Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/d525f8-d549-4909-b8c0-ff014900be8a/1/1xws1cXml1eRMaWyT_6HPeP8eGo.roa
File: 1xws1cXml1eRMaWyT_6HPeP8eGo.roa (raw, json)
Hash identifier: 5fnBbjKQWkvOz52hJ7rwnbPQPhL73LjvNwUmNpDWGK4=
Subject key identifier: D7:1C:2C:D5:C5:E6:97:57:91:31:A5:B2:4F:FE:87:3D:E3:FC:78:6A
Certificate issuer: /CN=d533b09430b048f0526ef6a937774e7f06203731
Certificate serial: 018CC5DBE1A10BA317993F758BD71626E789
Authority key identifier: D5:33:B0:94:30:B0:48:F0:52:6E:F6:A9:37:77:4E:7F:06:20:37:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1TOwlDCwSPBSbvapN3dOfwYgNzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/d525f8-d549-4909-b8c0-ff014900be8a/1/1xws1cXml1eRMaWyT_6HPeP8eGo.roa
Signing time: Mon 01 Jan 2024 16:29:30 +0000
ROA not before: Mon 01 Jan 2024 16:29:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209242
IP address blocks: 185.135.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/d525f8-d549-4909-b8c0-ff014900be8a/1/1TOwlDCwSPBSbvapN3dOfwYgNzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/d525f8-d549-4909-b8c0-ff014900be8a/1/1TOwlDCwSPBSbvapN3dOfwYgNzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1TOwlDCwSPBSbvapN3dOfwYgNzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 May 2024 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:db:e1:a1:0b:a3:17:99:3f:75:8b:d7:16:26:e7:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d533b09430b048f0526ef6a937774e7f06203731
Validity
Not Before: Jan 1 16:29:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d71c2cd5c5e697579131a5b24ffe873de3fc786a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:65:72:50:1e:2c:2c:d5:4f:97:c7:e2:d0:b8:
5c:01:a2:5d:48:85:e2:84:d7:f9:8d:91:96:39:fe:
f5:ee:8e:db:eb:79:94:27:46:eb:73:66:6b:55:8c:
bf:7c:cb:51:a2:a5:41:74:50:49:fa:1b:d8:9a:1e:
6b:02:79:1d:81:51:cd:32:e4:31:0e:c1:ba:0a:1e:
0c:39:0d:ce:65:41:5d:16:a1:7a:d8:7f:71:72:1b:
eb:a6:ac:17:f8:fa:1b:0f:25:f3:c9:d1:b2:8a:38:
37:69:07:02:5b:dd:a6:1f:66:2c:65:5b:d4:c8:c5:
43:ae:75:44:bb:e8:09:fa:98:f6:4a:8c:97:48:b5:
a1:35:dc:e4:89:6d:61:f5:bb:8a:b9:6d:a9:18:ba:
d3:f9:c7:be:dc:a1:b3:48:7c:2c:c8:22:40:f2:a7:
d4:77:22:ea:b9:ae:a6:f1:27:4c:50:36:82:0a:c7:
c6:04:39:03:1a:1b:f1:53:52:17:15:48:c7:09:a4:
30:85:6c:1f:00:90:73:57:f9:f1:d2:8f:30:09:41:
da:f0:d7:ec:23:4a:52:a6:7b:47:80:4c:b8:b0:5b:
f9:1b:56:41:cf:83:09:c0:8e:21:54:ad:ef:dc:4e:
83:f4:ee:4a:b2:04:50:8b:94:4f:7f:5e:c9:3f:02:
0f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:1C:2C:D5:C5:E6:97:57:91:31:A5:B2:4F:FE:87:3D:E3:FC:78:6A
X509v3 Authority Key Identifier:
keyid:D5:33:B0:94:30:B0:48:F0:52:6E:F6:A9:37:77:4E:7F:06:20:37:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1TOwlDCwSPBSbvapN3dOfwYgNzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d525f8-d549-4909-b8c0-ff014900be8a/1/1xws1cXml1eRMaWyT_6HPeP8eGo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d525f8-d549-4909-b8c0-ff014900be8a/1/1TOwlDCwSPBSbvapN3dOfwYgNzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.135.44.0/24
Signature Algorithm: sha256WithRSAEncryption
06:48:b3:ad:1d:f2:9a:d0:c9:6a:2f:df:85:c1:1c:e9:69:e8:
c9:55:8c:a5:e2:60:86:d4:a0:b8:1d:87:84:47:6e:d6:0d:b1:
b9:e1:47:61:c3:93:2d:38:25:51:51:f0:fe:87:73:21:68:bf:
de:39:b5:ac:14:21:0b:00:e9:06:47:78:2c:fc:4d:7a:97:0a:
ad:d9:d2:e9:f1:4a:3c:2e:c6:cc:c4:1f:30:be:99:aa:21:fb:
10:51:2f:22:2d:7d:41:5c:28:8f:6a:ac:a2:ba:cf:81:c6:51:
9f:7d:da:bd:69:9c:23:75:92:16:a8:1a:8f:b2:52:f2:09:47:
57:8b:62:4e:09:69:e1:16:e2:a2:e0:5d:a1:2d:92:09:c3:b2:
06:2e:f6:64:da:19:71:1c:d6:37:f4:5d:ea:f0:fe:f8:21:93:
f6:c2:7b:0f:dd:e4:60:d7:55:fe:27:b7:fd:36:da:69:96:d9:
c6:69:fa:25:c8:14:ea:66:27:cc:9d:95:ce:f0:13:fe:90:e5:
ea:7f:4f:bc:d2:14:c1:c4:2c:95:bb:f7:c6:63:0a:c8:0e:9a:
09:af:60:7e:89:3a:3b:86:f9:54:0f:18:94:33:81:78:99:34:
ce:0e:06:d4:ff:88:fd:0d:10:81:85:af:6d:b6:13:f1:10:e0:
ea:79:63:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 20:59:27 2024 by rpki-client on console-fra.rpki-client.org