Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/70c477-a8cd-4a72-b669-1f93c239a012/1/DUcXS28ANkGw_Z3ZV2VKweuQvzE.roa
File: DUcXS28ANkGw_Z3ZV2VKweuQvzE.roa (raw, json)
Hash identifier: jsgxM6NBtPCdHC6RGcefNMCs3JWfel2yzFMJ176B4Zc=
Subject key identifier: 0D:47:17:4B:6F:00:36:41:B0:FD:9D:D9:57:65:4A:C1:EB:90:BF:31
Certificate issuer: /CN=1bd2d463ae15346d5edd7937b8bfa8e09b14376d
Certificate serial: 018CCB114EFBD3A50971ED0B275B7022DC38
Authority key identifier: 1B:D2:D4:63:AE:15:34:6D:5E:DD:79:37:B8:BF:A8:E0:9B:14:37:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G9LUY64VNG1e3Xk3uL-o4JsUN20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/70c477-a8cd-4a72-b669-1f93c239a012/1/DUcXS28ANkGw_Z3ZV2VKweuQvzE.roa
Signing time: Tue 02 Jan 2024 16:45:58 +0000
ROA not before: Tue 02 Jan 2024 16:45:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204467
IP address blocks: 185.247.156.0/22 maxlen: 22
2a0d:c680::/29 maxlen: 29
2a01:6dc0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/70c477-a8cd-4a72-b669-1f93c239a012/1/G9LUY64VNG1e3Xk3uL-o4JsUN20.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/70c477-a8cd-4a72-b669-1f93c239a012/1/G9LUY64VNG1e3Xk3uL-o4JsUN20.mft
rsync://rpki.ripe.net/repository/DEFAULT/G9LUY64VNG1e3Xk3uL-o4JsUN20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:cb:11:4e:fb:d3:a5:09:71:ed:0b:27:5b:70:22:dc:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bd2d463ae15346d5edd7937b8bfa8e09b14376d
Validity
Not Before: Jan 2 16:45:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0d47174b6f003641b0fd9dd957654ac1eb90bf31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:5e:29:85:39:a8:8f:ee:6c:ac:b9:81:48:28:
e5:88:97:51:e3:58:69:d1:83:97:65:4c:3b:75:ed:
9d:28:df:3a:0e:1b:c4:cb:f9:e7:55:3e:e6:15:ad:
21:df:13:3e:03:1e:7b:67:0f:79:4e:b7:9c:1c:6a:
f3:2d:a8:f4:9e:2b:28:f1:dd:f8:92:f5:31:2f:e8:
bd:d0:3e:72:a1:b9:aa:ab:4e:95:91:8e:c6:b8:7b:
ee:06:66:0b:17:e6:d0:ab:03:21:37:7e:e1:e9:06:
1a:58:e8:5c:19:7c:d7:53:54:21:a9:58:52:8c:4b:
03:d3:18:77:06:7b:54:30:23:7a:2b:2b:50:b6:52:
86:8a:76:85:3f:14:6b:59:d2:09:19:b0:cc:13:1e:
28:06:3b:00:3c:77:56:a3:0f:79:da:64:bc:f9:1c:
f7:76:d7:71:1f:df:70:aa:4c:bc:07:77:2b:ec:7c:
51:76:c0:21:73:a5:79:de:25:2b:45:0e:82:cf:1c:
eb:ee:53:74:37:99:5a:2b:32:ed:28:ee:a2:ab:bf:
70:c5:a3:37:80:2e:c3:1f:b8:1a:e7:3e:7e:ce:51:
43:46:2d:f8:a7:3a:6c:db:6f:ca:5a:bf:6f:aa:ff:
1e:8f:ee:2a:93:02:b2:13:f6:dc:5d:31:ca:80:e5:
6a:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:47:17:4B:6F:00:36:41:B0:FD:9D:D9:57:65:4A:C1:EB:90:BF:31
X509v3 Authority Key Identifier:
keyid:1B:D2:D4:63:AE:15:34:6D:5E:DD:79:37:B8:BF:A8:E0:9B:14:37:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G9LUY64VNG1e3Xk3uL-o4JsUN20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/70c477-a8cd-4a72-b669-1f93c239a012/1/DUcXS28ANkGw_Z3ZV2VKweuQvzE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/70c477-a8cd-4a72-b669-1f93c239a012/1/G9LUY64VNG1e3Xk3uL-o4JsUN20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.247.156.0/22
IPv6:
2a01:6dc0::/32
2a0d:c680::/29
Signature Algorithm: sha256WithRSAEncryption
ab:ec:8e:0c:cf:d8:23:be:b9:35:23:23:0e:29:d3:70:d8:68:
c5:3d:74:4c:cd:09:7a:0b:9a:d0:7f:ac:bf:f4:9c:19:74:35:
7e:bc:b5:50:f0:b4:c7:37:21:91:7d:d6:7b:64:a2:b4:bf:fb:
a8:11:20:83:29:ec:88:89:61:39:6a:f4:1a:4a:0e:9a:c4:03:
b6:72:d5:0c:b7:1d:ae:2e:83:8c:5b:3a:91:06:ff:16:af:56:
36:cb:25:1d:cc:dc:d4:0b:4a:86:0e:22:62:73:50:01:68:56:
cf:52:72:29:65:d6:26:98:60:ab:dc:fe:51:f2:0d:8f:b2:64:
b3:7f:10:9f:fb:34:ae:99:3d:18:11:38:4f:26:d7:9d:e7:f9:
4a:ca:a4:f5:91:cc:28:86:7a:81:a1:53:1c:ec:41:02:bc:a0:
3e:d1:b4:8b:31:24:d8:5e:4e:e1:27:aa:51:d7:8e:53:e5:31:
27:12:33:5d:d3:15:36:86:ce:1c:de:ff:15:d9:93:40:f5:80:
a3:ce:5c:d0:2e:32:b3:3d:01:c8:2a:b3:11:a7:77:49:93:f2:
1f:28:76:d8:99:26:29:2c:61:46:97:0a:d9:80:fa:32:79:b2:
19:b2:d6:0b:c7:d9:21:23:48:83:02:a4:b5:90:b8:41:f8:54:
75:5f:f4:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 12:20:17 2024 by rpki-client on console-fra.rpki-client.org