Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/30a309-b18e-4f27-8e7e-e7b372e4c7c5/1/8bI32EMgjSltmG1XchHf9qIMS5o.roa
File: 8bI32EMgjSltmG1XchHf9qIMS5o.roa (raw, json)
Hash identifier: 5ckW1D4cU8o/9LOcqV0ZhpxDFFj83+SLF5cuQ3mmfqA=
Subject key identifier: F1:B2:37:D8:43:20:8D:29:6D:98:6D:57:72:11:DF:F6:A2:0C:4B:9A
Certificate issuer: /CN=5bc1503610bf82d8687b7aefb879a6578704f32a
Certificate serial: 018CC42518BE216782986C8141911AAE0C55
Authority key identifier: 5B:C1:50:36:10:BF:82:D8:68:7B:7A:EF:B8:79:A6:57:87:04:F3:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W8FQNhC_gthoe3rvuHmmV4cE8yo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/30a309-b18e-4f27-8e7e-e7b372e4c7c5/1/8bI32EMgjSltmG1XchHf9qIMS5o.roa
Signing time: Mon 01 Jan 2024 08:30:14 +0000
ROA not before: Mon 01 Jan 2024 08:30:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199496
IP address blocks: 185.132.140.0/22 maxlen: 24
2a06:e240::/29 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/30a309-b18e-4f27-8e7e-e7b372e4c7c5/1/W8FQNhC_gthoe3rvuHmmV4cE8yo.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/30a309-b18e-4f27-8e7e-e7b372e4c7c5/1/W8FQNhC_gthoe3rvuHmmV4cE8yo.mft
rsync://rpki.ripe.net/repository/DEFAULT/W8FQNhC_gthoe3rvuHmmV4cE8yo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 16:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:18:be:21:67:82:98:6c:81:41:91:1a:ae:0c:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bc1503610bf82d8687b7aefb879a6578704f32a
Validity
Not Before: Jan 1 08:30:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f1b237d843208d296d986d577211dff6a20c4b9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:47:58:d4:d6:f9:2b:28:92:9d:80:f8:a9:8f:
d8:a9:a0:c2:93:48:b6:d0:44:8a:7a:67:cd:4b:ad:
23:08:fe:11:47:7a:2c:b8:1b:c4:af:23:7c:67:63:
dd:28:74:72:cf:0b:87:cf:60:e9:39:3b:25:a8:ae:
2a:62:8b:7c:c4:e4:dd:07:6a:24:9b:19:08:bf:d3:
09:ce:de:5e:0e:7a:ea:ba:5a:e8:5c:46:58:b8:0f:
60:82:db:75:e4:4d:03:79:57:30:b9:40:4f:db:d4:
87:4a:ed:06:da:33:76:8a:d0:75:46:cb:25:e8:80:
62:37:a8:5b:61:94:1c:e0:9a:ac:0a:27:38:7e:d8:
28:61:3a:56:0a:8d:df:f8:05:11:4e:f4:b0:74:fa:
12:0c:53:a5:a4:2d:98:2a:7f:86:f2:0d:02:0f:c2:
5f:9d:b5:e3:06:d0:2a:30:1d:39:9b:c6:f2:17:96:
32:65:dc:dc:4c:88:32:95:a5:2c:48:74:f3:5c:c9:
2c:fd:a1:3a:d4:4d:33:d2:cb:97:3e:90:cc:1f:a6:
a1:9b:3f:63:01:af:85:30:06:44:35:cb:30:1d:c2:
b0:8d:7f:84:54:ef:1d:9b:ef:11:10:da:19:1c:c5:
25:b8:2b:8b:c4:39:af:e3:65:78:de:2f:f0:3d:70:
c9:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:B2:37:D8:43:20:8D:29:6D:98:6D:57:72:11:DF:F6:A2:0C:4B:9A
X509v3 Authority Key Identifier:
keyid:5B:C1:50:36:10:BF:82:D8:68:7B:7A:EF:B8:79:A6:57:87:04:F3:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W8FQNhC_gthoe3rvuHmmV4cE8yo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/30a309-b18e-4f27-8e7e-e7b372e4c7c5/1/8bI32EMgjSltmG1XchHf9qIMS5o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/30a309-b18e-4f27-8e7e-e7b372e4c7c5/1/W8FQNhC_gthoe3rvuHmmV4cE8yo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.132.140.0/22
IPv6:
2a06:e240::/29
Signature Algorithm: sha256WithRSAEncryption
60:2b:eb:40:4b:34:51:ad:25:e0:b0:16:00:af:f2:0e:c2:fc:
8c:08:7f:61:fa:06:e5:6d:bb:46:5c:43:3b:0e:68:79:8d:49:
c0:0d:37:2f:25:d0:73:d8:58:fa:7d:79:da:d7:c6:ea:b6:50:
ee:96:b4:ab:05:46:d9:6b:30:5f:87:d7:73:f9:1e:47:e0:26:
ef:30:b3:88:99:02:15:72:25:83:05:c4:43:6e:ac:ce:36:86:
f6:2b:37:38:97:49:c5:38:b0:74:45:d8:ef:09:82:8b:bc:d4:
c8:2f:18:29:a1:78:da:8c:f2:8d:27:36:a3:ca:37:f4:87:c5:
bc:fd:60:66:b8:1d:b6:26:48:c7:f2:0a:b6:29:1e:39:c4:c4:
29:10:1b:7a:c0:4e:dd:99:17:99:06:6c:17:6c:63:57:55:52:
f0:2e:c3:c2:45:48:a1:ac:76:c7:09:a7:f4:57:aa:a3:22:87:
71:65:25:b2:8a:5b:16:42:c7:52:aa:64:87:1f:7e:6f:70:e3:
1e:96:7c:7e:a7:a3:3d:f0:b6:0c:15:fb:9f:09:5d:04:85:98:
10:ed:de:8a:47:07:60:6b:81:bc:80:3b:6a:a2:a7:d8:55:5e:
bb:44:17:d2:e4:01:48:58:ab:bf:4f:00:d7:58:01:af:3f:fc:
81:e7:5a:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 20:21:44 2024 by rpki-client on console-fra.rpki-client.org