Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/HCdljOpb4fYDb-Y4xKpTxHyjJ5c.roa
File: HCdljOpb4fYDb-Y4xKpTxHyjJ5c.roa (raw, json)
Hash identifier: zk4MibO0AeHryWidCmnMFIHYC+A7gcMkOXORMCnSuIA=
Subject key identifier: 1C:27:65:8C:EA:5B:E1:F6:03:6F:E6:38:C4:AA:53:C4:7C:A3:27:97
Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Certificate serial: 018CC94DB27184FAA55591D36E038C157781
Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/HCdljOpb4fYDb-Y4xKpTxHyjJ5c.roa
Signing time: Tue 02 Jan 2024 08:32:41 +0000
ROA not before: Tue 02 Jan 2024 08:32:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200845
IP address blocks: 5.154.42.0/24 maxlen: 24
185.25.197.0/24 maxlen: 24
31.14.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 02:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:b2:71:84:fa:a5:55:91:d3:6e:03:8c:15:77:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Validity
Not Before: Jan 2 08:32:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1c27658cea5be1f6036fe638c4aa53c47ca32797
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:aa:fe:f3:bc:df:6d:bf:0a:53:34:64:b9:81:
3c:7f:da:ae:db:7f:fe:cd:f7:a5:1c:88:18:16:b6:
2d:d2:d2:88:b8:c1:60:7c:45:a5:31:9c:cf:0c:ef:
c6:f4:a0:bf:31:78:8f:28:43:c2:6c:87:6d:67:11:
e2:ad:df:a8:24:45:39:97:b4:b7:9a:92:39:6e:51:
4e:80:9d:b1:80:34:2b:b0:78:6f:9f:8b:e0:80:3c:
2c:12:24:79:78:85:4c:dc:ac:23:3c:49:25:77:1a:
67:0c:c3:5c:7c:13:d3:0f:a4:9b:a5:7c:8a:b9:8b:
70:2e:54:f7:bd:54:f5:c8:b8:76:2b:72:17:9b:83:
52:fa:28:56:3e:41:0c:f7:f8:24:26:38:36:7b:e6:
2d:2a:4e:5a:44:29:cc:f4:ec:77:9a:ba:a8:ee:3a:
27:00:b9:fb:3e:ef:dd:f4:24:95:37:1d:59:4d:db:
2d:32:83:69:7c:a9:4c:81:e1:b8:ff:2e:73:75:fd:
41:ca:5d:9b:e1:59:6d:b9:30:f5:c8:b1:98:58:61:
62:c7:64:55:3e:df:8b:c4:5a:50:09:87:6d:30:9d:
a9:41:cf:7c:6b:ed:a4:43:cf:30:c6:b8:aa:e9:ea:
92:12:8e:c0:a0:21:86:85:89:33:a2:50:ab:26:48:
20:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:27:65:8C:EA:5B:E1:F6:03:6F:E6:38:C4:AA:53:C4:7C:A3:27:97
X509v3 Authority Key Identifier:
keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/HCdljOpb4fYDb-Y4xKpTxHyjJ5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.154.42.0/24
31.14.207.0/24
185.25.197.0/24
Signature Algorithm: sha256WithRSAEncryption
00:48:37:66:83:f4:46:6e:a4:e0:18:01:4f:02:e9:84:90:95:
1b:20:da:36:65:3d:60:ee:a8:03:5a:5f:83:8c:a3:8d:23:69:
a0:89:52:5f:18:86:0b:8d:ad:f4:79:69:95:1b:7b:d6:bf:57:
58:6a:fb:d9:ce:ae:49:04:18:55:e9:b8:c1:4f:ab:8e:59:d7:
bc:b3:b7:6b:6f:cd:f3:59:35:81:29:33:0a:12:ad:b2:6b:5d:
1d:9a:eb:d4:da:ab:f2:42:2e:52:84:aa:f4:59:d1:62:f8:6d:
69:fc:01:92:91:d7:ab:0e:98:e8:fb:4e:97:0d:a3:be:20:ce:
c6:41:06:78:7b:04:84:c3:1e:f4:6f:fb:1c:a4:a1:09:30:5d:
1b:35:44:16:6c:97:8b:81:cc:48:be:05:c6:75:3a:30:36:d1:
d5:02:6d:0c:11:34:3b:f1:f7:27:55:68:9e:8a:c8:2e:95:23:
bb:ac:08:b4:bc:7e:a8:7c:89:a6:ba:0f:5c:d6:52:72:02:79:
e3:c1:9f:60:3d:89:c8:08:b5:de:b4:42:21:61:c3:33:62:37:
28:22:c5:67:d2:71:76:e4:f1:20:03:5b:f4:06:db:f6:1a:2f:
b7:c5:b1:44:4b:57:a5:fa:ab:45:04:29:52:de:d1:0f:2c:7d:
d3:86:d4:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 05:34:13 2024 by rpki-client on console-fra.rpki-client.org