Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/tfuwWUjlWn7cD7cH36ICzrXnkCk.roa
File: tfuwWUjlWn7cD7cH36ICzrXnkCk.roa (raw, json)
Hash identifier: vQQ5R5UkXvK3ki8gCd2Anp3Xe4FXhnqFSTdYvtaDHCc=
Subject key identifier: B5:FB:B0:59:48:E5:5A:7E:DC:0F:B7:07:DF:A2:02:CE:B5:E7:90:29
Certificate issuer: /CN=0e0b0dcb6ad0ca816d2bd204e13f1eaf1104274c
Certificate serial: 018CC79522C8B562F3D13F1D6F457338057A
Authority key identifier: 0E:0B:0D:CB:6A:D0:CA:81:6D:2B:D2:04:E1:3F:1E:AF:11:04:27:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DgsNy2rQyoFtK9IE4T8erxEEJ0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/tfuwWUjlWn7cD7cH36ICzrXnkCk.roa
Signing time: Tue 02 Jan 2024 00:31:28 +0000
ROA not before: Tue 02 Jan 2024 00:31:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 185.127.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/DgsNy2rQyoFtK9IE4T8erxEEJ0w.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/DgsNy2rQyoFtK9IE4T8erxEEJ0w.mft
rsync://rpki.ripe.net/repository/DEFAULT/DgsNy2rQyoFtK9IE4T8erxEEJ0w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 16:59:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:22:c8:b5:62:f3:d1:3f:1d:6f:45:73:38:05:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e0b0dcb6ad0ca816d2bd204e13f1eaf1104274c
Validity
Not Before: Jan 2 00:31:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b5fbb05948e55a7edc0fb707dfa202ceb5e79029
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:b5:7d:4b:b5:c6:76:72:b1:14:5a:5e:99:e0:
c7:30:b7:97:af:db:d3:65:b9:7c:07:9a:dc:72:05:
ea:25:12:db:76:06:07:f8:a2:6b:38:eb:60:7c:74:
d3:17:05:27:1c:dd:4e:04:32:32:c1:d8:2c:91:cb:
34:cc:82:91:ea:e4:22:c6:6a:96:d5:41:60:3c:23:
43:af:4d:f1:e4:1e:81:4f:79:64:70:5e:5d:ad:1e:
fe:8b:4e:b1:9c:92:1e:07:01:47:11:4c:9d:2f:c8:
92:aa:52:f7:07:21:4f:ab:49:e7:cf:c2:ad:55:d3:
12:0b:5f:b4:ad:fb:52:f5:7b:e4:c5:c4:e9:f3:d6:
e8:09:81:0d:ab:20:fd:2c:8b:5e:2c:ff:de:fc:01:
dd:70:18:30:c5:cf:05:44:05:58:7d:f2:93:8e:f9:
7e:56:f7:a7:05:28:21:3f:e2:3a:df:f4:22:68:a0:
66:cc:c7:85:a4:98:85:db:34:d0:f1:a9:56:1d:f6:
7f:a0:3a:d7:91:15:7e:46:df:48:98:62:bc:59:72:
f7:da:88:ce:41:22:ec:75:90:20:0c:97:4d:02:d8:
8e:f5:72:b7:5f:c0:c2:de:f0:00:c1:05:65:d5:f0:
bb:97:db:94:2a:06:6c:8a:c6:f1:cd:a8:5f:18:84:
ed:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:FB:B0:59:48:E5:5A:7E:DC:0F:B7:07:DF:A2:02:CE:B5:E7:90:29
X509v3 Authority Key Identifier:
keyid:0E:0B:0D:CB:6A:D0:CA:81:6D:2B:D2:04:E1:3F:1E:AF:11:04:27:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DgsNy2rQyoFtK9IE4T8erxEEJ0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/tfuwWUjlWn7cD7cH36ICzrXnkCk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/DgsNy2rQyoFtK9IE4T8erxEEJ0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.127.28.0/24
Signature Algorithm: sha256WithRSAEncryption
82:aa:3c:69:40:8b:f2:fd:80:46:a0:d9:da:f9:f2:e4:d2:81:
c2:ce:54:58:ae:05:4f:05:79:7d:0d:fd:8d:80:a5:05:5b:3f:
5e:22:59:e2:82:da:ea:85:38:d7:c5:3e:a3:b2:39:ac:92:4e:
d5:e0:29:5e:db:42:ae:df:75:18:67:68:2a:24:00:3c:da:8e:
93:dc:a5:f5:17:80:66:c4:73:e4:a5:87:67:b4:5a:9b:d8:73:
a8:4c:4b:11:49:36:21:25:b0:40:e6:58:b6:83:82:7c:62:81:
99:16:f6:41:80:de:a8:ab:57:02:1e:0e:f2:b7:ee:b3:40:dd:
a9:7d:c0:6a:cd:24:dc:1c:17:e3:e4:29:c5:ee:9c:34:4d:2f:
57:70:f0:43:5a:e6:df:2e:ab:d5:e0:dc:30:93:b9:c7:d7:a8:
e7:d5:e5:eb:bf:a8:40:88:f8:96:4b:c1:57:76:f7:b2:21:42:
2a:81:4f:46:ef:1e:10:63:ec:d5:5e:17:e4:1c:d7:78:ea:19:
c4:9e:0b:1e:d8:34:a2:55:e1:c1:ea:73:72:12:1e:3e:ee:59:
88:b0:5d:02:97:93:57:f7:48:68:14:cc:70:63:b9:6c:a1:11:
22:95:19:b8:fd:ec:1f:14:83:dd:82:f3:e3:3d:7a:ce:e6:f4:
6c:01:2d:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 22:18:45 2024 by rpki-client on console-fra.rpki-client.org