Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/b5fa3e-a218-4a91-bf88-cc8ec6f3d875/1/18C8Vnzf1ZT05VrwTmfp_hgJuwQ.roa
File: 18C8Vnzf1ZT05VrwTmfp_hgJuwQ.roa (raw, json)
Hash identifier: ZxrpxxMSnzm4n5pA7j3QcHXiFBwfvRPAWXc0YZwbw3s=
Subject key identifier: D7:C0:BC:56:7C:DF:D5:94:F4:E5:5A:F0:4E:67:E9:FE:18:09:BB:04
Certificate issuer: /CN=ba4a0d1d80ff1eecd3659074a497bfbe8c5543f6
Certificate serial: 018CC56EC2E954DCC8E0B2C3915EF3688C03
Authority key identifier: BA:4A:0D:1D:80:FF:1E:EC:D3:65:90:74:A4:97:BF:BE:8C:55:43:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ukoNHYD_HuzTZZB0pJe_voxVQ_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/b5fa3e-a218-4a91-bf88-cc8ec6f3d875/1/18C8Vnzf1ZT05VrwTmfp_hgJuwQ.roa
Signing time: Mon 01 Jan 2024 14:30:19 +0000
ROA not before: Mon 01 Jan 2024 14:30:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12843
IP address blocks: 185.53.206.0/23 maxlen: 23
185.53.204.0/22 maxlen: 22
185.53.204.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/b5fa3e-a218-4a91-bf88-cc8ec6f3d875/1/ukoNHYD_HuzTZZB0pJe_voxVQ_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/b5fa3e-a218-4a91-bf88-cc8ec6f3d875/1/ukoNHYD_HuzTZZB0pJe_voxVQ_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/ukoNHYD_HuzTZZB0pJe_voxVQ_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 19 Jun 2024 07:33:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:c2:e9:54:dc:c8:e0:b2:c3:91:5e:f3:68:8c:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba4a0d1d80ff1eecd3659074a497bfbe8c5543f6
Validity
Not Before: Jan 1 14:30:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d7c0bc567cdfd594f4e55af04e67e9fe1809bb04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:b5:97:a4:16:36:68:40:53:0c:cb:62:a9:30:
b8:ee:ef:b6:af:5a:c0:f1:15:17:a9:72:0e:05:3c:
ab:4b:39:55:5b:2d:73:79:1d:c9:4a:97:1f:dd:61:
ee:61:a7:a9:e9:68:33:76:32:e4:dc:d3:fe:e6:5c:
5b:9c:69:4a:e2:48:b4:5a:df:a1:49:ad:96:09:12:
8b:66:f2:23:92:4a:c5:6e:cd:0b:18:34:71:97:1e:
d8:c1:e2:b1:5b:38:d8:9a:2a:f4:fc:fb:fd:d0:6f:
f6:b1:43:69:4c:28:5f:f1:c4:d5:9d:91:d6:99:d4:
6f:f5:3b:0a:7a:a1:d5:90:48:47:cd:df:d4:38:a3:
95:6b:fa:24:33:a2:cf:24:01:ff:c3:5c:aa:05:ea:
e2:b7:0c:39:41:02:13:17:2f:59:85:b9:6f:36:cd:
4b:52:a0:79:f1:0c:4f:71:d6:15:7b:84:66:78:3d:
7f:0a:18:72:84:f7:53:67:98:e9:86:d1:59:e5:be:
97:fc:b7:dd:f9:b4:db:36:19:3f:f5:cd:7a:d8:8d:
3b:d0:19:31:ab:cd:82:d9:ab:12:a4:23:f1:1a:d8:
6e:64:0f:eb:85:d4:31:11:4d:0a:b3:0e:ec:24:cf:
6d:59:4c:3c:bd:38:1e:7a:4a:aa:02:cf:ac:08:20:
93:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:C0:BC:56:7C:DF:D5:94:F4:E5:5A:F0:4E:67:E9:FE:18:09:BB:04
X509v3 Authority Key Identifier:
keyid:BA:4A:0D:1D:80:FF:1E:EC:D3:65:90:74:A4:97:BF:BE:8C:55:43:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ukoNHYD_HuzTZZB0pJe_voxVQ_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b5fa3e-a218-4a91-bf88-cc8ec6f3d875/1/18C8Vnzf1ZT05VrwTmfp_hgJuwQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b5fa3e-a218-4a91-bf88-cc8ec6f3d875/1/ukoNHYD_HuzTZZB0pJe_voxVQ_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.53.204.0/22
Signature Algorithm: sha256WithRSAEncryption
98:93:ea:a6:1c:8c:21:ac:24:dd:3d:6a:8d:b9:ec:1f:b5:69:
8f:1b:c4:67:cc:20:cc:e9:47:f7:54:94:a9:d7:df:8e:df:8a:
03:86:f7:a8:b2:97:2e:0d:f2:b8:d3:6e:e9:91:29:8b:02:3c:
41:a2:90:92:a8:84:ff:29:5c:e2:4e:cc:0a:f7:63:17:44:07:
7b:b9:f4:9e:7a:81:a7:27:60:b7:61:88:e2:4a:3c:52:1c:c1:
03:0f:84:1f:6d:23:58:be:3e:ae:2e:41:dc:29:54:71:43:b4:
8e:92:83:7c:c9:89:3a:ea:80:72:f2:88:09:ce:47:e0:8a:1c:
ac:84:22:5d:1c:d6:c7:c6:92:94:33:22:c1:de:ab:6d:8f:75:
dd:83:2c:9e:d4:90:46:8f:ca:49:af:51:33:eb:8f:b4:df:4c:
b5:57:a7:4b:06:9c:d0:ce:4d:da:ca:e1:c2:6f:75:06:4a:b9:
9c:e8:af:cf:c7:08:c9:6e:ce:2f:03:9f:9c:f2:eb:39:d6:96:
e5:fe:44:5b:9d:7e:15:8c:fd:20:64:4d:9a:e0:ed:03:23:80:
c1:4c:6b:58:15:59:66:7e:26:11:12:5c:75:a2:0f:98:70:8f:
c2:e2:ca:a0:b8:06:f5:b5:a7:68:ca:c0:2c:d4:5d:04:37:d1:
c0:a5:a0:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 18 11:23:02 2024 by rpki-client on console-ams.rpki-client.org