Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/39ede1-bfe1-472e-874c-7c1f0cdfce77/1/V04YU_CBaK-D1qOuMvvQnQAQwQM.roa
File: V04YU_CBaK-D1qOuMvvQnQAQwQM.roa (raw, json)
Hash identifier: mf97q4Q0WbMCJ1T8+7heB3NfBmmHSWrioc4W5X0KqVs=
Subject key identifier: 57:4E:18:53:F0:81:68:AF:83:D6:A3:AE:32:FB:D0:9D:00:10:C1:03
Certificate issuer: /CN=c2a29cc518010f7676353ff296644d9bd4a355cb
Certificate serial: 018D0C78344453659848010ECCA41E7DBBE5
Authority key identifier: C2:A2:9C:C5:18:01:0F:76:76:35:3F:F2:96:64:4D:9B:D4:A3:55:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wqKcxRgBD3Z2NT_ylmRNm9SjVcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/39ede1-bfe1-472e-874c-7c1f0cdfce77/1/V04YU_CBaK-D1qOuMvvQnQAQwQM.roa
Signing time: Mon 15 Jan 2024 09:33:40 +0000
ROA not before: Mon 15 Jan 2024 09:33:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205146
IP address blocks: 185.227.191.0/24 maxlen: 24
185.227.188.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/39ede1-bfe1-472e-874c-7c1f0cdfce77/1/wqKcxRgBD3Z2NT_ylmRNm9SjVcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/39ede1-bfe1-472e-874c-7c1f0cdfce77/1/wqKcxRgBD3Z2NT_ylmRNm9SjVcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/wqKcxRgBD3Z2NT_ylmRNm9SjVcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:0c:78:34:44:53:65:98:48:01:0e:cc:a4:1e:7d:bb:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2a29cc518010f7676353ff296644d9bd4a355cb
Validity
Not Before: Jan 15 09:33:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=574e1853f08168af83d6a3ae32fbd09d0010c103
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:57:3d:3c:b4:35:8d:9e:12:f3:df:46:53:45:
b4:fd:12:5d:b3:34:77:4f:e9:d9:72:0e:75:91:df:
d5:cd:26:26:72:a7:40:61:05:6e:cb:98:5c:eb:38:
83:ba:79:b9:15:64:fa:ff:c0:1d:3a:33:c4:8d:d3:
77:7d:1b:32:2a:97:10:fb:b3:81:df:7a:d1:fa:42:
6f:68:3e:b1:7a:13:56:90:0b:af:1b:79:d5:89:b1:
25:3a:03:88:5e:5a:6a:b2:e3:79:1b:27:09:fc:7b:
12:af:e2:27:8a:3f:2b:f7:5f:d7:4c:02:63:3a:f8:
ac:92:e4:1f:47:ab:80:7e:50:29:13:38:f8:9b:47:
52:43:f3:3e:b5:4c:5f:9a:61:73:cd:fa:61:a9:0e:
50:4e:eb:1e:14:7b:ce:60:a7:e0:44:1e:8b:9e:6d:
cd:71:2d:6b:a0:ca:d1:d2:d9:ed:f8:4b:46:31:28:
59:f4:d2:02:b0:e0:bf:c0:d7:c5:b1:e0:c2:96:a4:
36:fe:60:e7:ba:e5:c8:13:09:da:ca:04:71:35:05:
5c:e8:20:ef:bf:3f:59:70:5e:90:a2:99:d2:97:e4:
4a:c2:44:b8:c6:56:d4:ae:d1:93:28:fa:6c:12:dd:
56:a9:37:1b:81:b7:7d:fc:99:60:02:98:1f:0e:fa:
2d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:4E:18:53:F0:81:68:AF:83:D6:A3:AE:32:FB:D0:9D:00:10:C1:03
X509v3 Authority Key Identifier:
keyid:C2:A2:9C:C5:18:01:0F:76:76:35:3F:F2:96:64:4D:9B:D4:A3:55:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wqKcxRgBD3Z2NT_ylmRNm9SjVcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/39ede1-bfe1-472e-874c-7c1f0cdfce77/1/V04YU_CBaK-D1qOuMvvQnQAQwQM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/39ede1-bfe1-472e-874c-7c1f0cdfce77/1/wqKcxRgBD3Z2NT_ylmRNm9SjVcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.227.188.0/23
185.227.191.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:50:44:62:cc:18:f6:06:6b:1c:51:d8:64:dc:71:df:81:58:
54:f1:bf:2e:ed:66:ee:77:e7:42:aa:4f:64:df:1e:24:80:6f:
88:5a:0e:6c:5b:a9:cc:26:b0:c5:b3:2a:99:15:97:23:10:2d:
67:63:96:77:de:5b:67:50:6d:46:32:9a:79:f9:70:54:09:ed:
27:d4:8a:49:47:57:dd:78:f0:ff:6d:9c:cc:f9:52:60:e6:13:
f1:3f:18:2e:fb:5f:ef:a3:86:2a:1c:08:43:df:b6:14:08:9b:
0a:b5:45:b7:47:ad:e5:d9:e0:78:eb:fa:79:81:f0:de:19:dd:
b9:95:85:54:51:b0:ce:8c:5e:3b:56:91:c8:4f:2f:14:db:35:
c4:c6:2f:eb:05:13:3e:bb:09:91:f4:bf:cb:e5:c7:57:ac:b6:
c4:3d:da:d2:a3:6c:1d:35:17:79:1a:11:39:f5:59:22:0c:7b:
75:2a:78:f3:0a:24:00:8f:89:bd:e3:9d:e6:91:16:cc:55:f3:
5e:0f:75:cc:f9:fb:2a:51:e8:c4:4c:e7:df:d7:e4:34:59:b5:
dd:f8:94:54:40:03:0f:6b:72:74:03:46:03:18:18:d9:cf:ed:
a9:e9:61:a0:46:00:47:72:37:2a:28:af:66:4d:c6:77:4d:5c:
33:53:f6:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 05:22:48 2024 by rpki-client on console-fra.rpki-client.org