Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/C0cQUpZIxtE5w8kwehThBao1qFM.roa
File: C0cQUpZIxtE5w8kwehThBao1qFM.roa (raw, json)
Hash identifier: BPjmH1vZ5u15EvUcR9yaIp0l50Is84r/NN/b7zcVD6U=
Subject key identifier: 0B:47:10:52:96:48:C6:D1:39:C3:C9:30:7A:14:E1:05:AA:35:A8:53
Certificate issuer: /CN=8b47aa09f2c610f6f44b4e75c1cd9dcd3884e55d
Certificate serial: 018CC8704A8ADB8B4D4C116458D0A35EC4D7
Authority key identifier: 8B:47:AA:09:F2:C6:10:F6:F4:4B:4E:75:C1:CD:9D:CD:38:84:E5:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i0eqCfLGEPb0S051wc2dzTiE5V0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/C0cQUpZIxtE5w8kwehThBao1qFM.roa
Signing time: Tue 02 Jan 2024 04:30:51 +0000
ROA not before: Tue 02 Jan 2024 04:30:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204393
IP address blocks: 185.86.182.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.mft
rsync://rpki.ripe.net/repository/DEFAULT/i0eqCfLGEPb0S051wc2dzTiE5V0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 30 Jun 2024 02:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:70:4a:8a:db:8b:4d:4c:11:64:58:d0:a3:5e:c4:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b47aa09f2c610f6f44b4e75c1cd9dcd3884e55d
Validity
Not Before: Jan 2 04:30:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0b4710529648c6d139c3c9307a14e105aa35a853
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:80:d0:a6:0a:75:39:18:95:23:ba:02:d9:f5:
dd:f2:95:4b:37:be:40:ea:ab:20:c0:b2:fa:ed:c0:
f8:39:a4:05:45:44:e2:74:92:c4:6d:a9:6c:a8:03:
12:dc:3e:17:6d:bf:fe:81:a3:8d:a8:85:cb:5c:aa:
a2:84:e8:85:85:5c:6f:a9:e0:b4:77:f8:01:05:78:
00:a4:7f:d3:24:23:8f:70:b2:ab:23:0e:a9:30:84:
81:19:d1:c4:d0:7d:df:88:d2:a8:94:7d:0e:b8:2c:
b0:9f:87:0c:84:17:10:ea:cf:1a:74:c0:1c:cf:7a:
1f:38:41:f7:22:da:fd:ec:70:87:7d:67:3e:85:a9:
67:5a:bc:27:ea:bd:4c:a8:af:d2:8f:57:17:e7:7f:
f5:b8:7d:78:e3:6f:f5:5f:d1:fa:10:42:72:e1:6e:
e4:b6:c1:c4:82:8b:b7:df:90:06:46:03:bd:8c:a6:
33:b0:e4:b4:b8:48:dd:ff:f0:30:3d:f4:a0:a9:b9:
cb:51:9b:ca:d1:41:b6:f3:a9:2c:79:e7:71:b8:05:
ae:e7:b4:8c:d9:56:1b:82:63:dc:ff:c0:37:7c:55:
b3:72:49:b9:06:61:d8:c0:3b:06:36:85:13:0d:6c:
af:57:0b:ef:47:52:ed:53:94:06:35:ad:80:45:95:
e4:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:47:10:52:96:48:C6:D1:39:C3:C9:30:7A:14:E1:05:AA:35:A8:53
X509v3 Authority Key Identifier:
keyid:8B:47:AA:09:F2:C6:10:F6:F4:4B:4E:75:C1:CD:9D:CD:38:84:E5:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i0eqCfLGEPb0S051wc2dzTiE5V0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/C0cQUpZIxtE5w8kwehThBao1qFM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.86.182.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:e0:f5:45:3d:b2:10:4f:72:1d:ee:39:9f:4b:29:6a:fa:96:
22:d6:8d:70:fa:ea:12:c6:e5:7a:f3:a5:b1:ed:1c:7a:0a:b6:
de:a5:24:57:88:e7:c2:b5:77:0b:00:e4:16:be:36:4c:62:f9:
f6:a0:b7:69:07:1d:74:19:c7:77:6b:c0:cd:d2:4b:53:50:91:
53:13:0c:66:d5:44:62:0d:3f:ca:a8:03:73:f9:7a:9e:96:c1:
83:1b:e3:df:4d:d4:f5:94:96:79:91:c8:0e:a2:cf:5f:09:e9:
bd:c0:e8:8a:ec:5f:c5:3f:08:f9:a4:b8:18:a6:cc:32:98:00:
a1:7f:95:cd:c6:07:71:a8:9e:2e:77:62:d2:83:85:ab:6a:9c:
6a:61:04:cc:73:97:91:12:be:d2:84:08:da:7b:45:aa:2a:63:
c6:ec:01:0a:5a:21:5a:a6:3e:a4:71:e9:e5:ef:21:f5:f1:8f:
f9:48:bc:4b:26:8d:dd:d2:a1:cf:ec:9d:44:93:66:71:8e:62:
a8:c9:92:a7:be:7c:6f:13:6d:19:68:6c:5c:87:1a:d3:cb:8f:
02:6a:e5:28:91:1a:2f:de:34:4b:b5:e5:bb:d4:62:59:a6:29:
45:f9:5f:a9:c8:6c:96:07:d0:34:f7:d3:f2:c6:18:9a:21:84:
fe:b5:37:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 11:28:08 2024 by rpki-client on console-fra.rpki-client.org