Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/_gnfbDoKocmclE0qNHiR50xyJj0.roa
File: _gnfbDoKocmclE0qNHiR50xyJj0.roa (raw, json)
Hash identifier: XY4FcluS2d0tHsDrdbGvoXXryQUTObJSUhuh0MkmXTY=
Subject key identifier: FE:09:DF:6C:3A:0A:A1:C9:9C:94:4D:2A:34:78:91:E7:4C:72:26:3D
Certificate issuer: /CN=746365355b665564a210c358c68a0117b7fbeb9a
Certificate serial: 018CC5DCBDF9130FF1C2960CD15601DC5458
Authority key identifier: 74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/_gnfbDoKocmclE0qNHiR50xyJj0.roa
Signing time: Mon 01 Jan 2024 16:30:27 +0000
ROA not before: Mon 01 Jan 2024 16:30:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47726
IP address blocks: 185.65.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.mft
rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 12:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:bd:f9:13:0f:f1:c2:96:0c:d1:56:01:dc:54:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746365355b665564a210c358c68a0117b7fbeb9a
Validity
Not Before: Jan 1 16:30:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fe09df6c3a0aa1c99c944d2a347891e74c72263d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:95:15:08:d6:a9:c5:20:1a:cc:da:31:3c:3f:
f2:27:52:b5:32:2b:17:2b:d2:23:ee:1d:9e:be:b1:
c0:ac:ef:d4:b1:1e:6f:d3:fd:97:d9:17:9b:b5:37:
84:16:e7:06:01:d3:bc:57:03:06:4b:ea:c7:31:52:
e7:0f:64:af:43:dd:75:4d:5a:50:6a:5c:7a:cd:ac:
1e:94:3a:30:40:cd:df:0f:fb:53:a9:a8:c2:2e:f0:
8f:24:65:b5:99:ae:03:e3:1c:fa:d6:d2:be:29:2d:
1f:8d:92:6b:f5:2f:58:ec:1f:a4:2c:2a:ae:e6:cb:
c5:93:18:a8:a0:89:f4:f0:2e:ca:e9:05:e0:c6:3e:
95:b4:e5:8b:dc:48:f7:8a:51:1b:b9:6a:75:72:eb:
85:57:cf:99:dd:43:e9:82:98:d0:22:59:8c:48:cc:
e9:21:68:f4:d7:d0:ab:8b:19:78:1b:fe:5d:2e:9e:
56:2b:dd:e1:a4:90:55:b1:6f:39:fb:5e:5c:5a:0d:
a7:09:fa:f1:48:87:2d:eb:31:a3:c7:55:71:3d:cf:
e5:e5:57:f7:60:ec:9e:87:62:e5:39:f6:eb:49:41:
47:7f:25:98:89:7a:cd:18:55:c5:ea:e7:bf:0b:e1:
22:a9:99:08:68:7d:5c:92:98:67:b2:a5:84:5e:f7:
a1:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:09:DF:6C:3A:0A:A1:C9:9C:94:4D:2A:34:78:91:E7:4C:72:26:3D
X509v3 Authority Key Identifier:
keyid:74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/_gnfbDoKocmclE0qNHiR50xyJj0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.65.203.0/24
Signature Algorithm: sha256WithRSAEncryption
53:f7:ea:60:65:ac:10:4a:2c:a3:9b:5b:8e:ab:2f:ee:3d:d2:
d7:dd:02:ab:88:c6:8d:9c:f0:ce:97:f6:15:59:1c:55:08:e1:
ca:71:cc:98:14:cd:67:19:be:ed:dc:bb:ac:c4:85:ed:0b:d4:
9b:cd:23:16:62:91:37:a6:97:c6:96:7f:c8:fc:6f:89:88:77:
e3:4e:29:d6:10:59:9c:d7:b0:8a:9c:74:b4:74:db:8c:96:c6:
70:65:f4:7c:21:ac:f1:7b:37:0d:b3:78:b2:b7:4b:e9:06:9a:
2c:a5:b2:43:53:5e:e2:1e:de:83:03:8d:5b:64:23:93:2d:a0:
bb:40:c9:8b:ec:20:55:fb:0c:b4:81:d4:0d:03:fb:2d:88:ef:
52:ac:03:58:25:6a:08:5c:48:1c:8d:50:52:99:62:21:8e:3b:
84:82:90:11:1f:ce:7a:a8:2d:2a:47:59:7e:4d:9e:18:36:7f:
a4:80:77:3b:7a:9a:74:a8:f4:ad:0e:55:89:fe:7b:61:bf:e0:
10:3b:77:28:d6:a9:24:9e:67:4a:23:52:12:e0:c1:bb:ba:8e:
62:9e:50:d1:ef:77:a2:f6:54:8b:37:2b:f0:f8:de:19:11:53:
ce:42:bc:ea:9f:4a:19:00:7b:ba:c5:32:46:ad:27:8a:a7:22:
67:8e:67:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:14:20 2024 by rpki-client on console-fra.rpki-client.org