Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/1df8e1-6e80-443c-b6e8-d9f905fdc89a/1/PbfRMjn3WsIZO0-DCZfHvSvJXGI.roa
File: PbfRMjn3WsIZO0-DCZfHvSvJXGI.roa (raw, json)
Hash identifier: kH52aKaA0KTQA496SgsgW9wWcM6fuzNiW60ZLGn9ZY4=
Subject key identifier: 3D:B7:D1:32:39:F7:5A:C2:19:3B:4F:83:09:97:C7:BD:2B:C9:5C:62
Certificate issuer: /CN=2c11a53f6df6300b4912ce13f6fa9b100fce2488
Certificate serial: 018CC72607CEF86C33D73BD4248F100F32B5
Authority key identifier: 2C:11:A5:3F:6D:F6:30:0B:49:12:CE:13:F6:FA:9B:10:0F:CE:24:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LBGlP232MAtJEs4T9vqbEA_OJIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/1df8e1-6e80-443c-b6e8-d9f905fdc89a/1/PbfRMjn3WsIZO0-DCZfHvSvJXGI.roa
Signing time: Mon 01 Jan 2024 22:30:07 +0000
ROA not before: Mon 01 Jan 2024 22:30:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212562
IP address blocks: 185.108.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/1df8e1-6e80-443c-b6e8-d9f905fdc89a/1/LBGlP232MAtJEs4T9vqbEA_OJIg.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/1df8e1-6e80-443c-b6e8-d9f905fdc89a/1/LBGlP232MAtJEs4T9vqbEA_OJIg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LBGlP232MAtJEs4T9vqbEA_OJIg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 10:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:26:07:ce:f8:6c:33:d7:3b:d4:24:8f:10:0f:32:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c11a53f6df6300b4912ce13f6fa9b100fce2488
Validity
Not Before: Jan 1 22:30:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3db7d13239f75ac2193b4f830997c7bd2bc95c62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:ee:16:a6:27:8c:a7:4a:3e:9a:eb:f3:ff:59:
2b:bb:a0:cc:e7:7a:d9:6a:d6:f8:7a:31:93:04:ce:
c9:0b:6c:fc:aa:d4:ca:b8:4c:61:be:00:0a:cc:24:
65:e0:e8:1d:8d:ca:75:a7:33:a6:41:7f:dc:fa:d5:
c5:69:54:8a:89:93:d7:84:c4:4a:3c:11:20:72:87:
0b:df:88:48:84:4a:11:b5:11:e1:09:bf:2f:82:5a:
75:54:08:86:d9:3f:8b:c4:a4:0d:6f:73:00:1b:b3:
91:82:fb:44:c5:45:17:ce:a9:16:ca:60:c5:ac:c5:
bd:7f:d6:8f:6b:b3:4c:40:94:65:50:b2:eb:1e:27:
05:23:a6:bf:ed:e4:16:8b:a8:32:03:6e:09:58:3f:
90:4f:da:dc:97:53:60:7e:52:e4:c5:4a:95:93:49:
f1:89:26:bc:0c:bf:49:f3:44:9a:dd:e4:a3:e3:f9:
59:8e:3e:af:e6:8a:c5:1d:64:aa:01:a4:88:4b:9e:
26:e3:cd:05:41:b8:cc:e6:c3:29:88:19:d4:75:7d:
cd:1c:20:6f:f0:a9:5a:bd:53:b2:bd:7d:87:9c:85:
a9:24:25:e3:62:13:da:96:15:8c:26:f0:36:e8:91:
c7:bd:9c:55:e7:47:57:1e:c5:e8:0d:f8:7f:e3:01:
fa:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:B7:D1:32:39:F7:5A:C2:19:3B:4F:83:09:97:C7:BD:2B:C9:5C:62
X509v3 Authority Key Identifier:
keyid:2C:11:A5:3F:6D:F6:30:0B:49:12:CE:13:F6:FA:9B:10:0F:CE:24:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LBGlP232MAtJEs4T9vqbEA_OJIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1df8e1-6e80-443c-b6e8-d9f905fdc89a/1/PbfRMjn3WsIZO0-DCZfHvSvJXGI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1df8e1-6e80-443c-b6e8-d9f905fdc89a/1/LBGlP232MAtJEs4T9vqbEA_OJIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.108.125.0/24
Signature Algorithm: sha256WithRSAEncryption
e3:54:ac:6b:3f:31:c0:14:79:5b:63:0f:0c:d0:1d:06:29:73:
72:8c:fb:57:62:53:ed:eb:80:08:5f:d2:d9:90:9d:f0:1f:ac:
ac:8f:c5:23:2d:d1:be:b4:c5:1c:0d:97:cc:02:d9:16:ae:35:
cc:e8:0b:9b:82:80:39:22:7b:b7:98:31:37:d8:2f:88:d0:ea:
06:d6:6e:6c:5e:bb:fc:5a:1f:ac:14:f5:60:0f:5e:8d:86:65:
74:5e:05:18:6e:be:5a:c6:00:a4:d6:17:6c:b2:82:aa:d3:3e:
6d:41:41:b5:6f:4a:58:76:12:c1:7f:9d:92:29:72:60:0a:e7:
a2:c5:38:c1:de:4d:26:c9:91:58:1d:ca:de:47:6e:4f:ed:c8:
b3:7d:1e:e5:a3:97:9d:fe:8b:85:f0:9a:e5:6b:84:3b:57:ba:
b5:3b:c2:9c:f6:cc:b6:07:85:db:ce:a9:29:37:c9:e5:a9:4b:
45:49:29:f9:19:48:09:20:93:6c:56:bc:4b:04:37:fb:3e:0c:
1d:26:62:3b:51:7b:27:b3:6a:39:61:9f:4e:d1:f9:a1:e0:c2:
74:a1:c2:ee:92:21:72:bf:ed:f2:e4:27:88:68:f0:57:0c:f9:
90:d4:f1:48:8c:b0:28:a9:56:8a:ef:53:8c:4f:83:83:c6:27:
f9:e0:eb:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 16:55:35 2024 by rpki-client on console-ams.rpki-client.org