Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/1-dBWc-gjB6UFJ9qKVrHu2ayToSs.roa
File: 1-dBWc-gjB6UFJ9qKVrHu2ayToSs.roa (raw, json)
Hash identifier: B+t4UKZ5yoCDLEwgMpcdYCeJmu6Mxq0A3H26XanQ8WM=
Subject key identifier: F9:D0:56:73:E8:23:07:A5:05:27:DA:8A:56:B1:EE:D9:AC:93:A1:2B
Certificate issuer: /CN=345ae646ea34ad2688aca2fdd1a6f3340356495e
Certificate serial: 018CC56E180C25AEC580EF3A4678076BF3C7
Authority key identifier: 34:5A:E6:46:EA:34:AD:26:88:AC:A2:FD:D1:A6:F3:34:03:56:49:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NFrmRuo0rSaIrKL90abzNANWSV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/1-dBWc-gjB6UFJ9qKVrHu2ayToSs.roa
Signing time: Mon 01 Jan 2024 14:29:35 +0000
ROA not before: Mon 01 Jan 2024 14:29:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50300
IP address blocks: 185.120.172.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NFrmRuo0rSaIrKL90abzNANWSV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 11:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:18:0c:25:ae:c5:80:ef:3a:46:78:07:6b:f3:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=345ae646ea34ad2688aca2fdd1a6f3340356495e
Validity
Not Before: Jan 1 14:29:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f9d05673e82307a50527da8a56b1eed9ac93a12b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:38:5c:18:aa:b2:70:65:50:c6:34:8c:7e:8e:
b1:f5:c5:50:07:7c:63:75:e4:96:b1:d2:28:1f:19:
70:39:b8:3d:b4:99:78:1d:1e:98:37:c2:9b:86:a7:
48:4c:3e:6b:47:38:44:df:80:80:53:88:79:e9:92:
85:1c:57:60:48:b0:9d:b1:ed:a4:0c:5b:65:65:6b:
02:ff:68:6b:34:a1:8e:3b:94:9b:ff:d7:5b:22:b7:
fd:0c:47:d4:ba:29:15:45:3c:47:9d:98:fb:e4:e0:
d0:b5:49:79:10:e0:c4:a5:c0:30:ef:f9:b9:b4:63:
7f:e8:bb:fe:1d:5a:17:16:28:89:0c:95:58:e1:31:
72:56:54:8d:ad:87:85:35:c5:f1:f5:0f:3d:65:10:
c3:62:b9:8f:aa:4f:35:16:2c:21:43:4d:b8:ee:e0:
03:82:7b:85:9b:6a:2a:cf:fc:56:e8:1e:7e:88:50:
c5:f6:df:44:63:46:7a:30:80:9b:e7:94:4f:46:99:
08:82:54:5d:ce:e8:97:76:63:01:68:65:3d:a3:e9:
c2:55:64:f4:c0:0d:08:2e:19:a9:e7:9d:6d:cd:f6:
ea:e8:14:2a:75:4f:2d:11:99:41:2b:1d:2c:fe:b7:
84:ce:12:24:6f:4d:8a:de:69:f6:01:f8:9f:3b:a8:
62:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:D0:56:73:E8:23:07:A5:05:27:DA:8A:56:B1:EE:D9:AC:93:A1:2B
X509v3 Authority Key Identifier:
keyid:34:5A:E6:46:EA:34:AD:26:88:AC:A2:FD:D1:A6:F3:34:03:56:49:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NFrmRuo0rSaIrKL90abzNANWSV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/1-dBWc-gjB6UFJ9qKVrHu2ayToSs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.120.172.0/22
Signature Algorithm: sha256WithRSAEncryption
5e:51:b0:61:80:95:05:cb:12:ad:8b:0f:43:5d:0a:67:4a:2b:
f9:6a:83:74:b3:b3:23:f5:e6:e3:4d:2a:2a:15:f3:a4:da:b9:
bc:0b:19:4d:ed:a6:f2:85:79:51:14:aa:2a:f6:89:7a:81:b1:
b5:a9:a6:e1:89:20:e2:36:43:66:07:00:95:92:69:15:64:9f:
0d:cd:79:7c:cd:23:47:93:70:f3:47:a9:fb:2b:c8:87:cb:65:
f1:26:bc:0d:10:86:00:ac:c5:13:16:fc:fa:2a:cf:00:0a:1e:
bd:73:ff:8f:5f:8a:68:26:ed:35:40:d8:0e:fe:62:70:46:eb:
b1:d8:8a:5c:a6:e7:15:1f:e2:15:ec:e8:66:65:e9:cd:10:54:
48:f3:f7:87:66:1e:b8:72:b9:01:60:a1:c4:09:86:5c:18:dd:
04:1b:e2:bb:6e:62:ba:a8:92:50:8d:cf:e0:c4:05:ed:41:da:
6f:02:cb:3a:3c:a8:5e:ee:3b:35:32:56:62:2a:d3:a5:56:d3:
ca:71:43:96:04:9e:48:48:34:af:b1:eb:a8:13:8c:19:f3:e7:
0c:77:bb:91:28:ab:b3:4e:db:48:05:8d:84:ae:1b:48:e8:c5:
57:8b:0c:a6:57:ab:9e:25:93:00:b3:3f:4a:f5:38:ad:d7:23:
ee:e6:a3:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:38:16 2024 by rpki-client on console-ams.rpki-client.org