Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/0d6375-4765-4e0e-9363-6e8e07d66c9b/1/1V5MqI2z_WHuuWfvH5c83aUKzYM.roa
File: 1V5MqI2z_WHuuWfvH5c83aUKzYM.roa (raw, json)
Hash identifier: A1Q2+Rr6q1G5xVh8ZsgvdOgPG1VOr1CaRpQo6FrTGBQ=
Subject key identifier: D5:5E:4C:A8:8D:B3:FD:61:EE:B9:67:EF:1F:97:3C:DD:A5:0A:CD:83
Certificate issuer: /CN=a09cd8c71a6e33282c045d8f88c3b378acf41bd9
Certificate serial: 018DEFDB61740F0076D5ADA377DD165BF2DB
Authority key identifier: A0:9C:D8:C7:1A:6E:33:28:2C:04:5D:8F:88:C3:B3:78:AC:F4:1B:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oJzYxxpuMygsBF2PiMOzeKz0G9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/0d6375-4765-4e0e-9363-6e8e07d66c9b/1/1V5MqI2z_WHuuWfvH5c83aUKzYM.roa
Signing time: Wed 28 Feb 2024 13:15:48 +0000
ROA not before: Wed 28 Feb 2024 13:15:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21419
IP address blocks: 178.21.160.0/21 maxlen: 21
178.21.161.0/24 maxlen: 24
178.21.162.0/24 maxlen: 24
178.21.163.0/24 maxlen: 24
178.21.164.0/24 maxlen: 24
178.21.166.0/24 maxlen: 24
178.21.167.0/24 maxlen: 26
185.4.1.0/24 maxlen: 24
185.4.2.0/24 maxlen: 24
185.4.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/0d6375-4765-4e0e-9363-6e8e07d66c9b/1/oJzYxxpuMygsBF2PiMOzeKz0G9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/0d6375-4765-4e0e-9363-6e8e07d66c9b/1/oJzYxxpuMygsBF2PiMOzeKz0G9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/oJzYxxpuMygsBF2PiMOzeKz0G9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Sep 2024 16:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:ef:db:61:74:0f:00:76:d5:ad:a3:77:dd:16:5b:f2:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a09cd8c71a6e33282c045d8f88c3b378acf41bd9
Validity
Not Before: Feb 28 13:15:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d55e4ca88db3fd61eeb967ef1f973cdda50acd83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:38:eb:73:62:c5:e5:c0:59:9a:71:2e:f8:1b:
e5:69:ea:fb:f1:2c:cb:c7:b8:11:a1:58:9c:8f:8c:
98:7d:7b:00:da:92:c7:f1:29:98:14:e4:60:ff:8f:
bd:d3:08:64:f3:04:16:49:1d:19:67:fb:90:1c:e0:
dc:1c:4f:a2:48:ac:f0:6e:38:40:65:0a:cb:1b:e0:
25:ea:b8:03:17:a6:fe:e2:9e:a0:64:bf:66:c0:23:
0b:1f:bb:10:d6:5c:c4:dc:cf:c7:9b:ac:a1:0d:49:
85:e8:e8:75:68:05:f5:14:c9:5f:32:95:80:92:db:
31:46:38:86:e0:be:81:bd:41:1d:49:b9:11:25:84:
a2:6a:40:e3:f6:5a:3a:ae:6c:4d:25:90:c1:e6:bd:
a4:9b:2d:1a:33:72:55:c7:c0:34:b1:d8:ad:34:a2:
f8:8b:c5:03:2b:68:88:6f:9d:84:c2:76:62:16:0a:
80:79:9b:46:69:cd:8c:d5:3b:0f:5d:93:b3:13:5d:
96:d3:a0:ed:b4:f2:90:6f:51:da:42:c2:d2:96:85:
f5:bf:74:f6:f1:b0:70:ff:ae:ef:40:4e:36:c4:41:
7a:0f:08:35:2b:a0:a4:ea:fe:ae:16:1f:91:6b:e1:
77:45:72:0b:f7:9e:bd:95:22:a2:79:b1:20:c7:31:
e6:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:5E:4C:A8:8D:B3:FD:61:EE:B9:67:EF:1F:97:3C:DD:A5:0A:CD:83
X509v3 Authority Key Identifier:
keyid:A0:9C:D8:C7:1A:6E:33:28:2C:04:5D:8F:88:C3:B3:78:AC:F4:1B:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oJzYxxpuMygsBF2PiMOzeKz0G9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/0d6375-4765-4e0e-9363-6e8e07d66c9b/1/1V5MqI2z_WHuuWfvH5c83aUKzYM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/0d6375-4765-4e0e-9363-6e8e07d66c9b/1/oJzYxxpuMygsBF2PiMOzeKz0G9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.21.160.0/21
185.4.1.0-185.4.3.255
Signature Algorithm: sha256WithRSAEncryption
5a:56:2e:ae:e9:7f:69:8c:ad:ff:72:9f:9b:37:29:74:45:3e:
78:dc:e1:ac:9e:15:c6:f3:ee:41:3c:98:a0:41:0b:d9:68:8e:
e7:98:3a:63:48:55:e7:6b:6a:29:ca:1a:60:b2:96:3f:91:30:
1e:86:75:1c:8f:eb:f0:5b:84:c4:72:d0:e2:e7:e6:bc:ae:cf:
ac:17:c4:88:6a:81:2d:02:72:46:38:d0:1c:14:bf:4f:c5:ae:
7c:0d:db:20:2d:3a:e1:95:73:03:4a:4c:40:93:05:c1:cc:69:
94:6d:92:24:dc:29:4b:08:d5:e5:51:52:93:13:c8:e6:ee:a3:
85:29:6e:17:a5:a4:bd:40:5a:91:ad:c0:46:64:e8:7d:71:87:
91:95:82:1c:ef:d0:33:88:96:a9:d6:d1:29:b9:f0:73:94:4c:
1c:1b:2f:76:fb:14:5f:6b:02:61:74:62:43:d1:cb:ad:7e:ba:
80:27:23:63:41:43:7c:fe:59:17:be:74:b4:39:03:37:3a:aa:
bb:c5:c9:55:b6:fa:37:0b:2f:ec:81:bd:94:a4:4b:a2:ad:28:
5e:3e:d6:9e:8a:ed:9b:61:3a:73:15:a4:ed:2c:9d:73:35:9a:
8d:29:36:5d:ea:88:8a:be:82:27:0c:7a:11:5e:e5:17:86:4c:
6b:48:b3:91
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Sep 20 19:04:59 2024 by rpki-client on console-fra.rpki-client.org