Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/08d44c-f102-4b70-8db0-72abeefeda4a/1/tYiJg603p74tpsuNgFRyGvWzvtM.roa
File: tYiJg603p74tpsuNgFRyGvWzvtM.roa (raw, json)
Hash identifier: smkzoyeBM5HoKOKNJQ3ppBMvHHJBf9z7SEYd6Ls8Lzw=
Subject key identifier: B5:88:89:83:AD:37:A7:BE:2D:A6:CB:8D:80:54:72:1A:F5:B3:BE:D3
Certificate issuer: /CN=708029a674177efd99252275094618c0c9cfbd1d
Certificate serial: 018E8B83A8914F72A3849F843454606A2047
Authority key identifier: 70:80:29:A6:74:17:7E:FD:99:25:22:75:09:46:18:C0:C9:CF:BD:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cIAppnQXfv2ZJSJ1CUYYwMnPvR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/08d44c-f102-4b70-8db0-72abeefeda4a/1/tYiJg603p74tpsuNgFRyGvWzvtM.roa
Signing time: Fri 29 Mar 2024 18:40:45 +0000
ROA not before: Fri 29 Mar 2024 18:40:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25369
IP address blocks: 185.167.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/08d44c-f102-4b70-8db0-72abeefeda4a/1/cIAppnQXfv2ZJSJ1CUYYwMnPvR0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/08d44c-f102-4b70-8db0-72abeefeda4a/1/cIAppnQXfv2ZJSJ1CUYYwMnPvR0.mft
rsync://rpki.ripe.net/repository/DEFAULT/cIAppnQXfv2ZJSJ1CUYYwMnPvR0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 06:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:8b:83:a8:91:4f:72:a3:84:9f:84:34:54:60:6a:20:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=708029a674177efd99252275094618c0c9cfbd1d
Validity
Not Before: Mar 29 18:40:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b5888983ad37a7be2da6cb8d8054721af5b3bed3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:d6:25:df:7c:9f:03:45:ad:4c:0f:9e:4c:40:
0f:57:f3:7c:dc:4b:19:b5:3c:62:75:71:90:9c:7f:
f3:ea:bd:ee:dc:60:b8:38:c7:e7:50:bf:88:24:ae:
e8:ca:aa:c4:c9:bc:08:52:97:a0:d5:9a:02:87:25:
14:6f:af:f5:69:6d:2b:a1:0b:c3:79:d5:02:fc:ac:
f3:a4:09:5c:87:91:b6:40:4c:09:1b:e6:64:1d:c9:
a7:da:32:30:3b:56:b3:a7:a4:e0:98:75:67:6d:8f:
f7:a8:c6:75:63:9c:cb:af:70:8d:ba:3d:e4:09:2d:
c1:08:80:c5:ee:ea:50:06:b0:37:2c:95:2b:c9:41:
8e:04:b3:37:1b:f6:50:be:06:52:38:b3:91:8c:f9:
30:91:76:96:aa:b4:35:72:c3:ae:d6:6c:42:bc:b9:
7c:e0:1b:c9:e3:87:c9:0a:4b:a7:6f:5f:e7:83:47:
a2:3e:23:42:1a:19:e4:2f:c8:7d:b7:fb:48:27:a7:
1b:50:92:c8:6e:7c:b7:e3:cf:a5:cc:9e:31:a7:16:
48:4f:5e:ce:8b:e5:4f:1a:39:82:6e:eb:39:c2:76:
a0:49:1c:5f:00:6a:2a:f7:8b:68:b1:1b:63:62:19:
a9:37:1e:47:2e:e7:59:f6:90:1e:e0:cd:38:24:c2:
8c:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:88:89:83:AD:37:A7:BE:2D:A6:CB:8D:80:54:72:1A:F5:B3:BE:D3
X509v3 Authority Key Identifier:
keyid:70:80:29:A6:74:17:7E:FD:99:25:22:75:09:46:18:C0:C9:CF:BD:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cIAppnQXfv2ZJSJ1CUYYwMnPvR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/08d44c-f102-4b70-8db0-72abeefeda4a/1/tYiJg603p74tpsuNgFRyGvWzvtM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/08d44c-f102-4b70-8db0-72abeefeda4a/1/cIAppnQXfv2ZJSJ1CUYYwMnPvR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.167.253.0/24
Signature Algorithm: sha256WithRSAEncryption
79:d8:78:d6:ee:dd:c0:9d:1e:10:35:07:0d:f1:7e:9f:45:e5:
ca:89:6f:e5:e7:05:1c:98:2e:52:a5:f6:b7:e3:6b:69:e4:80:
a7:7c:b9:33:b0:f9:18:55:85:e8:34:d7:35:75:38:91:97:12:
12:3e:9c:7d:0c:aa:0b:1e:df:58:c4:64:08:e5:0b:93:4d:b0:
7d:59:70:e3:53:d9:c3:f1:be:fd:79:2b:3e:5c:89:da:a5:a9:
12:39:0d:89:8d:21:fd:a3:93:20:b4:96:7f:f4:19:55:a8:d1:
3e:f1:0f:4f:6c:25:ce:1a:55:96:32:da:6d:d1:fe:93:85:0c:
75:56:5c:b8:32:77:ea:c4:56:cc:e1:38:84:43:ab:ed:e8:c6:
49:41:bc:fb:b4:cd:b4:46:af:83:cc:e6:83:cd:32:70:85:2c:
08:0c:c5:1a:0a:d5:7e:cc:ec:08:59:ad:2d:17:db:48:8b:64:
9b:30:fd:6f:c6:5a:09:24:de:15:c7:99:49:19:e9:62:4a:f8:
c3:60:db:07:8b:fc:bf:59:96:2f:03:fa:95:10:ec:1e:4b:22:
09:97:dc:44:7e:fa:23:39:f5:63:af:59:4b:f0:ad:11:6b:c1:
ca:b0:bb:d3:8c:9c:ad:cc:43:a8:e1:83:88:51:74:4d:1f:1c:
dd:56:83:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 15:58:48 2024 by rpki-client on console-fra.rpki-client.org