Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/_5OV7Balrz66uhUswws9fG8M2DU.roa
File: _5OV7Balrz66uhUswws9fG8M2DU.roa (raw, json)
Hash identifier: MByHNzelCCbyYvTI2j1wadVKiWo9jT7cXV+sLU1W5Wc=
Subject key identifier: FF:93:95:EC:16:A5:AF:3E:BA:BA:15:2C:C3:0B:3D:7C:6F:0C:D8:35
Certificate issuer: /CN=49ee1194bd81d1946c39f10f7fdfdf22d1a03112
Certificate serial: 018CC8DE77872014C357FA0E3F8963B9931E
Authority key identifier: 49:EE:11:94:BD:81:D1:94:6C:39:F1:0F:7F:DF:DF:22:D1:A0:31:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Se4RlL2B0ZRsOfEPf9_fItGgMRI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/_5OV7Balrz66uhUswws9fG8M2DU.roa
Signing time: Tue 02 Jan 2024 06:31:11 +0000
ROA not before: Tue 02 Jan 2024 06:31:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48029
IP address blocks: 185.208.76.0/23 maxlen: 23
185.208.77.0/24 maxlen: 24
185.208.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/Se4RlL2B0ZRsOfEPf9_fItGgMRI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/Se4RlL2B0ZRsOfEPf9_fItGgMRI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Se4RlL2B0ZRsOfEPf9_fItGgMRI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 01:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:77:87:20:14:c3:57:fa:0e:3f:89:63:b9:93:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49ee1194bd81d1946c39f10f7fdfdf22d1a03112
Validity
Not Before: Jan 2 06:31:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ff9395ec16a5af3ebaba152cc30b3d7c6f0cd835
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:9c:c6:4a:f6:f0:49:30:3a:df:66:b2:0c:4c:
08:68:39:04:2d:9b:af:9b:f3:7b:f8:13:c0:c0:9c:
67:a1:fa:d9:6f:e1:08:ba:a9:86:65:d3:a3:23:69:
be:56:0a:51:62:f7:0f:aa:7a:f2:d5:b7:42:60:00:
0f:ae:5e:06:71:c9:3a:22:d9:e4:3d:d0:d9:bc:dc:
ef:b2:7f:6d:b8:1d:44:61:cb:33:da:00:34:3c:c9:
43:b0:48:59:a1:22:2b:2f:dd:e9:fe:23:af:38:a1:
d3:7b:c0:ac:a0:6c:0f:e0:94:65:c7:2b:14:77:79:
6a:ff:f0:94:a2:52:f8:5e:bc:08:41:98:c7:92:dd:
ae:9d:13:96:87:1c:35:3d:0a:3c:2c:4c:85:65:3f:
23:d9:11:9d:ba:d0:4c:b0:6d:f7:b6:a1:58:6b:05:
01:5d:f0:d9:6c:4b:85:c3:63:f8:21:da:af:af:01:
3c:8e:8c:19:05:6a:58:ec:11:ef:50:36:6c:41:99:
2e:0c:e4:9c:ce:4d:2e:05:f4:e1:f0:72:07:6c:e9:
b7:1b:7c:a2:ec:ee:96:0f:e4:0f:1f:7c:5c:c7:23:
ab:72:08:99:ba:78:59:3d:d1:e4:8a:2b:c9:c4:bb:
51:37:60:29:5b:40:2c:37:d7:13:92:e9:6d:e2:92:
97:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:93:95:EC:16:A5:AF:3E:BA:BA:15:2C:C3:0B:3D:7C:6F:0C:D8:35
X509v3 Authority Key Identifier:
keyid:49:EE:11:94:BD:81:D1:94:6C:39:F1:0F:7F:DF:DF:22:D1:A0:31:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Se4RlL2B0ZRsOfEPf9_fItGgMRI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/_5OV7Balrz66uhUswws9fG8M2DU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/Se4RlL2B0ZRsOfEPf9_fItGgMRI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.208.76.0/23
Signature Algorithm: sha256WithRSAEncryption
64:08:ca:a0:94:9b:f8:e0:59:6c:8d:d1:2d:dd:c6:f4:91:35:
5b:10:a4:4f:42:1a:10:76:7b:0e:47:21:64:1e:06:65:d0:bf:
5d:1f:54:95:bf:78:4e:e3:ba:39:6f:2c:12:48:7c:8f:9a:8a:
0b:24:22:f5:3e:a5:2a:39:8e:5f:b0:1a:12:c8:47:b2:e2:c2:
0b:35:41:50:0c:d9:01:93:54:84:96:3f:77:59:7c:61:72:7f:
65:c8:24:aa:78:44:10:90:e5:7e:45:c6:1f:35:ac:a1:bf:f8:
05:e0:f1:f0:b2:22:f7:01:29:73:34:0f:13:c1:a4:d4:a7:0b:
f7:03:20:6c:97:c8:1b:b7:c4:1f:e0:bd:2c:23:b6:7c:95:15:
e7:6f:9a:ec:ba:62:c4:9b:90:b1:59:39:52:c3:af:5f:b6:c7:
ed:ea:c7:1e:78:93:2a:0d:3e:7d:f1:d5:a1:e6:9d:e6:cf:96:
3f:4a:9a:f6:ee:f4:95:d8:57:96:b6:6f:99:a2:99:5d:de:0a:
e5:7e:f1:14:b8:84:1a:cf:bb:50:5e:05:b9:11:43:34:9b:88:
d9:8a:26:96:0b:75:a5:ed:ae:48:af:74:cb:9d:67:74:0b:3e:
eb:c3:23:aa:92:32:30:58:c1:63:0c:57:13:7a:06:5a:a5:bd:
e1:40:84:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 05:29:34 2024 by rpki-client on console-fra.rpki-client.org