Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/0gao2fFHlLqObL2jJLk_35AboPY.roa
File: 0gao2fFHlLqObL2jJLk_35AboPY.roa (raw, json)
Hash identifier: aL51F89nFeJhJK635wa8VU3aYP54K4c3IqJXLUcgqAc=
Subject key identifier: D2:06:A8:D9:F1:47:94:BA:8E:6C:BD:A3:24:B9:3F:DF:90:1B:A0:F6
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 018D74C116C99658CEE81E321FE5484A6DC5
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/0gao2fFHlLqObL2jJLk_35AboPY.roa
Signing time: Sun 04 Feb 2024 15:33:47 +0000
ROA not before: Sun 04 Feb 2024 15:33:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210164
IP address blocks: 78.135.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:74:c1:16:c9:96:58:ce:e8:1e:32:1f:e5:48:4a:6d:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Feb 4 15:33:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d206a8d9f14794ba8e6cbda324b93fdf901ba0f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3f:fc:49:82:a7:6f:30:7b:3f:76:63:c2:39:
64:5a:9f:a8:4a:6b:29:db:a0:68:80:7b:f1:21:78:
4e:e3:f6:bb:30:e3:d6:d4:96:49:a1:9a:21:6d:9a:
19:3a:e2:70:74:1c:58:d3:48:5a:2f:0d:ca:16:0c:
1b:b5:a4:b8:87:9f:d2:f8:14:d2:b9:18:fd:41:42:
cb:58:32:49:e2:d2:c6:c6:bc:0a:5d:5c:12:6c:e5:
e1:6a:1b:73:6c:98:b7:89:28:ac:de:54:6e:25:ca:
5e:5a:6c:70:09:18:2e:e6:75:56:3e:82:aa:0c:01:
1a:a2:69:c3:33:53:29:22:f1:28:bb:c1:7f:01:4e:
ba:6f:d4:43:a0:69:03:2e:11:8f:bd:0c:7a:40:07:
fe:df:26:fe:05:70:7f:07:b4:d9:77:f9:bf:2a:93:
c8:e3:4a:28:65:f3:48:fd:f3:4f:56:2e:3a:d0:49:
55:f4:d9:c8:15:85:4c:19:56:9b:3e:53:df:c5:a9:
9e:5f:c6:57:1a:38:60:b3:19:35:8c:e9:6b:be:df:
bb:7e:09:97:52:fd:91:b1:68:2f:df:ea:2c:92:0a:
fa:4c:cd:f3:12:c1:0a:fc:bf:2e:18:c9:7b:f1:be:
68:bb:d8:42:b1:b7:92:89:87:06:48:d0:3b:fe:5f:
3f:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:06:A8:D9:F1:47:94:BA:8E:6C:BD:A3:24:B9:3F:DF:90:1B:A0:F6
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/0gao2fFHlLqObL2jJLk_35AboPY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.135.104.0/24
Signature Algorithm: sha256WithRSAEncryption
40:ae:d8:4b:a4:11:47:8d:04:47:cb:28:65:91:bf:37:87:06:
a0:77:e7:62:64:88:72:a0:78:96:9a:a7:c7:30:89:78:c9:bd:
9e:58:26:1b:fc:9f:6b:da:e0:32:16:cb:ca:e8:c0:a7:f9:12:
7a:0b:c8:68:ef:ab:ff:4e:83:e5:32:d6:f9:a0:e4:91:9e:7b:
fe:6d:35:e0:d8:a7:e5:73:40:c1:2b:f2:4c:28:c4:a3:54:67:
0c:54:2d:06:3a:8b:93:94:7f:e2:f5:a8:65:fa:b8:83:a4:ab:
71:aa:5f:3d:8c:19:d1:9b:09:91:d9:1e:51:18:df:f7:37:20:
96:87:a1:df:c5:ed:32:fb:31:0a:ca:28:d2:fc:22:6f:17:5a:
bd:fd:c1:17:61:55:5d:e0:f5:8d:8c:f3:3e:6b:ab:30:4e:1d:
c9:0c:b9:75:48:b3:01:31:45:3f:ed:fc:66:c2:f8:92:52:9c:
da:ff:00:1c:9f:9b:6c:c5:a1:94:75:fc:09:c4:2d:70:7d:33:
e3:70:5f:83:f3:19:24:34:c9:56:e6:5f:8a:c8:1b:fa:43:a3:
0c:b8:95:19:a6:86:87:8e:df:93:5b:40:23:33:21:f4:fd:9e:
ca:5d:9c:f4:c5:fc:98:63:b0:d6:e7:1a:00:c4:72:de:90:11:
02:40:3f:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 12:35:33 2024 by rpki-client on console-ams.rpki-client.org