Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/1f8a09-4365-4bba-8e35-5ee274eb7eab/1/1lu4bP9YOkN3DpY4QkLRLRJAiMI.roa
File: 1lu4bP9YOkN3DpY4QkLRLRJAiMI.roa (raw, json)
Hash identifier: JMp07ngx3BrU1+qsZxthogAOPOV/RA81YA00DF+9Pg8=
Subject key identifier: D6:5B:B8:6C:FF:58:3A:43:77:0E:96:38:42:42:D1:2D:12:40:88:C2
Certificate issuer: /CN=14268e4c2e025330df26fd404cae0f6af26ccc23
Certificate serial: 018CC802D85C1227BFBE6C216892DAB4C996
Authority key identifier: 14:26:8E:4C:2E:02:53:30:DF:26:FD:40:4C:AE:0F:6A:F2:6C:CC:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FCaOTC4CUzDfJv1ATK4PavJszCM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/1f8a09-4365-4bba-8e35-5ee274eb7eab/1/1lu4bP9YOkN3DpY4QkLRLRJAiMI.roa
Signing time: Tue 02 Jan 2024 02:31:18 +0000
ROA not before: Tue 02 Jan 2024 02:31:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210424
IP address blocks: 185.65.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/1f8a09-4365-4bba-8e35-5ee274eb7eab/1/FCaOTC4CUzDfJv1ATK4PavJszCM.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/1f8a09-4365-4bba-8e35-5ee274eb7eab/1/FCaOTC4CUzDfJv1ATK4PavJszCM.mft
rsync://rpki.ripe.net/repository/DEFAULT/FCaOTC4CUzDfJv1ATK4PavJszCM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 May 2024 22:03:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:d8:5c:12:27:bf:be:6c:21:68:92:da:b4:c9:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14268e4c2e025330df26fd404cae0f6af26ccc23
Validity
Not Before: Jan 2 02:31:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d65bb86cff583a43770e96384242d12d124088c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:48:e4:70:3f:7a:4f:74:f3:b8:22:9c:c4:40:
ea:96:4e:bd:8a:75:67:79:54:18:7a:98:ed:c7:e1:
08:ef:25:2a:61:17:ed:22:42:42:f0:18:50:07:3e:
08:1c:39:d6:4f:2b:96:0d:20:7e:b0:21:50:26:dc:
e9:04:5d:01:cf:6c:be:2a:17:3b:4a:bf:34:54:a4:
f2:3b:6e:9b:94:b3:71:a1:63:ee:03:05:91:bf:67:
92:10:37:f2:01:dc:b2:a3:d6:1b:c7:85:dd:29:22:
04:1f:c8:71:3c:72:15:88:5c:d6:20:e9:27:ce:a8:
2b:4f:a1:a7:5d:52:02:83:c5:49:0b:6f:69:89:1b:
55:51:71:f5:9d:ea:54:cc:a5:61:dc:ec:b8:0c:9b:
c2:7a:5d:a3:cc:4d:b1:b9:31:bf:6c:99:44:76:b5:
14:ca:c8:40:96:e8:0e:b9:5a:6f:5f:76:37:81:8c:
72:7d:a4:c1:42:9f:a1:40:0f:ab:89:62:59:62:5b:
c2:4b:e9:55:46:ee:9e:a6:3b:18:23:ac:8c:2f:fc:
f8:09:a8:2c:e6:a2:55:2e:9c:88:48:c3:90:9d:26:
de:5c:64:c6:b6:1f:b5:c8:e6:a0:04:ff:25:a6:fa:
7d:df:74:d2:12:0e:0b:ec:a4:09:09:74:b1:13:4b:
10:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:5B:B8:6C:FF:58:3A:43:77:0E:96:38:42:42:D1:2D:12:40:88:C2
X509v3 Authority Key Identifier:
keyid:14:26:8E:4C:2E:02:53:30:DF:26:FD:40:4C:AE:0F:6A:F2:6C:CC:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FCaOTC4CUzDfJv1ATK4PavJszCM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/1f8a09-4365-4bba-8e35-5ee274eb7eab/1/1lu4bP9YOkN3DpY4QkLRLRJAiMI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/1f8a09-4365-4bba-8e35-5ee274eb7eab/1/FCaOTC4CUzDfJv1ATK4PavJszCM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.65.77.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:0b:6c:da:c9:48:bd:84:cc:66:f6:e6:41:1a:06:b6:a0:bd:
c4:4b:b7:b9:b9:51:cc:b6:4c:a1:2d:c9:d4:02:bc:d6:4e:ba:
a4:d1:2a:f2:c3:be:d4:b8:41:cc:87:55:13:95:03:61:fe:0c:
bc:fe:96:63:9b:d6:8f:e8:90:34:c0:13:03:8b:c7:15:ac:32:
08:07:73:a2:64:82:7a:36:77:b7:5f:a3:72:09:8a:64:e2:f0:
4e:e3:83:34:9f:14:2d:7a:a2:c2:ba:2c:1c:09:cb:9e:bf:6e:
96:38:5b:cb:3f:f5:c9:00:25:0e:86:db:0a:70:01:d2:b3:dd:
0e:61:c2:37:88:9b:ce:06:96:88:ea:9f:82:21:4f:be:2e:f9:
87:0f:01:6d:a9:97:7c:49:6a:1e:55:a0:16:8f:87:49:f0:3d:
79:d4:15:2a:00:4a:6b:52:aa:a3:1e:6e:1c:5a:90:e5:b5:1d:
1d:0e:ea:3b:97:3a:a3:d5:c9:bc:fc:8c:ad:c6:9a:e0:22:66:
88:96:3b:6c:31:20:e7:29:3c:dd:fa:65:53:d0:72:d0:de:c9:
b3:ac:06:a5:85:5d:00:90:5e:d0:5b:26:d7:36:82:c6:ee:fc:
70:aa:c1:77:15:87:12:36:60:47:31:9c:e3:96:40:33:71:17:
21:95:21:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 26 04:01:18 2024 by rpki-client on console-fra.rpki-client.org