Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/1fKdc5dCjpa_wS7ph2Zm5LGmt-A.roa
File: 1fKdc5dCjpa_wS7ph2Zm5LGmt-A.roa (raw, json)
Hash identifier: CU6IJ5wiIu2m39XVI3w/N+rPrk1aNMMtGkVWocd0b6s=
Subject key identifier: D5:F2:9D:73:97:42:8E:96:BF:C1:2E:E9:87:66:66:E4:B1:A6:B7:E0
Certificate issuer: /CN=6363bb65895f3a54a4b324a10c79ac98efe2a1ca
Certificate serial: 018E9D4BA9090E9D30AF5760A4F678B2AFED
Authority key identifier: 63:63:BB:65:89:5F:3A:54:A4:B3:24:A1:0C:79:AC:98:EF:E2:A1:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/1fKdc5dCjpa_wS7ph2Zm5LGmt-A.roa
Signing time: Tue 02 Apr 2024 05:32:45 +0000
ROA not before: Tue 02 Apr 2024 05:32:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 185.126.156.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 27 Apr 2024 05:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:9d:4b:a9:09:0e:9d:30:af:57:60:a4:f6:78:b2:af:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6363bb65895f3a54a4b324a10c79ac98efe2a1ca
Validity
Not Before: Apr 2 05:32:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d5f29d7397428e96bfc12ee9876666e4b1a6b7e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:9a:6d:2d:4b:5a:51:74:1a:2a:3a:4d:31:a5:
21:cf:7f:47:c6:ac:80:1c:d9:f7:78:c4:86:6d:cd:
e4:28:fa:8c:6e:41:61:8c:e9:da:d5:e3:88:11:4d:
ed:a6:c5:25:86:8f:1a:c9:e3:bf:7e:8f:8f:84:00:
d4:d8:4c:99:77:c1:77:40:31:95:05:2a:8f:83:3c:
0a:14:d9:0d:ec:5f:64:3f:25:c7:fb:2b:4f:c3:1b:
7d:71:96:e2:d1:8b:30:e4:74:76:15:64:07:f4:4a:
18:5d:f9:d5:93:27:e2:f6:d8:8d:04:bd:41:d5:a8:
a8:1a:95:3f:14:bc:05:41:98:8f:50:1c:4f:75:26:
28:f6:9a:f9:df:60:84:5b:5b:75:a1:9a:94:d6:1d:
9b:0d:5c:4e:27:a9:9a:74:65:bf:99:71:ad:15:c3:
f7:99:cb:eb:84:89:de:8f:44:11:fd:bb:3d:05:01:
64:0c:46:4f:a2:7f:57:18:b4:91:3d:16:75:c5:8b:
34:1c:61:a3:7c:02:49:76:bc:40:aa:eb:af:50:36:
1e:0c:54:56:6d:fd:10:6b:26:9f:e6:f2:db:33:17:
a1:a6:0a:4e:7b:46:ba:78:b6:3a:30:7d:1a:a1:5c:
43:a2:07:61:82:b0:1e:5a:4a:aa:4b:a8:fd:2c:f0:
47:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:F2:9D:73:97:42:8E:96:BF:C1:2E:E9:87:66:66:E4:B1:A6:B7:E0
X509v3 Authority Key Identifier:
keyid:63:63:BB:65:89:5F:3A:54:A4:B3:24:A1:0C:79:AC:98:EF:E2:A1:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/1fKdc5dCjpa_wS7ph2Zm5LGmt-A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.126.156.0/23
Signature Algorithm: sha256WithRSAEncryption
0a:67:1d:28:a5:98:06:f9:50:bc:c7:1f:68:e3:2c:8c:ff:e1:
d3:e6:92:c5:5c:db:3b:a4:2b:a0:a4:89:7d:c0:80:b7:11:bf:
