Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/ffc623-b6f6-4ffc-9a11-a74c06c232d6/1/usfPh9P0zYz-Sm9XpaT8pYdEBVQ.roa
File: usfPh9P0zYz-Sm9XpaT8pYdEBVQ.roa (raw, json)
Hash identifier: ggvCQk8o7UEnHzJK9OeZy3Bn+NvRKpGTbjVuf8NSMMI=
Subject key identifier: BA:C7:CF:87:D3:F4:CD:8C:FE:4A:6F:57:A5:A4:FC:A5:87:44:05:54
Certificate issuer: /CN=4b6cff7467533410b9fda2f700208c1a8f0c0423
Certificate serial: 019299C747BE920B22E8F59470503A8BA2EE
Authority key identifier: 4B:6C:FF:74:67:53:34:10:B9:FD:A2:F7:00:20:8C:1A:8F:0C:04:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S2z_dGdTNBC5_aL3ACCMGo8MBCM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/ffc623-b6f6-4ffc-9a11-a74c06c232d6/1/usfPh9P0zYz-Sm9XpaT8pYdEBVQ.roa
Signing time: Thu 17 Oct 2024 09:20:27 +0000
ROA not before: Thu 17 Oct 2024 09:20:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208851
IP address blocks: 185.142.21.0/24 maxlen: 24
185.142.22.0/24 maxlen: 24
185.142.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/ffc623-b6f6-4ffc-9a11-a74c06c232d6/1/S2z_dGdTNBC5_aL3ACCMGo8MBCM.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/ffc623-b6f6-4ffc-9a11-a74c06c232d6/1/S2z_dGdTNBC5_aL3ACCMGo8MBCM.mft
rsync://rpki.ripe.net/repository/DEFAULT/S2z_dGdTNBC5_aL3ACCMGo8MBCM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 03:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:99:c7:47:be:92:0b:22:e8:f5:94:70:50:3a:8b:a2:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b6cff7467533410b9fda2f700208c1a8f0c0423
Validity
Not Before: Oct 17 09:20:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bac7cf87d3f4cd8cfe4a6f57a5a4fca587440554
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:5d:20:2f:6d:18:86:22:d2:6d:03:f9:c2:3e:
15:1e:38:f0:1b:e8:16:a7:c6:b5:b8:fe:52:c2:0b:
b0:d3:97:40:dd:2a:34:ed:19:15:62:e9:86:0c:4b:
38:6e:f8:94:06:38:c8:8f:1d:b3:8d:1b:25:bc:e0:
01:95:c4:0f:4e:f6:e7:38:d5:40:44:dc:f6:b6:52:
88:0a:6b:95:8f:e7:3f:89:cf:d9:3c:1f:05:a2:5b:
ba:d5:6e:fe:1d:45:38:63:2e:ba:3e:61:9f:5c:ac:
6c:c8:fb:30:bb:78:5d:95:6c:53:05:55:99:75:3f:
84:1f:e7:93:12:6b:36:1f:b9:e1:12:e3:5c:db:01:
a6:39:3e:b9:76:18:83:7a:a2:45:9d:67:cf:23:78:
b3:c7:31:7d:45:70:d6:47:29:a9:ae:89:6b:a0:9c:
c1:97:f6:1c:26:28:53:59:ea:e8:44:05:ce:ee:8e:
19:6d:ed:78:67:5d:ac:29:c0:23:c2:b8:dc:d6:de:
99:61:21:20:37:f0:a5:c5:ea:31:5e:1a:5a:fc:09:
a2:83:de:d7:ef:02:69:57:1e:df:e4:81:a7:40:c2:
25:3b:57:78:70:5e:68:2a:4d:52:ee:36:93:16:c5:
ab:9d:10:a2:e4:16:02:9c:5a:87:07:64:b4:fe:59:
08:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:C7:CF:87:D3:F4:CD:8C:FE:4A:6F:57:A5:A4:FC:A5:87:44:05:54
X509v3 Authority Key Identifier:
keyid:4B:6C:FF:74:67:53:34:10:B9:FD:A2:F7:00:20:8C:1A:8F:0C:04:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S2z_dGdTNBC5_aL3ACCMGo8MBCM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/ffc623-b6f6-4ffc-9a11-a74c06c232d6/1/usfPh9P0zYz-Sm9XpaT8pYdEBVQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/ffc623-b6f6-4ffc-9a11-a74c06c232d6/1/S2z_dGdTNBC5_aL3ACCMGo8MBCM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.142.21.0-185.142.23.255
Signature Algorithm: sha256WithRSAEncryption
c2:68:ad:c3:7e:a5:39:99:dc:ff:bf:6f:67:88:81:34:cf:0f:
ce:af:b5:de:22:23:92:71:08:5e:8e:46:30:16:28:de:67:38:
f3:b0:6a:99:72:ae:6e:eb:2c:bc:bc:99:ea:82:c3:a5:7e:bf:
45:18:de:f2:f4:f1:c9:54:d8:be:b8:0e:e4:a1:6e:f8:69:c2:
ff:77:24:f0:14:47:32:b9:62:c3:0a:10:1f:b2:e2:15:03:2b:
f5:08:91:6b:52:b8:a8:54:bf:20:ad:08:e4:5b:e0:3b:44:ef:
19:36:5f:07:d0:2d:b0:89:d5:1a:ec:2d:4b:a4:55:d5:54:51:
b2:89:69:05:53:06:87:90:9b:ca:19:f5:30:a7:43:33:ca:37:
da:a0:f4:02:d9:b4:74:a8:72:d5:84:4c:20:eb:64:5d:f5:27:
5d:e1:8e:c6:df:80:c4:35:25:1a:56:5c:21:b5:ae:bb:9c:55:
df:69:3e:63:0d:9a:fd:37:6e:b9:b4:20:57:ce:9a:3b:52:f8:
df:dc:56:10:54:46:17:2c:e7:20:b7:8a:e0:bf:a0:f1:48:74:
83:5c:c2:fd:1c:90:a3:bb:27:7a:b9:24:2a:e4:e2:bd:55:f9:
cd:40:b8:7e:f8:76:49:12:dd:60:f5:64:76:eb:00:6a:8e:a4:
79:ad:af:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:55:34 2024 by rpki-client on console-fra.rpki-client.org