Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/_C1rLxCQ9TeQMKyMSOD3ju0-2Qo.roa
File: _C1rLxCQ9TeQMKyMSOD3ju0-2Qo.roa (raw, json)
Hash identifier: KMvcK5xBXUcaLm7fQqDrtMeyfwIFKSMcK9PKEyER5Jo=
Subject key identifier: FC:2D:6B:2F:10:90:F5:37:90:30:AC:8C:48:E0:F7:8E:ED:3E:D9:0A
Certificate issuer: /CN=816d220b2b5a46fbeb27ef2d969fa21dd338c5b3
Certificate serial: 018DF00BE6C5E7195195CA721A9E23EDCDA7
Authority key identifier: 81:6D:22:0B:2B:5A:46:FB:EB:27:EF:2D:96:9F:A2:1D:D3:38:C5:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gW0iCytaRvvrJ-8tlp-iHdM4xbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/_C1rLxCQ9TeQMKyMSOD3ju0-2Qo.roa
Signing time: Wed 28 Feb 2024 14:08:48 +0000
ROA not before: Wed 28 Feb 2024 14:08:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 152586
IP address blocks: 185.140.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/gW0iCytaRvvrJ-8tlp-iHdM4xbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/gW0iCytaRvvrJ-8tlp-iHdM4xbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/gW0iCytaRvvrJ-8tlp-iHdM4xbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 17:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:f0:0b:e6:c5:e7:19:51:95:ca:72:1a:9e:23:ed:cd:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=816d220b2b5a46fbeb27ef2d969fa21dd338c5b3
Validity
Not Before: Feb 28 14:08:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fc2d6b2f1090f5379030ac8c48e0f78eed3ed90a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:a8:90:f2:a1:04:60:cf:8a:45:6e:c7:5c:e5:
6c:f9:4f:dd:1d:aa:33:d6:eb:be:d6:4d:f7:03:71:
de:de:32:b7:12:a0:33:2c:17:2e:13:f0:67:3d:0b:
de:d4:66:78:c6:8d:bc:e6:af:df:ba:84:31:76:89:
f7:87:f3:f8:b7:43:7c:21:6e:69:e9:ac:a1:1b:92:
90:92:90:a6:81:fa:c2:de:8a:db:60:8e:dc:4b:8d:
bd:5c:9a:ea:2a:43:70:0a:b6:a5:38:77:73:f0:ed:
fd:60:4e:fd:a2:f1:2d:a7:c6:0b:35:6c:76:22:b3:
40:7b:04:64:70:ae:79:68:f2:34:48:41:09:93:be:
9c:1c:ef:76:f2:4f:83:53:98:ce:f7:1e:b1:f3:61:
23:69:bf:7d:97:04:32:7f:16:fc:ac:5f:30:ba:2b:
0d:6b:09:9d:c5:cc:ba:ca:2f:7f:78:f2:3d:fb:4c:
a7:13:d9:88:82:51:61:de:3b:53:88:fd:13:89:75:
9d:a0:9b:64:3e:3e:66:74:3e:de:6f:e9:6c:01:c1:
26:6f:fb:2d:ca:ca:04:d6:17:61:05:9f:c5:1c:f1:
93:85:fa:1a:46:b3:ed:46:61:25:b2:23:59:86:9f:
f7:28:2a:64:2b:82:b1:a9:58:cb:9e:01:ad:fc:9c:
35:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:2D:6B:2F:10:90:F5:37:90:30:AC:8C:48:E0:F7:8E:ED:3E:D9:0A
X509v3 Authority Key Identifier:
keyid:81:6D:22:0B:2B:5A:46:FB:EB:27:EF:2D:96:9F:A2:1D:D3:38:C5:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gW0iCytaRvvrJ-8tlp-iHdM4xbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/_C1rLxCQ9TeQMKyMSOD3ju0-2Qo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/gW0iCytaRvvrJ-8tlp-iHdM4xbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.140.53.0/24
Signature Algorithm: sha256WithRSAEncryption
17:58:c6:75:57:00:af:9b:f9:6d:fe:11:70:23:26:8c:bc:cd:
5f:59:f9:4e:78:5b:34:f9:43:8d:81:13:76:fb:31:d9:04:8f:
ac:70:f0:43:20:0b:74:24:af:82:7d:a9:a9:47:60:06:93:82:
72:63:1e:c0:0b:e4:61:90:08:48:4c:2d:40:c1:0c:03:32:f6:
79:33:d0:99:fc:92:73:a9:77:f7:46:dd:96:fb:c4:05:79:97:
51:98:f8:59:89:7a:e5:8d:55:90:c7:11:49:15:cc:bc:78:c5:
0a:7b:6d:5d:31:82:44:2d:59:60:9c:ee:b6:f5:1b:c3:ff:18:
f8:c7:1c:89:c1:1b:d4:11:52:4f:6a:3b:37:40:78:25:48:b1:
22:5e:4a:f7:67:c7:02:0f:26:5c:99:86:4f:df:8b:59:af:73:
e2:75:35:67:2b:d2:51:d1:1a:cb:8d:e5:81:e0:b2:b1:06:8d:
4a:13:1f:9c:d7:e0:37:83:a5:8b:30:63:ab:4b:44:a1:a8:53:
a6:04:c6:e9:1e:50:ad:f0:ce:3c:79:f2:d4:c5:09:ab:4f:35:
69:b3:ad:ef:d5:89:9c:4f:34:91:5d:2e:36:57:a0:29:24:11:
b5:dd:81:82:3c:94:87:00:dd:22:11:d1:88:7f:b1:88:45:1e:
a3:f5:a9:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 03:33:48 2024 by rpki-client on console-ams.rpki-client.org