Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/c9c770-9e8f-4008-b7f7-c550fa211fb7/1/V3ogYqfUbQF1tGO2GAP1GFBFRtw.roa
File: V3ogYqfUbQF1tGO2GAP1GFBFRtw.roa (raw, json)
Hash identifier: 4xCHhcsainWu+kAp13rZxHbhzEYJUNwBy9GA7rgoiYE=
Subject key identifier: 57:7A:20:62:A7:D4:6D:01:75:B4:63:B6:18:03:F5:18:50:45:46:DC
Certificate issuer: /CN=425439b0ca7f14daa9b61b11bd17bdcc1ba7386c
Certificate serial: 018D5C512A5D8351D07C724A4F85C0F24140
Authority key identifier: 42:54:39:B0:CA:7F:14:DA:A9:B6:1B:11:BD:17:BD:CC:1B:A7:38:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QlQ5sMp_FNqpthsRvRe9zBunOGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/c9c770-9e8f-4008-b7f7-c550fa211fb7/1/V3ogYqfUbQF1tGO2GAP1GFBFRtw.roa
Signing time: Tue 30 Jan 2024 21:40:39 +0000
ROA not before: Tue 30 Jan 2024 21:40:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 19905
IP address blocks: 185.234.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/c9c770-9e8f-4008-b7f7-c550fa211fb7/1/QlQ5sMp_FNqpthsRvRe9zBunOGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/c9c770-9e8f-4008-b7f7-c550fa211fb7/1/QlQ5sMp_FNqpthsRvRe9zBunOGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/QlQ5sMp_FNqpthsRvRe9zBunOGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:5c:51:2a:5d:83:51:d0:7c:72:4a:4f:85:c0:f2:41:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=425439b0ca7f14daa9b61b11bd17bdcc1ba7386c
Validity
Not Before: Jan 30 21:40:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=577a2062a7d46d0175b463b61803f518504546dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9d:f1:e8:33:00:20:e8:61:c2:df:71:3e:45:
36:cf:be:ad:13:5d:7f:00:e2:11:c9:52:43:0e:7f:
59:65:96:ef:e9:a9:2f:c1:2f:81:2c:b5:2d:a6:6d:
27:0b:be:95:a0:31:39:54:e8:fc:0b:04:70:94:cc:
04:cb:3d:5c:8a:a5:a3:e1:bd:45:16:8a:75:5b:82:
72:24:5c:2b:a7:95:97:7f:12:b2:9c:a8:af:14:8a:
59:d1:3f:62:80:0d:a0:da:d2:18:d3:e9:69:43:26:
dd:6b:81:e9:1f:e0:42:a0:26:69:4d:93:54:af:9f:
36:05:50:cc:f1:a0:0a:a9:fa:77:86:86:75:49:3f:
71:cf:58:e2:4c:fb:a5:e7:07:0b:ec:96:73:58:f7:
fa:fa:0c:97:57:52:c2:51:c3:ec:df:64:bc:67:7a:
b4:a4:5c:e3:c5:ef:6a:9e:94:18:29:fa:9e:c4:c6:
0e:be:b1:d2:d3:9d:55:aa:ff:6b:bd:6c:63:65:f2:
56:73:3e:4f:56:9b:3e:47:02:d4:20:d5:7d:63:18:
c4:e8:7d:13:7b:2a:fe:14:c4:94:1e:83:92:fb:99:
8e:9b:a0:6e:dd:30:9f:f1:cd:74:51:4c:80:4c:e3:
8d:ba:af:1c:70:c0:5c:ad:f7:26:a3:bc:5e:7c:ec:
35:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:7A:20:62:A7:D4:6D:01:75:B4:63:B6:18:03:F5:18:50:45:46:DC
X509v3 Authority Key Identifier:
keyid:42:54:39:B0:CA:7F:14:DA:A9:B6:1B:11:BD:17:BD:CC:1B:A7:38:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QlQ5sMp_FNqpthsRvRe9zBunOGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c9c770-9e8f-4008-b7f7-c550fa211fb7/1/V3ogYqfUbQF1tGO2GAP1GFBFRtw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c9c770-9e8f-4008-b7f7-c550fa211fb7/1/QlQ5sMp_FNqpthsRvRe9zBunOGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.234.103.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:d4:57:80:f5:df:76:e2:16:1c:02:05:25:10:d5:16:92:2f:
60:20:82:1f:e4:22:7d:11:9e:cf:bd:8a:89:34:d4:ef:b4:50:
cc:49:6a:89:2c:30:af:b1:61:8e:fa:5d:49:a6:c3:74:e4:1d:
77:a7:15:37:5d:e9:21:1a:5b:11:76:d1:d4:b2:c7:c5:bd:19:
31:fb:af:0f:d3:29:1a:97:55:3a:21:5f:c4:01:7e:26:2a:ab:
be:70:f7:91:94:fe:8e:08:74:31:8e:6d:ee:00:ed:84:a4:a3:
0e:4b:cd:e5:8d:a1:98:5a:50:42:69:06:eb:95:88:00:38:ca:
e8:8d:85:6b:8b:70:cf:6e:12:fe:39:10:6a:b0:cf:3e:a3:c2:
d0:13:4b:f7:c0:4b:c6:6a:e5:6b:fd:87:2e:5f:46:61:dc:67:
c4:ad:ea:6e:5e:5c:ea:17:7c:ed:3a:8d:eb:56:71:76:84:db:
35:dc:6a:31:7c:cc:d8:6f:29:c2:6c:61:44:de:ff:95:c4:58:
42:9d:f5:2d:aa:e3:ac:0b:5f:2a:15:f4:30:b0:f6:0a:ef:10:
78:e0:aa:a6:8e:e0:00:85:88:f5:34:d5:16:92:6c:19:7d:35:
f1:67:64:e1:a1:1a:d0:8d:41:ed:50:e2:3c:9b:7f:8c:df:1b:
3e:a0:01:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:06:53 2024 by rpki-client on console-fra.rpki-client.org