e3:d7:08:44:12:da:8e:d0:8b:8e:9b:5e:dd:44:08:e0:9c:9b:
f4:dc:8a:13:a8:59:ff:79:48:f1:33:73:6f:09:b0:29:10:c0:
c0:fb:16:11:58:91:18:d6:d5:3e:65:52:ee:64:ab:07:ca:81:
25:33:cf:32:4c:33:8d:01:8e:9e:d6:2d:70:bc:22:53:28:b5:
ec:46:a2:9a:1b:8c:73:3a:30:0c:e7:50:1e:77:86:49:4e:c9:
6d:4d:a9:4d:fe:53:8a:57:ac:92:1b:62:45:b3:32:2a:a3:2c:
01:1d:ba:3c:18:18:bb:75:2e:89:79:03:51:ec:a2:ae:f0:d0:
72:e5:cb:0b:fb:58:a4:f8:7c:d3:5a:60:68:70:a6:92:16:25:
2b:05:05:dd:95:92:44:fe:ae:e1:53:78:02:62:89:0c:21:1d:
8a:a5:c6:51:44:2b:63:a4:c4:c2:1c:1f:02:3d:25:16:9a:11:
b1:6e:cc:df:24:bf:8a:b7:29:fe:da:15:3b:27:3a:23:37:11:
65:e9:93:c8:94:61:bf:cf:56:07:29:51:99:fd:3d:f7:cb:e3:
9e:97:e1:49
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY6dS6kJDp0wr1dgpPZ4sq/tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzNjNiYjY1ODk1ZjNhNTRhNGIzMjRhMTBjNzlhYzk4ZWZl
MmExY2EwHhcNMjQwNDAyMDUzMjQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNWYyOWQ3Mzk3NDI4ZTk2YmZjMTJlZTk4NzY2NjZlNGIxYTZiN2UwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5ptLUtaUXQaKjpNMaUhz39HxqyA
HNn3eMSGbc3kKPqMbkFhjOna1eOIEU3tpsUlho8ayeO/fo+PhADU2EyZd8F3QDGV
BSqPgzwKFNkN7F9kPyXH+ytPwxt9cZbi0Ysw5HR2FWQH9EoYXfnVkyfi9tiNBL1B
1aioGpU/FLwFQZiPUBxPdSYo9pr532CEW1t1oZqU1h2bDVxOJ6madGW/mXGtFcP3
mcvrhInej0QR/bs9BQFkDEZPon9XGLSRPRZ1xYs0HGGjfAJJdrxAquuvUDYeDFRW
bf0Qayaf5vLbMxehpgpOe0a6eLY6MH0aoVxDogdhgrAeWkqqS6j9LPBHBQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNXynXOXQo6Wv8Eu6YdmZuSxprfgMB8GA1UdIwQY
MBaAFGNju2WJXzpUpLMkoQx5rJjv4qHKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWTJPN1pZbGZPbFNrc3lTaERIbXNtT19pb2NvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9kYjliZjEtZTAxOS00NWE0LTg2NjMt
YTZjYTQ1NGRiMmQ3LzEvMWZLZGM1ZENqcGFfd1M3cGgyWm01TEdtdC1BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy9kYjliZjEtZTAxOS00NWE0LTg2NjMtYTZjYTQ1NGRiMmQ3
LzEvWTJPN1pZbGZPbFNrc3lTaERIbXNtT19pb2NvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuX6cMA0G
CSqGSIb3DQEBCwUAA4IBAQAKZx0opZgG+VC8xx9o4yyM/+HT5pLFXNs7pCugpIl9
wIC3Eb/j1whEEtqO0IuOm17dRAjgnJv03IoTqFn/eUjxM3NvCbApEMDA+xYRWJEY
1tU+ZVLuZKsHyoElM88yTDONAY6e1i1wvCJTKLXsRqKaG4xzOjAM51Aed4ZJTslt
TalN/lOKV6ySG2JFszIqoywBHbo8GBi7dS6JeQNR7KKu8NBy5csL+1ik+HzTWmBo
cKaSFiUrBQXdlZJE/q7hU3gCYokMIR2KpcZRRCtjpMTCHB8CPSUWmhGxbszfJL+K
tyn+2hU7JzojNxFl6ZPIlGG/z1YHKVGZ/T33y+Oel+FJ
-----END CERTIFICATE-----
Generated at Fri Apr 26 11:23:53 2024 by rpki-client on console-ams.rpki-client.org