Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/f501f6-1702-48d3-8027-96b8691f5260/1/d73hHmPUm1vqdDzZkJlq0-QGVmY.roa
File: d73hHmPUm1vqdDzZkJlq0-QGVmY.roa (raw, json)
Hash identifier: 7CiCdq1k+i7cMNUg+36+g4/+GfR4Uzywi4I6TE/wpgw=
Subject key identifier: 77:BD:E1:1E:63:D4:9B:5B:EA:74:3C:D9:90:99:6A:D3:E4:06:56:66
Certificate issuer: /CN=15d1ff6bec9fbcb89e950a3a01ef2d686f0e7a31
Certificate serial: 018CC79517C96D9BE634BE34A794E8E5F209
Authority key identifier: 15:D1:FF:6B:EC:9F:BC:B8:9E:95:0A:3A:01:EF:2D:68:6F:0E:7A:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FdH_a-yfvLielQo6Ae8taG8OejE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/f501f6-1702-48d3-8027-96b8691f5260/1/d73hHmPUm1vqdDzZkJlq0-QGVmY.roa
Signing time: Tue 02 Jan 2024 00:31:26 +0000
ROA not before: Tue 02 Jan 2024 00:31:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6453
IP address blocks: 185.150.216.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/f501f6-1702-48d3-8027-96b8691f5260/1/FdH_a-yfvLielQo6Ae8taG8OejE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/f501f6-1702-48d3-8027-96b8691f5260/1/FdH_a-yfvLielQo6Ae8taG8OejE.mft
rsync://rpki.ripe.net/repository/DEFAULT/FdH_a-yfvLielQo6Ae8taG8OejE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 03:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:17:c9:6d:9b:e6:34:be:34:a7:94:e8:e5:f2:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15d1ff6bec9fbcb89e950a3a01ef2d686f0e7a31
Validity
Not Before: Jan 2 00:31:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=77bde11e63d49b5bea743cd990996ad3e4065666
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:53:cf:03:7c:01:dc:7a:fb:3d:b3:40:75:df:
21:8d:0e:4c:14:a1:12:44:b6:b6:57:19:b8:51:ae:
cb:15:7a:ae:35:92:fe:e9:e1:07:1b:bb:24:c1:a1:
db:e0:22:74:84:2c:93:ae:e5:18:97:04:07:86:8d:
35:49:b5:7c:b2:de:98:ba:cf:2e:f8:a6:11:ca:6f:
4a:27:c3:8a:f6:13:b7:6f:7e:83:8d:d8:3e:77:95:
db:c3:84:f0:94:2e:c9:86:ec:17:cb:c3:3d:18:08:
6f:94:3a:38:6b:b4:87:40:ef:3b:f8:8c:4a:39:65:
74:19:de:55:dd:2e:7a:21:83:3b:9e:91:dc:29:09:
9e:8e:6f:1d:fe:27:60:6e:5c:5a:bf:71:9e:fd:9d:
c2:54:7e:0b:97:81:1b:f2:b4:5a:11:0e:e6:87:84:
e4:af:8a:01:99:06:68:41:5f:2e:bb:3d:e1:cd:45:
a5:a5:38:99:13:19:26:1e:69:93:1a:77:ea:1e:4e:
53:b5:07:95:1f:08:32:1b:12:8a:eb:1f:03:cd:a0:
d0:67:83:5e:22:0c:29:42:df:c3:53:2b:19:d2:f6:
ff:8c:eb:8c:41:c3:9f:ed:79:67:ec:af:5d:41:e8:
56:36:9f:10:9a:cf:3f:da:7f:77:fe:bf:15:3f:13:
89:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:BD:E1:1E:63:D4:9B:5B:EA:74:3C:D9:90:99:6A:D3:E4:06:56:66
X509v3 Authority Key Identifier:
keyid:15:D1:FF:6B:EC:9F:BC:B8:9E:95:0A:3A:01:EF:2D:68:6F:0E:7A:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FdH_a-yfvLielQo6Ae8taG8OejE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/f501f6-1702-48d3-8027-96b8691f5260/1/d73hHmPUm1vqdDzZkJlq0-QGVmY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/f501f6-1702-48d3-8027-96b8691f5260/1/FdH_a-yfvLielQo6Ae8taG8OejE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.150.216.0/22
Signature Algorithm: sha256WithRSAEncryption
64:58:2a:1a:c7:2a:4f:56:ca:17:ae:ac:36:65:98:08:77:fe:
e9:67:8a:ab:73:0e:d7:e7:11:61:d8:76:e5:bd:dc:30:65:2c:
df:72:56:c4:78:c7:b2:03:a3:0f:a0:5c:fb:15:2b:d9:0b:2c:
ab:eb:83:67:76:71:b5:6f:ba:62:65:df:31:ab:7d:e6:37:4c:
be:32:78:5b:4e:0b:12:13:16:38:91:f7:51:a8:fa:72:5d:f2:
8d:b3:09:46:23:3d:8f:df:37:c4:8c:5f:a1:9d:4c:52:3c:4f:
80:cf:2b:8d:95:8b:2a:cc:f0:8c:40:16:22:ff:91:c6:04:72:
70:17:99:5e:cc:17:85:75:ec:d9:3a:23:72:07:7e:fa:23:02:
c1:64:f9:37:dd:be:d7:be:78:ee:eb:f0:93:06:8b:0f:a5:de:
22:cd:ee:0b:a4:31:ea:1a:be:be:47:cd:e1:6f:32:ea:58:03:
82:ea:4d:6f:5e:35:4f:86:a9:e4:99:81:5b:0c:4e:de:41:79:
04:25:0a:e8:8d:5f:d9:a8:2f:60:f9:00:ff:c5:b9:af:0e:e4:
39:7d:75:98:92:a6:82:70:52:75:2b:b6:78:85:85:32:58:3c:
a5:e3:5e:a2:43:2d:31:f0:03:0d:c7:97:f8:40:03:ca:b6:50:
e7:17:17:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 12:32:30 2024 by rpki-client on console-fra.rpki-client.org