Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/8ccbcc-cd51-44ae-8f05-36fd233514f9/1/VS0gO8BOasj_0bGzBIye2YhBZBY.roa
File: VS0gO8BOasj_0bGzBIye2YhBZBY.roa (raw, json)
Hash identifier: V/mV3LCECrL2e4nzeSLwmMwd8ebPkM0DWMkmbNr1zKI=
Subject key identifier: 55:2D:20:3B:C0:4E:6A:C8:FF:D1:B1:B3:04:8C:9E:D9:88:41:64:16
Certificate issuer: /CN=b921277f3e7954a4af5520a99042fb0893af804d
Certificate serial: 018CC424EF0BD923BF0D551D75725111FFDF
Authority key identifier: B9:21:27:7F:3E:79:54:A4:AF:55:20:A9:90:42:FB:08:93:AF:80:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uSEnfz55VKSvVSCpkEL7CJOvgE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/8ccbcc-cd51-44ae-8f05-36fd233514f9/1/VS0gO8BOasj_0bGzBIye2YhBZBY.roa
Signing time: Mon 01 Jan 2024 08:30:04 +0000
ROA not before: Mon 01 Jan 2024 08:30:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205107
IP address blocks: 185.230.156.0/24 maxlen: 24
2001:678:570::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/8ccbcc-cd51-44ae-8f05-36fd233514f9/1/uSEnfz55VKSvVSCpkEL7CJOvgE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/8ccbcc-cd51-44ae-8f05-36fd233514f9/1/uSEnfz55VKSvVSCpkEL7CJOvgE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/uSEnfz55VKSvVSCpkEL7CJOvgE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jul 2024 14:20:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:ef:0b:d9:23:bf:0d:55:1d:75:72:51:11:ff:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b921277f3e7954a4af5520a99042fb0893af804d
Validity
Not Before: Jan 1 08:30:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=552d203bc04e6ac8ffd1b1b3048c9ed988416416
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:6c:8f:bb:24:26:e2:6f:71:cd:25:0f:01:e3:
00:0d:5e:cf:dd:f7:df:77:66:17:32:0b:96:ba:72:
72:f9:42:cc:d5:29:08:12:00:43:3a:6f:49:80:bc:
50:28:d3:1a:5e:59:8f:eb:8c:46:87:68:e2:50:c6:
18:84:76:68:fe:bd:96:7e:c6:ac:b8:f1:ba:62:45:
1b:2c:86:20:11:ef:e4:c8:14:4c:ec:bc:ec:83:5c:
69:ad:63:f6:cc:f9:43:21:3b:76:82:5e:ee:a2:f1:
e6:69:59:6c:1e:32:db:53:d8:8f:90:48:a4:98:09:
68:f6:f6:bc:ea:7e:d9:0a:8f:ec:c2:c7:36:61:41:
f8:49:d7:8a:42:88:97:7d:fd:22:c7:b7:60:2c:20:
15:5d:60:c1:aa:db:0c:4a:f1:49:b0:d1:9e:c9:f4:
c7:b6:56:64:fd:96:05:87:96:8f:24:1e:1c:3c:bd:
e7:21:5e:08:4c:9c:8e:d9:0d:99:63:53:1b:86:7f:
4b:2d:61:c1:60:7b:4e:8d:52:3a:78:2e:d2:d9:f4:
a9:54:7e:07:36:ce:5e:57:39:cc:b2:13:d9:5c:9e:
3d:f5:e2:91:62:85:3f:1b:34:29:fb:26:89:3e:c1:
43:46:df:6b:12:e9:79:bd:a8:b4:ee:49:1a:6c:3c:
a3:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:2D:20:3B:C0:4E:6A:C8:FF:D1:B1:B3:04:8C:9E:D9:88:41:64:16
X509v3 Authority Key Identifier:
keyid:B9:21:27:7F:3E:79:54:A4:AF:55:20:A9:90:42:FB:08:93:AF:80:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uSEnfz55VKSvVSCpkEL7CJOvgE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/8ccbcc-cd51-44ae-8f05-36fd233514f9/1/VS0gO8BOasj_0bGzBIye2YhBZBY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/8ccbcc-cd51-44ae-8f05-36fd233514f9/1/uSEnfz55VKSvVSCpkEL7CJOvgE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.230.156.0/24
IPv6:
2001:678:570::/48
Signature Algorithm: sha256WithRSAEncryption
4a:c4:94:74:b2:03:ab:c7:0d:db:fd:d6:a8:d0:ae:0d:26:38:
c1:0b:9d:94:60:8e:17:df:ad:1f:73:a8:66:5f:99:ca:4a:bb:
91:31:56:73:27:2f:bb:e4:00:ac:81:da:25:fb:ce:6c:30:1a:
ed:4a:1c:3a:45:9d:02:b0:f4:84:2c:b1:7d:b7:af:30:bf:1f:
85:74:3e:58:9e:32:5b:b3:0e:b6:a8:9b:72:b2:bf:02:3f:0d:
a7:77:2c:5b:62:ef:01:5d:91:5a:a5:37:ec:3f:74:d1:8c:1a:
21:51:dd:f5:fd:2e:f6:d5:1f:87:2c:81:19:d2:85:cf:73:e8:
42:1e:77:90:d1:b1:a2:05:54:31:f9:9b:65:aa:71:e5:12:d9:
c5:4b:ed:26:b0:68:be:30:1d:ab:6e:4d:e8:46:fa:23:70:0b:
3f:68:71:4c:70:8e:ec:dc:16:32:1f:52:ad:c5:4f:34:04:f1:
2b:4e:31:a6:6b:69:99:bc:37:92:79:51:e0:c6:d1:30:fd:de:
92:0b:77:3c:d1:b0:ec:b6:a2:83:5a:37:c8:cc:a9:61:55:c8:
f8:84:77:f8:94:fd:a2:c6:9a:95:cd:08:fc:70:d2:e5:a1:9e:
76:d3:44:d5:3f:39:66:4d:fe:5a:81:9a:df:7c:f8:93:bd:9b:
f1:9f:28:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 2 22:04:53 2024 by rpki-client on console-fra.rpki-client.org