Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/03tDcHf45rP5y9o2063-vrcM2Cs.roa
File: 03tDcHf45rP5y9o2063-vrcM2Cs.roa (raw, json)
Hash identifier: x5u0ItgjsDg5589yBrVDyfxprt7iiD1xJrq9Y1mSlDs=
Subject key identifier: D3:7B:43:70:77:F8:E6:B3:F9:CB:DA:36:D3:AD:FE:BE:B7:0C:D8:2B
Certificate issuer: /CN=d1e013ec8a5c56df241a9b2563d111f8e543bf91
Certificate serial: 018CC500C50FD995DEC7BDB87550623655B8
Authority key identifier: D1:E0:13:EC:8A:5C:56:DF:24:1A:9B:25:63:D1:11:F8:E5:43:BF:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0eAT7IpcVt8kGpslY9ER-OVDv5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/03tDcHf45rP5y9o2063-vrcM2Cs.roa
Signing time: Mon 01 Jan 2024 12:30:11 +0000
ROA not before: Mon 01 Jan 2024 12:30:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216445
IP address blocks: 185.160.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/0eAT7IpcVt8kGpslY9ER-OVDv5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/0eAT7IpcVt8kGpslY9ER-OVDv5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/0eAT7IpcVt8kGpslY9ER-OVDv5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:c5:0f:d9:95:de:c7:bd:b8:75:50:62:36:55:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1e013ec8a5c56df241a9b2563d111f8e543bf91
Validity
Not Before: Jan 1 12:30:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d37b437077f8e6b3f9cbda36d3adfebeb70cd82b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:5b:97:5a:3c:15:03:76:74:24:82:1f:6c:b5:
9c:ed:ff:33:76:65:73:69:62:f0:9a:43:7b:55:99:
02:ee:79:04:cf:51:4e:41:61:36:ec:b3:f9:f1:75:
2d:da:73:38:6f:23:9a:dc:f5:da:ef:e5:27:80:88:
88:7d:e7:43:bb:e2:22:77:d3:44:19:94:8b:6a:7a:
7d:08:2d:5f:57:be:73:a5:20:cd:25:dd:6f:c2:8c:
af:9b:26:e3:47:5f:12:a5:3a:dd:be:34:80:31:3b:
5e:28:79:67:31:2e:22:84:44:f2:66:89:73:74:06:
33:53:42:04:ec:1c:b9:ec:f4:85:de:92:5a:87:39:
a4:91:5a:ec:d3:83:62:65:c4:03:e0:0a:6e:5e:d9:
45:2c:73:30:bf:ad:02:df:1f:a4:d9:5b:d8:ae:c9:
80:44:f6:cf:fb:c1:a6:71:f2:a3:d0:72:06:92:81:
17:5c:b0:db:72:34:4c:30:5f:5e:1f:71:26:67:3c:
fe:18:81:3e:3a:42:71:44:b4:6b:7e:f0:f5:d4:19:
73:fd:80:ed:51:bd:17:87:14:36:49:c2:b8:5c:35:
b5:09:52:3b:7a:68:5b:81:b6:6d:14:b2:d5:ed:9d:
fc:ba:86:3f:e8:ce:bd:a6:23:76:27:d4:a5:29:01:
41:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:7B:43:70:77:F8:E6:B3:F9:CB:DA:36:D3:AD:FE:BE:B7:0C:D8:2B
X509v3 Authority Key Identifier:
keyid:D1:E0:13:EC:8A:5C:56:DF:24:1A:9B:25:63:D1:11:F8:E5:43:BF:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0eAT7IpcVt8kGpslY9ER-OVDv5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/03tDcHf45rP5y9o2063-vrcM2Cs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/0eAT7IpcVt8kGpslY9ER-OVDv5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.160.30.0/24
Signature Algorithm: sha256WithRSAEncryption
75:70:58:d5:c8:0a:4e:56:65:ff:5b:6e:25:6b:60:e5:02:47:
ce:92:8f:4e:5e:ed:d2:b1:31:cd:1b:77:8c:13:38:b4:a7:83:
ff:24:cc:a6:7f:2e:45:30:e9:97:75:af:3c:d1:bb:41:46:dd:
89:de:0e:63:da:5f:2d:e4:fc:e1:53:5a:ba:f7:f2:4b:55:9c:
cd:4f:10:20:60:c2:47:c4:00:b3:26:e3:4e:9c:91:73:98:d1:
8a:d8:93:fe:9b:14:11:b1:16:44:2d:bc:c5:09:c5:13:cc:d1:
9b:a9:b7:a7:a4:d4:f0:10:8d:56:07:3b:b1:b0:e6:cc:10:f0:
6a:b4:1e:92:3f:85:73:05:ac:78:94:16:09:de:a7:9c:b7:da:
c1:b1:1a:7e:27:cb:d6:b3:d5:5a:98:43:5c:ef:b6:e4:3d:d0:
b7:54:f0:e5:f1:f2:8a:52:10:f7:bd:f1:38:ab:62:95:46:c5:
e7:b4:c5:7e:76:69:79:06:4b:87:d2:1f:59:33:86:e8:ea:47:
95:df:29:7e:8a:52:31:33:80:1c:51:34:d8:63:9e:a0:86:b2:
da:83:73:55:ff:49:a4:98:45:6a:85:9e:e8:ab:24:49:cc:46:
41:54:66:80:ab:7e:a9:53:b7:12:b9:1d:29:a5:df:6d:52:da:
a2:99:be:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 00:43:25 2024 by rpki-client on console-ams.rpki-client.org