Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/ClhpOPRAZ_yIe33GtzXG6BLmkOY.roa
File: ClhpOPRAZ_yIe33GtzXG6BLmkOY.roa (raw, json)
Hash identifier: rGv5C8vC0kKvWMikjfrYYlr24UvgiA4pcoa0JT4o5GA=
Subject key identifier: 0A:58:69:38:F4:40:67:FC:88:7B:7D:C6:B7:35:C6:E8:12:E6:90:E6
Certificate issuer: /CN=5f7da568ad027b9e249c13e223d322769881a29f
Certificate serial: 018CC49322C1E2E72F4EFAAC55922EF4C0ED
Authority key identifier: 5F:7D:A5:68:AD:02:7B:9E:24:9C:13:E2:23:D3:22:76:98:81:A2:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X32laK0Ce54knBPiI9MidpiBop8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/ClhpOPRAZ_yIe33GtzXG6BLmkOY.roa
Signing time: Mon 01 Jan 2024 10:30:26 +0000
ROA not before: Mon 01 Jan 2024 10:30:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204692
IP address blocks: 185.243.28.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.mft
rsync://rpki.ripe.net/repository/DEFAULT/X32laK0Ce54knBPiI9MidpiBop8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:22:c1:e2:e7:2f:4e:fa:ac:55:92:2e:f4:c0:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f7da568ad027b9e249c13e223d322769881a29f
Validity
Not Before: Jan 1 10:30:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0a586938f44067fc887b7dc6b735c6e812e690e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:db:81:24:82:f2:f2:e3:fb:fc:f6:60:2d:28:
6c:81:61:55:9d:de:ad:50:3c:18:c4:28:f1:66:e4:
ba:78:24:13:47:bb:ec:b3:91:7b:a7:54:61:30:e6:
74:2d:a1:09:08:19:0f:c5:f9:de:53:25:c6:28:59:
fd:f2:af:5d:5d:ce:3a:99:c6:aa:20:00:d8:62:e3:
30:40:88:5f:5a:17:6e:a1:0a:7f:01:dd:a8:08:00:
f3:f3:1c:f8:4b:cc:98:a2:b4:e0:a5:b9:42:83:57:
38:e9:53:00:57:5f:78:31:16:24:f4:c9:fa:fe:95:
aa:e7:96:c3:cd:2f:a0:b3:bc:6a:d3:7a:e1:46:ec:
c2:f1:84:99:fc:c2:eb:f7:80:6c:87:bd:b3:8a:26:
83:13:b1:d6:58:2f:88:30:be:89:18:e7:26:d1:55:
3e:ce:c1:99:4e:7d:5e:a5:1b:d8:9c:e0:11:67:9b:
db:f6:88:a8:f0:26:fc:35:6e:f4:b7:e8:b3:d0:c6:
1c:0d:8b:fc:62:84:32:58:49:d8:1d:06:26:75:e2:
20:63:76:e0:06:b6:3c:7a:c4:8e:06:71:08:3a:4f:
e1:2d:44:11:27:40:4d:e4:d8:a5:06:4c:01:48:fb:
80:fc:2f:9e:d7:b6:72:fc:96:71:73:ca:bc:af:1c:
23:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:58:69:38:F4:40:67:FC:88:7B:7D:C6:B7:35:C6:E8:12:E6:90:E6
X509v3 Authority Key Identifier:
keyid:5F:7D:A5:68:AD:02:7B:9E:24:9C:13:E2:23:D3:22:76:98:81:A2:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X32laK0Ce54knBPiI9MidpiBop8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/ClhpOPRAZ_yIe33GtzXG6BLmkOY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.243.28.0/22
Signature Algorithm: sha256WithRSAEncryption
23:30:75:ac:bc:d3:3a:63:37:a9:00:b8:27:c3:15:08:2f:9a:
67:2d:68:7d:b2:bc:f2:99:28:ce:0c:45:58:c5:07:71:8a:1b:
1b:f3:ae:6d:d5:84:49:67:94:6a:f5:95:7e:ee:aa:0e:8b:60:
3c:3a:99:7b:7b:e5:99:d8:3f:f3:3b:ad:be:af:95:12:06:58:
af:3b:7f:e7:46:32:2d:8d:5f:4b:9a:7b:3b:77:74:7d:b6:4f:
f9:66:e3:06:f5:22:d3:19:3e:0a:3e:e3:90:41:86:c7:6e:e9:
99:ae:5d:61:c4:14:bb:cc:88:c0:72:0e:ae:6b:ea:07:ea:b8:
9e:0d:25:f6:56:a5:3a:8e:ba:9d:dd:72:0f:69:2c:63:05:aa:
9e:50:4b:f2:66:5f:99:1b:b2:be:62:55:96:e0:bd:65:c8:4b:
86:4b:db:da:fd:25:e4:9f:60:d7:0d:9d:4d:b3:96:53:81:8c:
3b:7d:34:3d:1a:f5:ae:f3:cf:fe:bc:7f:0b:82:04:d9:bb:a4:
47:6d:84:78:81:14:6a:06:92:98:9d:7a:bb:e1:f7:8c:9e:19:
3f:06:55:ae:f9:3e:a8:15:5b:3f:f9:39:52:17:9f:a1:f6:84:
a7:7f:e3:83:72:ec:3d:39:22:58:67:91:26:38:ae:22:a1:ed:
f1:41:65:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 11:49:20 2024 by rpki-client on console-fra.rpki-client.org