Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1bdOMIbvc5hhMjSg5FBRCCJdq84.roa
File: 1bdOMIbvc5hhMjSg5FBRCCJdq84.roa (raw, json)
Hash identifier: apFkPc8WYsDfO0FkcCAoY3zvmqEfPCWdIk9DyjZ+04k=
Subject key identifier: D5:B7:4E:30:86:EF:73:98:61:32:34:A0:E4:50:51:08:22:5D:AB:CE
Certificate issuer: /CN=d504e641e55a48aee0141e2c0d26227102caa6d4
Certificate serial: 018CC26D2242D006328B24585ADDD44787FD
Authority key identifier: D5:04:E6:41:E5:5A:48:AE:E0:14:1E:2C:0D:26:22:71:02:CA:A6:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QTmQeVaSK7gFB4sDSYicQLKptQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1bdOMIbvc5hhMjSg5FBRCCJdq84.roa
Signing time: Mon 01 Jan 2024 00:29:41 +0000
ROA not before: Mon 01 Jan 2024 00:29:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39125
IP address blocks: 46.254.94.0/23 maxlen: 24
80.251.112.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1QTmQeVaSK7gFB4sDSYicQLKptQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 May 2024 22:03:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:22:42:d0:06:32:8b:24:58:5a:dd:d4:47:87:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d504e641e55a48aee0141e2c0d26227102caa6d4
Validity
Not Before: Jan 1 00:29:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d5b74e3086ef7398613234a0e4505108225dabce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:83:02:c1:d9:a6:a4:82:a2:e4:dd:a8:4b:74:
03:d2:4d:3d:9f:a7:64:87:37:da:9f:5f:7e:93:20:
85:c9:15:0e:6d:d8:22:78:d0:25:48:dd:8d:27:c4:
a6:26:27:04:cb:ff:86:e0:4c:50:b9:b8:61:df:c4:
0a:c0:0f:fd:1a:53:c9:a8:55:e9:7b:ca:ec:08:92:
32:47:c2:60:23:84:b5:72:fa:07:d0:5a:0a:d1:58:
e7:cd:6c:62:33:68:d6:8e:c1:f6:b3:36:b0:45:24:
fa:4e:87:5b:22:38:9c:4b:66:87:35:c6:f6:d2:be:
fb:46:bd:db:24:11:95:0c:70:9a:f0:a1:8f:35:bc:
42:b1:c3:cd:91:26:14:f5:51:6b:f3:fa:16:ef:4a:
73:c8:2b:cb:76:06:ee:ff:5f:7a:ad:49:9a:33:7d:
a3:74:cb:b6:a8:2d:63:80:85:13:33:5b:21:f6:af:
94:8e:05:bd:f5:1e:f3:8e:8d:7b:66:3f:47:44:12:
72:16:29:15:2f:80:a8:83:29:36:06:ec:a1:00:63:
d6:ec:13:73:99:02:70:04:d0:fe:99:cc:c3:1e:71:
8c:ad:75:b0:3a:80:8d:eb:2f:be:0f:0a:00:42:55:
ff:cf:4a:ad:9f:dd:cd:e2:f6:fe:fd:a3:79:ac:e7:
4e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:B7:4E:30:86:EF:73:98:61:32:34:A0:E4:50:51:08:22:5D:AB:CE
X509v3 Authority Key Identifier:
keyid:D5:04:E6:41:E5:5A:48:AE:E0:14:1E:2C:0D:26:22:71:02:CA:A6:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QTmQeVaSK7gFB4sDSYicQLKptQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1bdOMIbvc5hhMjSg5FBRCCJdq84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.254.94.0/23
80.251.112.0/20
Signature Algorithm: sha256WithRSAEncryption
d8:40:56:a4:fa:d1:de:53:9d:39:40:1c:3d:00:bd:94:ed:08:
87:2a:94:c8:4c:f3:89:ba:48:81:cd:ca:3b:01:6a:8e:c3:73:
3b:8c:6f:e9:fd:ad:7b:9e:ca:f8:21:9b:75:61:20:ce:22:f3:
a9:39:a6:e1:94:e4:c2:4c:8b:b0:b0:85:0c:04:be:5f:ef:43:
9c:ca:6c:a2:57:1b:65:05:55:f7:08:81:6a:4a:10:2b:89:d6:
37:90:9e:98:19:24:90:e0:bf:02:2c:38:ac:ae:ed:80:79:d0:
93:71:0a:5c:f4:ea:60:a2:53:58:0a:87:9d:9c:8d:3a:4c:0d:
10:3f:85:80:07:e9:50:4e:e4:fd:ab:b2:ae:c3:dc:89:0f:19:
04:f1:8c:ca:30:f5:45:49:1d:ca:b7:f0:44:86:31:dc:14:9a:
b6:fc:5d:eb:54:90:f9:f6:84:cd:70:f6:11:33:d5:bc:4a:c5:
03:4e:0c:04:f3:0e:a5:38:a8:9d:fb:d1:a8:5a:e9:f6:48:d4:
ea:ae:9a:f5:bc:7b:81:bf:0f:de:1d:49:9e:77:27:f1:36:3b:
75:ce:62:93:8b:68:24:f1:69:a3:a0:31:d9:53:9a:d0:1f:fd:
1b:37:36:a6:49:7d:62:9a:fb:b0:78:4e:b9:4c:e0:c4:d8:d8:
6c:ab:33:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 06:25:38 2024 by rpki-client on console-fra.rpki-client.org