D5:47:B5:7C:ED:06:CB:2D:11:4C:CE:67:5E:BF:58:27:B8:B8:87
X509v3 Authority Key Identifier:
keyid:F7:BE:D3:3F:F0:1E:8E:09:DC:4F:ED:CD:01:13:9C:0E:77:85:4A:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/977TP_AejgncT-3NAROcDneFSq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/5a6d01-a375-4e11-871e-99e6141de7f1/1/V9VHtXztBsstEUzOZ16_WCe4uIc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/5a6d01-a375-4e11-871e-99e6141de7f1/1/977TP_AejgncT-3NAROcDneFSq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.70.84.0/22
Signature Algorithm: sha256WithRSAEncryption
85:b4:9a:1f:83:e0:ec:1e:6b:9b:97:db:5e:e5:9d:9d:b3:a7:
e7:85:7e:fa:03:06:60:9d:50:35:87:5c:55:79:45:c0:68:52:
4a:79:c9:13:cb:18:7f:05:7c:46:5b:4a:51:a8:43:df:78:70:
2b:06:01:ad:12:88:fd:5f:44:8c:4e:4e:82:c2:ce:70:0d:92:
eb:41:97:b9:9c:ff:1c:c2:9d:74:50:12:ea:a2:a2:38:28:15:
53:7d:a1:b2:0e:a8:f2:f1:2b:8e:27:49:fe:a0:b8:63:bf:1b:
46:3b:0a:13:c5:9e:07:94:6f:93:d6:40:38:15:03:6b:09:3a:
40:08:07:b5:79:cb:bd:9b:2d:63:4f:80:2b:95:44:8b:c7:de:
0b:45:69:59:f2:20:cd:18:46:ea:14:df:7c:cd:ca:9b:c9:b6:
5d:9e:ad:a3:1c:0b:f8:8e:0f:b6:3f:25:d4:35:00:d9:30:98:
fd:08:9a:da:eb:17:83:f1:c7:d3:25:73:47:5f:59:36:27:94:
a3:79:a8:b8:0d:f2:6a:9a:d4:69:90:f2:86:8b:05:57:cd:79:
d4:7b:85:34:64:26:ca:cc:71:8e:3c:41:fa:ab:8c:2a:fa:e9:
69:1f:ec:1b:52:e4:31:64:f8:65:93:d8:e4:ba:dd:f3:7a:ec:
29:4f:7f:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 27 19:52:44 2024 by rpki-client on console-ams.rpki-client.org