Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/7fb4ea-5bbc-4c8c-8b5d-288cfd1c2a3d/1/IBTc6GXdqQbntX4m4q4nt0ttzH0.roa
File: IBTc6GXdqQbntX4m4q4nt0ttzH0.roa (raw, json)
Hash identifier: d0Uj2GDx1a/xis2dLeH0HlJRwaRTS71FvuPIESEoPPU=
Subject key identifier: 20:14:DC:E8:65:DD:A9:06:E7:B5:7E:26:E2:AE:27:B7:4B:6D:CC:7D
Certificate issuer: /CN=90b3a3a0d662d14da8404bd21dc489e63945624e
Certificate serial: 018CC8016391A2681A7E2910892FB3CEC95B
Authority key identifier: 90:B3:A3:A0:D6:62:D1:4D:A8:40:4B:D2:1D:C4:89:E6:39:45:62:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kLOjoNZi0U2oQEvSHcSJ5jlFYk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/7fb4ea-5bbc-4c8c-8b5d-288cfd1c2a3d/1/IBTc6GXdqQbntX4m4q4nt0ttzH0.roa
Signing time: Tue 02 Jan 2024 02:29:43 +0000
ROA not before: Tue 02 Jan 2024 02:29:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205704
IP address blocks: 185.200.150.0/23 maxlen: 23
185.200.150.0/24 maxlen: 24
185.200.149.0/24 maxlen: 24
185.200.148.0/24 maxlen: 24
185.200.148.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/7fb4ea-5bbc-4c8c-8b5d-288cfd1c2a3d/1/kLOjoNZi0U2oQEvSHcSJ5jlFYk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/7fb4ea-5bbc-4c8c-8b5d-288cfd1c2a3d/1/kLOjoNZi0U2oQEvSHcSJ5jlFYk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/kLOjoNZi0U2oQEvSHcSJ5jlFYk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:63:91:a2:68:1a:7e:29:10:89:2f:b3:ce:c9:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90b3a3a0d662d14da8404bd21dc489e63945624e
Validity
Not Before: Jan 2 02:29:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2014dce865dda906e7b57e26e2ae27b74b6dcc7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:3b:c0:76:14:33:79:c0:7f:a2:a2:8d:1e:55:
56:f0:70:dd:bb:e2:db:80:1c:ad:0c:5e:a3:0b:e6:
35:14:74:ba:1c:3c:e9:43:25:b0:a7:e2:19:4c:83:
57:c4:79:4b:9f:33:03:df:c2:66:d7:ee:42:34:14:
d1:36:6e:c3:d5:20:06:d2:83:6b:34:ad:08:9f:2b:
38:4c:38:ca:c2:f6:81:42:f3:58:97:1f:89:de:f7:
b0:79:f9:f7:8a:ec:c0:c6:28:46:69:6f:69:67:47:
b7:ac:45:f4:74:27:bf:ed:0a:8f:e5:0f:42:ed:3f:
90:44:2c:3a:b4:2e:1e:15:7e:09:44:64:0a:56:f0:
8f:85:28:d2:8e:ae:0b:8b:97:f4:ea:7e:5a:29:3a:
1e:dc:1b:bf:1c:4a:2c:42:a9:4f:47:85:89:e7:34:
56:6f:73:ee:b2:6c:71:ca:97:5d:81:58:69:86:df:
cc:25:72:18:f8:f7:6b:50:95:15:93:e9:c3:25:d9:
a7:41:c0:b8:a5:98:40:fe:8e:fa:7f:f4:c5:76:d6:
f4:dc:ce:ec:2e:ec:78:56:bd:1d:f1:d6:6d:95:69:
b5:1e:1f:fc:fa:3b:22:1b:64:63:34:b5:e6:ed:a5:
fb:b0:1a:f1:64:4f:4c:06:4a:b5:f8:e7:e2:55:17:
6e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:14:DC:E8:65:DD:A9:06:E7:B5:7E:26:E2:AE:27:B7:4B:6D:CC:7D
X509v3 Authority Key Identifier:
keyid:90:B3:A3:A0:D6:62:D1:4D:A8:40:4B:D2:1D:C4:89:E6:39:45:62:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kLOjoNZi0U2oQEvSHcSJ5jlFYk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/7fb4ea-5bbc-4c8c-8b5d-288cfd1c2a3d/1/IBTc6GXdqQbntX4m4q4nt0ttzH0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/7fb4ea-5bbc-4c8c-8b5d-288cfd1c2a3d/1/kLOjoNZi0U2oQEvSHcSJ5jlFYk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.200.148.0/22
Signature Algorithm: sha256WithRSAEncryption
40:15:73:b5:8c:01:2a:97:9b:ef:d1:d6:2c:be:cb:0a:3a:82:
14:df:86:f8:b5:bd:6d:4d:0f:1b:ef:da:73:27:56:44:08:c9:
5a:e7:b1:b3:6c:ca:91:e0:63:8b:24:8b:92:9f:48:38:02:29:
13:be:ba:62:d5:f2:02:77:68:eb:9d:51:fc:65:af:cf:a9:f2:
ad:e6:bd:f4:80:77:37:87:2f:c0:57:5f:da:b2:c1:0d:39:cc:
58:bd:0e:8f:32:e5:b7:5d:29:28:3f:2a:c9:8e:dd:b6:9d:b3:
81:b5:bd:be:09:c8:7a:b3:13:d8:24:2b:d5:ce:82:cd:1d:40:
d0:85:67:c9:a9:a1:4d:f2:79:1d:79:97:24:71:01:54:98:e0:
ac:73:87:77:08:e3:f4:67:79:7e:24:82:f2:8f:c6:20:a2:2c:
b8:cf:40:e3:1e:c1:c4:69:53:e3:4c:4c:70:77:83:30:df:3d:
a6:51:ac:30:a1:73:9d:aa:a9:64:f8:5a:8c:a2:13:c7:1b:71:
24:43:cf:15:16:2b:fa:d5:20:5c:14:16:2f:75:83:14:77:4d:
df:b6:ac:48:f5:04:d0:ee:cf:d6:48:46:68:35:2b:5e:af:d4:
5d:f5:4b:5f:2f:15:8d:b4:7e:02:fe:01:d6:04:6a:25:72:53:
e2:4b:72:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:46:47 2024 by rpki-client on console-fra.rpki-client.org