Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/76YYDx6aCGkf8LhSTJix53Pj2Fo.roa
File: 76YYDx6aCGkf8LhSTJix53Pj2Fo.roa (raw, json)
Hash identifier: DoGaSGOpE/Q5hM7azaZ3r4Az/wCl+Y+TC1UjSkss3g0=
Subject key identifier: EF:A6:18:0F:1E:9A:08:69:1F:F0:B8:52:4C:98:B1:E7:73:E3:D8:5A
Certificate issuer: /CN=7c3c39d1899e699bf5177418ee381489edff4380
Certificate serial: 018CC86F691CF891121AA2E2DD4B546341A5
Authority key identifier: 7C:3C:39:D1:89:9E:69:9B:F5:17:74:18:EE:38:14:89:ED:FF:43:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fDw50YmeaZv1F3QY7jgUie3_Q4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/76YYDx6aCGkf8LhSTJix53Pj2Fo.roa
Signing time: Tue 02 Jan 2024 04:29:53 +0000
ROA not before: Tue 02 Jan 2024 04:29:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212238
IP address blocks: 185.18.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/fDw50YmeaZv1F3QY7jgUie3_Q4A.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/fDw50YmeaZv1F3QY7jgUie3_Q4A.mft
rsync://rpki.ripe.net/repository/DEFAULT/fDw50YmeaZv1F3QY7jgUie3_Q4A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 20:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:69:1c:f8:91:12:1a:a2:e2:dd:4b:54:63:41:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3c39d1899e699bf5177418ee381489edff4380
Validity
Not Before: Jan 2 04:29:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=efa6180f1e9a08691ff0b8524c98b1e773e3d85a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e4:5d:c5:63:fa:9b:6f:e1:94:17:00:26:e9:
7a:13:44:a0:3f:28:57:70:08:8d:e7:04:65:52:d4:
91:59:e9:ce:5a:e5:86:ca:b8:fc:c5:88:28:06:04:
29:8b:14:d4:c7:4c:91:81:b4:1a:de:41:46:13:09:
d3:29:71:27:d0:b6:dc:e9:b8:a1:b6:f8:cb:19:bc:
3e:75:df:7c:fa:84:35:62:ed:91:57:68:21:0d:cc:
81:47:60:44:eb:d9:a7:b3:44:17:0c:37:09:3a:41:
66:a6:ed:bc:19:82:2f:3f:35:9f:a6:27:29:8e:1e:
35:dc:24:ea:22:12:8e:a6:22:37:52:b2:f0:41:11:
b0:2b:ff:7a:f1:24:9a:d6:6a:27:22:d7:fe:0c:e8:
f8:44:3c:58:e3:12:b7:9f:1a:2c:34:85:99:83:1b:
ef:1b:03:77:90:aa:5b:8b:f2:e4:6a:8c:8c:b3:31:
ab:aa:51:4e:22:c8:71:8a:38:ed:65:f5:9a:06:8a:
8c:f8:50:b0:51:8a:5e:d6:3a:a2:1f:0c:f6:86:6e:
ce:ae:bc:fe:0b:98:12:3e:cf:91:62:c2:b3:0d:40:
52:2e:d8:6b:8b:58:51:0a:d1:d2:74:aa:19:fd:2b:
16:06:48:b5:1b:68:fc:dd:2c:57:76:b0:b4:f0:03:
16:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:A6:18:0F:1E:9A:08:69:1F:F0:B8:52:4C:98:B1:E7:73:E3:D8:5A
X509v3 Authority Key Identifier:
keyid:7C:3C:39:D1:89:9E:69:9B:F5:17:74:18:EE:38:14:89:ED:FF:43:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fDw50YmeaZv1F3QY7jgUie3_Q4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/76YYDx6aCGkf8LhSTJix53Pj2Fo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/fDw50YmeaZv1F3QY7jgUie3_Q4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.18.123.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:b6:a8:09:ff:87:74:b8:7d:e4:6d:fe:1d:da:69:ef:a6:31:
68:2b:ab:48:cb:34:80:3e:db:a2:e3:67:fe:fc:a4:af:fa:5a:
f9:d2:ce:7a:92:94:c9:f8:9f:0d:e0:66:2c:76:0a:be:67:a8:
8b:29:16:b3:00:16:f8:b7:04:d2:78:d5:c5:f2:90:2f:6b:c7:
9d:18:73:10:ff:b5:32:90:4d:9b:ab:f9:6f:88:71:01:eb:b9:
d3:8c:6f:c2:dd:0a:40:59:58:10:36:4a:48:5e:93:0a:50:aa:
5e:35:a7:3a:a1:18:32:af:45:e4:4b:09:08:70:40:2c:19:e5:
13:30:99:77:a9:69:12:18:78:63:7a:96:17:f9:72:da:bb:0b:
00:30:76:8d:a0:a2:df:ad:0a:a7:cf:32:ee:d8:a3:19:57:8d:
dd:72:c5:89:c6:72:f3:94:78:c2:e5:af:7c:ba:99:6f:01:bc:
92:8d:da:80:34:b2:07:56:e9:84:9e:1c:53:d0:d1:3e:3d:19:
8b:28:5c:35:a1:8a:05:9d:21:2a:a2:7d:b0:d7:76:dc:74:88:
84:01:39:2a:99:a4:d4:02:e0:9a:2c:8d:cd:2b:0c:83:eb:04:
b8:1b:12:d6:99:86:58:17:97:54:83:59:1f:e2:b0:fc:1f:fd:
9e:07:95:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 05:38:10 2024 by rpki-client on console-ams.rpki-client.org