Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/a93da0-e155-4324-9ba9-62098d1ec1e6/1/s__rV7I-cnxbTLc2p_EI0Z_szpE.roa
File: s__rV7I-cnxbTLc2p_EI0Z_szpE.roa (raw, json)
Hash identifier: z0yOk+TVUWbTQ/4gCxbBp08PI+9NAg6vJZUJh7pZwKY=
Subject key identifier: B3:FF:EB:57:B2:3E:72:7C:5B:4C:B7:36:A7:F1:08:D1:9F:EC:CE:91
Certificate issuer: /CN=d04079bb7070ed0eeea3a1a467c79462bcc5455f
Certificate serial: 018CC64A7D4FA5BD430962BCF915D3CAC6DE
Authority key identifier: D0:40:79:BB:70:70:ED:0E:EE:A3:A1:A4:67:C7:94:62:BC:C5:45:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/a93da0-e155-4324-9ba9-62098d1ec1e6/1/s__rV7I-cnxbTLc2p_EI0Z_szpE.roa
Signing time: Mon 01 Jan 2024 18:30:19 +0000
ROA not before: Mon 01 Jan 2024 18:30:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202867
IP address blocks: 185.152.8.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/a93da0-e155-4324-9ba9-62098d1ec1e6/1/0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/a93da0-e155-4324-9ba9-62098d1ec1e6/1/0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:7d:4f:a5:bd:43:09:62:bc:f9:15:d3:ca:c6:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d04079bb7070ed0eeea3a1a467c79462bcc5455f
Validity
Not Before: Jan 1 18:30:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b3ffeb57b23e727c5b4cb736a7f108d19fecce91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d3:af:82:38:39:ae:9e:2b:30:40:6b:2d:d8:
65:ab:74:e6:04:b6:a8:51:99:99:44:17:1e:43:35:
25:e7:d8:d3:bc:38:04:17:e8:ae:d6:84:e8:55:5d:
db:67:0a:96:c7:f3:aa:0d:75:7b:9a:6c:3e:83:7e:
82:09:1e:cc:da:88:5a:b9:0e:62:d1:a7:06:a0:51:
67:bd:f3:5b:32:17:be:02:ea:e5:16:de:7b:b7:5b:
89:49:67:10:4e:fe:9f:a5:a1:c3:03:f4:a2:f4:bf:
ba:b7:dc:95:e5:8a:a2:72:d3:ad:90:98:5d:cd:08:
0c:f6:0b:ae:49:41:b9:75:56:fb:de:10:4c:83:13:
5e:18:92:65:e9:c9:bb:67:68:2d:5c:46:d3:77:ae:
ae:09:15:86:46:d3:42:20:b7:8e:6e:d4:0f:66:1f:
51:84:0b:f6:c9:98:ef:d6:34:91:5e:be:1f:48:9d:
91:50:05:78:48:ce:7e:94:9a:15:1c:b5:f7:5c:d6:
cd:6c:45:cb:36:a3:72:22:57:3f:f1:d5:5e:87:24:
47:63:e5:cf:28:9b:39:6f:c0:23:0b:bb:05:55:e3:
d5:d6:e5:43:55:4a:b2:73:6b:ee:9f:5f:85:af:10:
2f:8d:03:bf:3d:0e:9f:9f:2e:83:ba:f6:fb:9d:a5:
88:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:FF:EB:57:B2:3E:72:7C:5B:4C:B7:36:A7:F1:08:D1:9F:EC:CE:91
X509v3 Authority Key Identifier:
keyid:D0:40:79:BB:70:70:ED:0E:EE:A3:A1:A4:67:C7:94:62:BC:C5:45:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a93da0-e155-4324-9ba9-62098d1ec1e6/1/s__rV7I-cnxbTLc2p_EI0Z_szpE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a93da0-e155-4324-9ba9-62098d1ec1e6/1/0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.152.8.0/22
Signature Algorithm: sha256WithRSAEncryption
5c:66:9e:5e:de:af:0e:52:e1:75:bb:d9:3a:a0:f1:bc:6f:f1:
af:d2:82:1f:60:19:c7:69:78:33:9a:cf:37:b4:6d:41:d2:78:
44:5a:e9:72:16:43:76:42:e5:01:03:1c:10:65:1a:02:3e:25:
ec:61:fb:9a:9d:10:b5:1f:32:f3:d6:3a:36:b3:78:38:03:eb:
39:d1:04:d4:12:e5:43:11:3d:b4:ad:3f:fc:27:0a:94:29:0f:
eb:2f:8d:66:e8:f7:f6:68:65:77:14:76:a2:6c:be:05:3b:d8:
dc:eb:bb:a6:85:ff:c8:c7:95:15:5f:2f:bb:19:20:c6:62:89:
a9:75:01:51:d0:ee:5c:20:be:69:be:e5:04:99:50:a2:e2:4c:
4d:c4:2b:d6:c7:c5:ba:54:4e:3b:fb:bc:db:09:86:ec:12:b0:
90:99:34:e3:95:1a:b2:60:a1:ef:ee:16:5c:a9:f9:45:f4:f2:
59:21:79:7a:ad:73:84:94:26:ce:25:8c:85:ad:c8:d6:6a:a1:
25:2c:23:a8:0d:93:2d:02:f0:18:34:ff:b4:1d:8e:a0:08:1a:
b8:97:16:3b:8a:c1:51:46:9c:6f:5a:3c:15:f0:d7:ee:ab:69:
6b:c8:33:de:3d:0d:4c:05:fe:b5:a7:ce:e5:e6:3e:c4:28:a7:
8d:9d:97:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:01:30 2024 by rpki-client on console-ams.rpki-client.org