Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/ctlkTtpb0haPEkETppD6DJpzTKQ.roa
File: ctlkTtpb0haPEkETppD6DJpzTKQ.roa (raw, json)
Hash identifier: iYJxJjf3UcU/gXJ50HuYOuSR9EGL5Zri+fVbjB5F3sU=
Subject key identifier: 72:D9:64:4E:DA:5B:D2:16:8F:12:41:13:A6:90:FA:0C:9A:73:4C:A4
Certificate issuer: /CN=7c3c39d1899e699bf5177418ee381489edff4380
Certificate serial: 018CC86F6763CA64DC85CCC00DCFDEA820C9
Authority key identifier: 7C:3C:39:D1:89:9E:69:9B:F5:17:74:18:EE:38:14:89:ED:FF:43:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fDw50YmeaZv1F3QY7jgUie3_Q4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/ctlkTtpb0haPEkETppD6DJpzTKQ.roa
Signing time: Tue 02 Jan 2024 04:29:53 +0000
ROA not before: Tue 02 Jan 2024 04:29:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 19437
IP address blocks: 185.18.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/fDw50YmeaZv1F3QY7jgUie3_Q4A.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/fDw50YmeaZv1F3QY7jgUie3_Q4A.mft
rsync://rpki.ripe.net/repository/DEFAULT/fDw50YmeaZv1F3QY7jgUie3_Q4A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:67:63:ca:64:dc:85:cc:c0:0d:cf:de:a8:20:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3c39d1899e699bf5177418ee381489edff4380
Validity
Not Before: Jan 2 04:29:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=72d9644eda5bd2168f124113a690fa0c9a734ca4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:17:aa:82:58:f2:42:0c:ca:89:87:c7:a0:b6:
a3:57:12:5f:61:70:f2:86:32:10:a6:8b:d5:1e:60:
06:89:7d:9e:6d:bb:42:2b:d7:da:81:12:d2:c6:86:
01:54:b3:9c:1a:8b:73:41:b9:75:25:65:60:71:64:
1d:93:54:33:86:a3:2f:8e:67:5a:eb:d1:dc:d8:2e:
78:f6:6a:c6:03:f6:fc:53:40:7c:5b:05:2f:73:de:
11:f9:5d:eb:dc:fd:1d:db:f6:f4:2d:d8:86:b0:c8:
83:f2:80:dd:2e:2f:d2:c0:88:5c:62:cf:01:68:10:
8d:71:7e:38:74:c8:02:aa:0d:91:58:c8:54:ce:d3:
8c:0a:1c:28:d8:59:b2:1b:34:83:63:ac:5a:05:ee:
2b:45:8b:8b:ee:23:88:2d:dd:e3:67:f3:13:86:0d:
cf:65:4c:6f:8e:b4:9f:c6:60:d3:ae:8b:7a:4f:05:
4f:04:9c:d6:a5:7a:bb:4f:46:b0:2b:d1:77:75:ae:
1a:ce:8b:49:95:8f:e3:eb:b2:cf:fb:0f:a4:24:50:
84:c3:86:da:db:cb:c3:5f:57:6c:15:85:72:92:9f:
30:29:aa:84:9c:eb:0e:87:9b:f0:48:c4:a2:e9:12:
cf:75:21:8a:74:aa:5f:8e:0d:77:6d:1d:c6:12:7d:
6c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:D9:64:4E:DA:5B:D2:16:8F:12:41:13:A6:90:FA:0C:9A:73:4C:A4
X509v3 Authority Key Identifier:
keyid:7C:3C:39:D1:89:9E:69:9B:F5:17:74:18:EE:38:14:89:ED:FF:43:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fDw50YmeaZv1F3QY7jgUie3_Q4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/ctlkTtpb0haPEkETppD6DJpzTKQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/fDw50YmeaZv1F3QY7jgUie3_Q4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.18.122.0/24
Signature Algorithm: sha256WithRSAEncryption
01:13:d1:31:e5:f2:c6:11:b6:bf:a4:39:da:73:be:36:5d:10:
8f:77:b6:86:d4:a7:39:70:d7:f5:1f:fc:93:57:ec:88:75:fb:
72:57:72:fe:ea:ec:ad:7c:1c:fc:30:d4:98:d1:06:70:02:1f:
3f:d1:4c:f5:85:86:de:57:3d:a9:17:87:b8:71:f1:59:0b:de:
a9:1e:8e:2d:07:42:a1:93:d1:5c:b2:fa:64:d1:7c:57:a7:a3:
1a:6d:9d:0c:fa:81:61:2e:46:9a:41:11:e3:52:25:f5:16:3c:
67:21:dd:a6:17:59:e0:62:ac:78:dc:54:1b:ee:eb:75:7b:ad:
e5:b5:ca:f3:73:f3:12:36:90:a1:23:ff:45:cc:1a:4b:58:e3:
36:10:e6:4a:f0:5b:fb:0f:03:ee:20:6f:a9:46:e5:64:0b:0a:
90:3a:51:b8:09:01:86:15:b6:89:be:dc:a8:dc:fc:f4:44:0e:
27:b9:20:8e:21:d5:15:d2:cf:2c:d5:4b:c5:31:3c:23:d7:07:
15:bf:99:ef:72:93:0a:02:63:08:40:84:30:1d:72:6f:75:dc:
e8:8c:b2:d3:d2:4e:1a:94:c3:03:5e:3f:60:92:fe:14:dc:66:
4b:b7:00:f5:5e:c0:82:0f:d6:a3:19:ff:9f:4c:53:06:c8:34:
90:39:cd:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:47:19 2024 by rpki-client on console-ams.rpki-client.org