Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/bPWjPQeVaZXM8NHgAgjJoTgkB7k.roa
File: bPWjPQeVaZXM8NHgAgjJoTgkB7k.roa (raw, json)
Hash identifier: 30Hov8q4hfIbN9zHbX1aOu5QbHtVsV28wqW/XK69yvo=
Subject key identifier: 6C:F5:A3:3D:07:95:69:95:CC:F0:D1:E0:02:08:C9:A1:38:24:07:B9
Certificate issuer: /CN=0350df78fc785813724ec66648df9b494f9b8da7
Certificate serial: 018CC6B866CB63235765E48F6E392BA1E525
Authority key identifier: 03:50:DF:78:FC:78:58:13:72:4E:C6:66:48:DF:9B:49:4F:9B:8D:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A1DfePx4WBNyTsZmSN-bSU-bjac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/bPWjPQeVaZXM8NHgAgjJoTgkB7k.roa
Signing time: Mon 01 Jan 2024 20:30:22 +0000
ROA not before: Mon 01 Jan 2024 20:30:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61094
IP address blocks: 185.92.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/A1DfePx4WBNyTsZmSN-bSU-bjac.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/A1DfePx4WBNyTsZmSN-bSU-bjac.mft
rsync://rpki.ripe.net/repository/DEFAULT/A1DfePx4WBNyTsZmSN-bSU-bjac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:66:cb:63:23:57:65:e4:8f:6e:39:2b:a1:e5:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0350df78fc785813724ec66648df9b494f9b8da7
Validity
Not Before: Jan 1 20:30:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6cf5a33d07956995ccf0d1e00208c9a1382407b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2b:08:54:c2:88:f5:4c:99:63:b0:f0:85:07:
d5:9b:22:37:11:45:52:74:16:83:64:8f:78:e8:c7:
d2:1c:b3:d1:df:dc:8a:00:44:98:ed:d2:dd:43:e3:
38:5b:06:44:71:a1:5f:a8:b8:40:c8:f6:32:ef:a9:
50:03:88:bc:49:9b:a5:20:d3:3a:8e:11:77:ef:73:
2d:ae:29:9f:16:c3:60:74:25:70:20:b1:9e:9f:7b:
36:96:6f:ef:54:61:e2:06:c0:72:af:27:3d:76:8d:
8a:c7:bc:8c:bf:c2:a0:a2:28:be:1d:cb:29:de:51:
e5:26:3c:3d:2f:f4:73:4c:c9:fb:83:21:86:02:d6:
16:ba:02:91:5a:f6:bf:d8:1d:12:2a:72:91:72:9e:
1e:11:74:9d:89:2d:dd:be:5c:68:71:e7:70:db:93:
c8:45:44:39:b1:90:5a:a3:53:c0:bc:1a:46:1c:d9:
44:08:17:15:25:2e:d5:f1:ba:8b:68:84:e8:af:62:
17:b5:a8:74:6b:c2:02:bd:1a:0c:98:68:0b:db:da:
c1:ff:4b:f5:ac:59:aa:aa:7b:b8:63:24:cc:ba:55:
ee:bf:2e:a6:b3:8d:86:39:f5:02:4a:89:2f:82:f6:
ce:53:60:05:4c:02:97:72:84:9b:e4:20:0a:e2:fe:
d9:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:F5:A3:3D:07:95:69:95:CC:F0:D1:E0:02:08:C9:A1:38:24:07:B9
X509v3 Authority Key Identifier:
keyid:03:50:DF:78:FC:78:58:13:72:4E:C6:66:48:DF:9B:49:4F:9B:8D:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A1DfePx4WBNyTsZmSN-bSU-bjac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/bPWjPQeVaZXM8NHgAgjJoTgkB7k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/A1DfePx4WBNyTsZmSN-bSU-bjac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.92.124.0/24
Signature Algorithm: sha256WithRSAEncryption
07:7b:36:f5:21:a1:6c:8a:f6:87:6c:a2:4a:cb:4f:81:4d:75:
c9:9f:8f:33:fe:76:29:be:98:97:4c:a9:9e:ac:90:49:92:24:
8c:cb:90:b8:e3:55:c6:6a:07:2b:8d:d1:bc:c0:ab:9d:13:3e:
8d:15:22:fe:69:f1:eb:37:32:87:e2:a3:e8:76:e8:49:4b:3f:
22:25:67:45:cb:e4:42:23:38:14:d8:cd:e7:56:03:d3:c6:21:
f4:6b:16:5f:d2:bc:82:ff:f8:0f:8c:8b:fd:09:c7:c2:de:dc:
f6:90:39:78:85:44:91:91:40:39:a1:e8:2f:78:69:05:2f:89:
12:ab:1f:50:d7:e9:40:a9:45:6a:40:10:bc:3a:f6:61:1c:55:
43:35:56:1d:07:60:69:64:d6:1b:9c:14:a4:2b:ae:07:88:f9:
d4:6a:86:16:24:51:61:9d:d2:98:88:0b:0b:27:03:cd:06:9b:
f2:68:33:77:02:dc:1f:04:57:6c:04:82:af:24:71:0d:5f:95:
59:12:65:75:fe:fe:ad:12:92:fd:ce:39:b4:ca:17:32:83:dc:
c6:66:e6:cf:59:2f:c0:b3:22:86:3f:91:d8:6e:e4:22:c7:ba:
b8:ee:c5:3a:0c:60:92:a8:a3:01:f1:a7:69:17:95:5f:dd:1e:
71:1c:5d:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 22:53:29 2024 by rpki-client on console-fra.rpki-client.org