Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/or1xICSng5PrIxlvBrzsCW6EPyo.roa
File: or1xICSng5PrIxlvBrzsCW6EPyo.roa (raw, json)
Hash identifier: M029X6XyQFvT6bVlv/4DLL8hTVz6oQLbBSrm1K/F7i4=
Subject key identifier: A2:BD:71:20:24:A7:83:93:EB:23:19:6F:06:BC:EC:09:6E:84:3F:2A
Certificate issuer: /CN=541fdc7a2f11a5766d3ad7bdf625ce5e119a8fdf
Certificate serial: 01906F8FE17D2AECB7C5FBB68E0C6BF9CB21
Authority key identifier: 54:1F:DC:7A:2F:11:A5:76:6D:3A:D7:BD:F6:25:CE:5E:11:9A:8F:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VB_cei8RpXZtOte99iXOXhGaj98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/or1xICSng5PrIxlvBrzsCW6EPyo.roa
Signing time: Mon 01 Jul 2024 18:30:18 +0000
ROA not before: Mon 01 Jul 2024 18:30:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62240
IP address blocks: 185.101.170.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/VB_cei8RpXZtOte99iXOXhGaj98.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/VB_cei8RpXZtOte99iXOXhGaj98.mft
rsync://rpki.ripe.net/repository/DEFAULT/VB_cei8RpXZtOte99iXOXhGaj98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:6f:8f:e1:7d:2a:ec:b7:c5:fb:b6:8e:0c:6b:f9:cb:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=541fdc7a2f11a5766d3ad7bdf625ce5e119a8fdf
Validity
Not Before: Jul 1 18:30:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a2bd712024a78393eb23196f06bcec096e843f2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f2:26:e8:59:e0:f6:58:a5:c0:60:b5:03:bc:
10:e9:39:fb:ba:a5:4b:58:e4:98:d2:99:91:46:f8:
0a:4a:ed:17:2d:b2:82:cf:94:33:c5:86:26:62:a0:
3c:58:79:2b:2c:ff:2f:04:2f:a5:8c:20:42:a1:a9:
60:67:a0:f0:3d:20:7c:b1:d6:e1:da:cb:cc:82:ad:
3d:c0:14:3a:6a:90:d8:6b:ac:05:2a:c5:e8:a7:2c:
c8:65:22:18:f8:86:13:ba:a0:b7:32:db:e1:8c:eb:
7a:5e:42:fe:02:82:da:0c:68:1c:cf:40:af:57:91:
06:79:ad:1a:c2:d6:e4:1d:08:49:91:54:06:e4:03:
eb:ba:48:29:3f:cd:91:38:af:39:de:9d:6e:3b:e0:
85:f3:3f:a0:f7:34:de:77:60:06:b5:13:6f:69:91:
ca:b1:43:a7:b1:2a:0f:6b:99:e7:6e:97:8a:76:ef:
f1:78:f2:3b:b9:b6:70:c6:c2:f4:7f:c6:4b:d7:03:
0f:c5:ab:4c:64:18:bd:a4:5c:c1:e8:63:5b:d3:4a:
e2:ce:da:ca:a5:ec:41:c9:6b:fe:cb:11:60:92:c3:
4d:cd:ae:ec:fb:36:ba:b4:22:1c:12:cc:9f:08:f7:
db:87:a5:29:97:e8:df:b8:27:b6:1e:35:35:90:38:
e8:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:BD:71:20:24:A7:83:93:EB:23:19:6F:06:BC:EC:09:6E:84:3F:2A
X509v3 Authority Key Identifier:
keyid:54:1F:DC:7A:2F:11:A5:76:6D:3A:D7:BD:F6:25:CE:5E:11:9A:8F:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VB_cei8RpXZtOte99iXOXhGaj98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/or1xICSng5PrIxlvBrzsCW6EPyo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/VB_cei8RpXZtOte99iXOXhGaj98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.101.170.0/23
Signature Algorithm: sha256WithRSAEncryption
8f:f4:9f:17:82:77:bf:47:33:77:d9:ef:1c:79:27:43:96:fd:
7c:e5:2e:a7:21:65:b6:84:e2:c6:3c:bf:27:4f:24:91:c1:02:
ea:30:06:41:96:6d:66:82:e4:7b:c4:46:4f:f1:69:8f:9e:e7:
a4:08:5e:89:e7:b4:23:25:0f:da:74:19:61:c5:e0:60:e1:44:
ba:cc:c0:3d:10:e6:42:eb:9f:d4:a4:ad:32:98:44:b8:22:de:
4d:94:54:8a:41:15:f4:d3:88:80:b5:16:30:87:3e:fb:82:52:
a5:da:36:f0:8b:5e:ac:57:d9:27:7b:b4:b4:a9:f2:b8:d6:a1:
a5:e1:c9:d1:d2:ee:60:e2:9e:60:3b:3d:95:e1:d3:66:27:21:
83:fc:57:9f:d8:19:5e:03:2c:de:6b:33:99:a1:c6:2b:a2:15:
60:6a:f4:c9:df:c6:b8:35:1c:db:ed:cd:3b:96:40:98:d4:60:
14:fc:27:e5:d0:38:07:35:d6:a8:11:50:9c:9c:a4:74:f0:51:
6f:18:4b:d7:be:96:a8:19:0e:e4:45:69:f5:42:b0:42:bd:9b:
ba:a1:72:c9:c3:fc:17:67:d7:23:44:70:36:ac:12:8b:92:68:
71:10:5b:3d:6a:d1:c3:1b:b0:b7:4d:af:e9:33:69:a2:b0:3f:
3c:93:b0:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 22:23:26 2024 by rpki-client on console-fra.rpki-client.org