Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/f2cc54-722a-495f-a94c-2836ad1c321e/1/X5vjGxFTz6PxQ9gVXrqw6e_N06c.roa
File: X5vjGxFTz6PxQ9gVXrqw6e_N06c.roa (raw, json)
Hash identifier: SV56lSzCbD4GTXAsCvSCsD5HUdWxTttzmUxtkwsokQs=
Subject key identifier: 5F:9B:E3:1B:11:53:CF:A3:F1:43:D8:15:5E:BA:B0:E9:EF:CD:D3:A7
Certificate issuer: /CN=67c7c282b0697ed0554c805f5000ab12ba3b9c7e
Certificate serial: 018CC5DC93FE8AFAB7535568B2F6C04FF446
Authority key identifier: 67:C7:C2:82:B0:69:7E:D0:55:4C:80:5F:50:00:AB:12:BA:3B:9C:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8fCgrBpftBVTIBfUACrEro7nH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/f2cc54-722a-495f-a94c-2836ad1c321e/1/X5vjGxFTz6PxQ9gVXrqw6e_N06c.roa
Signing time: Mon 01 Jan 2024 16:30:16 +0000
ROA not before: Mon 01 Jan 2024 16:30:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204945
IP address blocks: 185.210.116.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/f2cc54-722a-495f-a94c-2836ad1c321e/1/Z8fCgrBpftBVTIBfUACrEro7nH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/f2cc54-722a-495f-a94c-2836ad1c321e/1/Z8fCgrBpftBVTIBfUACrEro7nH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z8fCgrBpftBVTIBfUACrEro7nH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:93:fe:8a:fa:b7:53:55:68:b2:f6:c0:4f:f4:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67c7c282b0697ed0554c805f5000ab12ba3b9c7e
Validity
Not Before: Jan 1 16:30:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5f9be31b1153cfa3f143d8155ebab0e9efcdd3a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:76:f7:4f:4b:53:a2:72:04:72:55:af:22:9e:
28:fd:3c:2c:f9:21:bd:ac:0c:52:bf:a2:2a:cb:c0:
46:12:b4:0b:f4:f3:94:ab:be:f2:df:3e:cf:ee:36:
fe:68:75:96:03:de:a9:93:58:0e:a3:9b:5a:df:99:
e3:be:3d:e3:1f:8f:df:a1:c5:7a:a8:9a:ff:a5:e7:
ff:38:92:17:dd:e6:2c:2f:6b:df:fd:e0:17:24:34:
51:87:00:e7:27:f5:24:ce:1c:6c:f7:2b:7c:42:52:
d0:a6:92:04:1f:af:6a:56:cd:8d:83:44:ef:ec:30:
6d:ba:e4:cf:2f:35:aa:6f:b4:c5:b7:38:82:d4:cb:
d0:2f:16:02:05:4d:95:5f:08:74:03:8c:52:08:ec:
af:a4:59:36:b7:4d:f9:c9:d2:41:5d:98:ce:c5:32:
5e:91:c6:a4:fb:30:1b:11:06:78:dd:5c:94:43:76:
0d:37:42:b8:41:47:6e:a7:bb:81:cc:b8:4d:21:21:
94:c9:71:6c:a9:8f:4a:94:25:3b:6a:c2:e9:bb:7a:
61:66:89:8f:ca:11:08:96:51:d2:f1:29:9b:e3:03:
bb:cb:86:28:df:b4:0e:96:0d:c9:68:72:b1:9d:06:
eb:35:a5:d3:18:b8:52:bd:aa:ab:34:e4:57:0d:af:
3d:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:9B:E3:1B:11:53:CF:A3:F1:43:D8:15:5E:BA:B0:E9:EF:CD:D3:A7
X509v3 Authority Key Identifier:
keyid:67:C7:C2:82:B0:69:7E:D0:55:4C:80:5F:50:00:AB:12:BA:3B:9C:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8fCgrBpftBVTIBfUACrEro7nH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/f2cc54-722a-495f-a94c-2836ad1c321e/1/X5vjGxFTz6PxQ9gVXrqw6e_N06c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/f2cc54-722a-495f-a94c-2836ad1c321e/1/Z8fCgrBpftBVTIBfUACrEro7nH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.210.116.0/23
Signature Algorithm: sha256WithRSAEncryption
ea:5e:05:90:9a:00:b7:d8:67:15:ac:d0:3f:2e:08:4f:15:2b:
3a:29:74:31:28:7b:65:9e:93:de:c2:23:4f:b5:c7:d4:10:38:
f9:65:16:87:01:1d:d4:43:d5:2d:46:91:1f:31:cf:97:e7:f2:
64:ce:e7:38:6c:48:c2:6e:64:af:19:f2:e1:85:ed:51:1b:85:
3c:3f:6f:c0:d2:ef:2c:d6:ff:70:50:f4:f3:f8:4b:aa:bd:4e:
f8:2a:35:59:d3:75:71:03:98:11:b4:f3:37:ed:74:3f:a2:33:
5d:34:f7:cf:54:20:24:82:64:ff:97:b0:6d:a6:a4:aa:77:80:
39:55:fc:b0:20:a2:82:81:e8:4d:dc:60:20:1e:4d:9e:68:95:
fa:dd:69:e8:eb:af:ab:ca:cd:80:5a:af:7e:92:10:cd:17:ac:
e5:21:60:c2:95:85:07:7a:53:93:72:22:88:57:0a:25:14:49:
fc:83:c7:52:56:e6:2a:db:c5:83:cc:8d:09:bd:05:27:61:4f:
9f:e6:5a:07:9b:45:e4:13:75:9a:91:92:12:ca:74:09:8b:2f:
ed:5e:ee:ca:7c:25:db:ff:df:f7:39:5a:11:24:23:98:9d:a0:
c7:8c:08:03:b8:6c:ca:93:08:7b:cf:80:e0:b9:88:f7:97:de:
a7:b7:5e:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 07:57:20 2024 by rpki-client on console-fra.rpki-client.org