Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/b278df-ed37-4de7-a675-107a8d85bd30/1/vFwZf9kuXtxz0p7I4syA6LonmaA.roa
File: vFwZf9kuXtxz0p7I4syA6LonmaA.roa (raw, json)
Hash identifier: VkrT58e8zaEPUvZ0KqmvODl3Uq6qt8Z97tYGa+zSvHA=
Subject key identifier: BC:5C:19:7F:D9:2E:5E:DC:73:D2:9E:C8:E2:CC:80:E8:BA:27:99:A0
Certificate issuer: /CN=ed5a6ba2d2248bc4782ac0fdb3c64b946640b09c
Certificate serial: 018CC7276F74064F25CD104F10618C2080F6
Authority key identifier: ED:5A:6B:A2:D2:24:8B:C4:78:2A:C0:FD:B3:C6:4B:94:66:40:B0:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7VprotIki8R4KsD9s8ZLlGZAsJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/b278df-ed37-4de7-a675-107a8d85bd30/1/vFwZf9kuXtxz0p7I4syA6LonmaA.roa
Signing time: Mon 01 Jan 2024 22:31:39 +0000
ROA not before: Mon 01 Jan 2024 22:31:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212384
IP address blocks: 185.147.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/b278df-ed37-4de7-a675-107a8d85bd30/1/7VprotIki8R4KsD9s8ZLlGZAsJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/b278df-ed37-4de7-a675-107a8d85bd30/1/7VprotIki8R4KsD9s8ZLlGZAsJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/7VprotIki8R4KsD9s8ZLlGZAsJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 May 2024 13:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:6f:74:06:4f:25:cd:10:4f:10:61:8c:20:80:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed5a6ba2d2248bc4782ac0fdb3c64b946640b09c
Validity
Not Before: Jan 1 22:31:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bc5c197fd92e5edc73d29ec8e2cc80e8ba2799a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:dd:39:89:eb:da:32:c7:0e:63:01:d0:6d:25:
db:26:b8:fc:7a:3b:69:30:6f:d1:28:94:d7:ec:f5:
b7:66:00:14:5f:1e:ed:bf:22:a7:c6:93:5d:cd:df:
57:b6:c5:77:1c:ff:61:ee:5a:90:de:3f:be:2a:df:
14:c7:7e:2e:bb:3f:6e:18:25:c8:59:4d:38:1a:47:
68:4c:c3:6b:24:a9:b9:e4:6c:70:42:cc:8c:47:8e:
3d:74:44:c9:03:09:5f:1d:67:ee:62:5d:89:a1:ae:
85:f9:dd:fa:0d:f5:31:09:8e:29:48:50:44:d4:8f:
d2:da:e2:e7:5d:84:85:17:ba:77:5f:1d:c2:b8:b1:
3f:a5:5a:c5:1c:f1:c7:4e:39:a7:b1:31:14:c3:a3:
4a:be:ca:70:4c:28:8b:15:c7:e1:d3:8e:fb:16:9a:
9f:16:c3:17:96:97:97:bb:6d:cf:22:aa:8a:12:e4:
b0:4d:97:a0:8d:8f:8d:b0:d9:e7:b0:27:ca:ac:81:
07:47:85:5a:1d:56:5e:2a:a1:4e:c7:f7:12:1a:52:
f1:34:e8:d4:e3:14:46:45:62:3b:a4:fa:df:f7:c7:
5a:44:8b:1e:fc:79:8b:be:de:65:24:2b:b3:dc:2f:
cd:78:00:f7:40:d2:15:64:fa:84:b0:39:d4:3f:37:
2b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:5C:19:7F:D9:2E:5E:DC:73:D2:9E:C8:E2:CC:80:E8:BA:27:99:A0
X509v3 Authority Key Identifier:
keyid:ED:5A:6B:A2:D2:24:8B:C4:78:2A:C0:FD:B3:C6:4B:94:66:40:B0:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7VprotIki8R4KsD9s8ZLlGZAsJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/b278df-ed37-4de7-a675-107a8d85bd30/1/vFwZf9kuXtxz0p7I4syA6LonmaA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/b278df-ed37-4de7-a675-107a8d85bd30/1/7VprotIki8R4KsD9s8ZLlGZAsJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.147.55.0/24
Signature Algorithm: sha256WithRSAEncryption
54:cb:53:55:ae:b2:c5:6c:d2:81:65:8f:db:9a:cc:05:c2:14:
ed:08:76:a0:81:12:9b:b2:21:d2:c3:93:70:c6:90:6d:cf:5d:
4f:3a:31:f7:c1:a9:6f:16:d0:e5:75:43:12:70:33:1a:5e:fe:
7c:36:ed:47:5c:9a:a9:a7:2d:fa:46:26:4d:f7:20:ff:e1:64:
17:63:ae:c8:fa:3a:cd:8c:b5:ab:42:a4:ff:96:ff:cc:b9:6c:
17:79:ef:23:e6:bc:93:08:d6:77:73:13:aa:51:10:4b:af:25:
c3:a5:40:91:af:48:b3:96:c1:27:da:c7:e7:a7:d3:35:45:c4:
f4:6f:25:42:df:c8:75:3f:a2:a6:ac:cb:0a:b5:9b:11:8f:7c:
ba:68:2a:54:54:a0:c2:80:e7:9c:7b:dd:d8:29:c2:10:f0:30:
47:67:31:1b:75:0a:7d:51:a6:1b:f3:cd:5e:01:86:57:50:08:
f3:25:a8:a6:0b:6a:a4:3f:56:95:6a:14:2d:cb:a3:8a:c1:a5:
a5:c3:5c:91:66:94:d3:93:20:9e:14:63:ff:3a:c3:ba:45:d9:
b5:f7:47:b0:f1:6d:a4:32:2b:c0:46:01:31:7b:fc:02:bb:63:
e7:9b:f2:37:58:dc:31:b7:00:02:8e:07:5f:03:92:5e:3c:76:
d1:2f:87:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 16:34:23 2024 by rpki-client on console-ams.rpki-client.org