Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/1eeba8-7399-4bca-9341-ce882a5054c6/1/3Bz-YqwXv_siqmrMPSBci6dTuFA.roa
File: 3Bz-YqwXv_siqmrMPSBci6dTuFA.roa (raw, json)
Hash identifier: 2Wm0LzTL/CtGt6Ruijx2KQZItyTkKTmoXKYWR0sUS8A=
Subject key identifier: DC:1C:FE:62:AC:17:BF:FB:22:AA:6A:CC:3D:20:5C:8B:A7:53:B8:50
Certificate issuer: /CN=1cecefd9eadb2d5284d713b94b56d3abbc10e9e5
Certificate serial: 019107578FED4141823712979B4460D7EA9D
Authority key identifier: 1C:EC:EF:D9:EA:DB:2D:52:84:D7:13:B9:4B:56:D3:AB:BC:10:E9:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HOzv2erbLVKE1xO5S1bTq7wQ6eU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/1eeba8-7399-4bca-9341-ce882a5054c6/1/3Bz-YqwXv_siqmrMPSBci6dTuFA.roa
Signing time: Wed 31 Jul 2024 05:51:04 +0000
ROA not before: Wed 31 Jul 2024 05:51:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 185.119.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/1eeba8-7399-4bca-9341-ce882a5054c6/1/HOzv2erbLVKE1xO5S1bTq7wQ6eU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/1eeba8-7399-4bca-9341-ce882a5054c6/1/HOzv2erbLVKE1xO5S1bTq7wQ6eU.mft
rsync://rpki.ripe.net/repository/DEFAULT/HOzv2erbLVKE1xO5S1bTq7wQ6eU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:07:57:8f:ed:41:41:82:37:12:97:9b:44:60:d7:ea:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cecefd9eadb2d5284d713b94b56d3abbc10e9e5
Validity
Not Before: Jul 31 05:51:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dc1cfe62ac17bffb22aa6acc3d205c8ba753b850
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:45:e4:c0:a1:e9:34:90:04:06:ad:bd:94:d6:
b3:f2:9b:5b:19:5f:4d:3c:3e:18:85:21:44:09:cb:
0c:cf:42:91:58:ed:16:d7:6b:70:cd:ac:61:9c:da:
91:3c:c3:2e:de:55:3c:61:84:ac:4a:d7:b6:f0:6d:
b8:08:9a:49:ac:f5:e3:e2:b3:80:9a:5d:74:83:55:
d8:30:a9:9c:55:13:b5:50:00:02:ee:b0:74:13:2b:
2d:fc:90:1f:bf:24:9b:3f:09:63:a4:0c:0b:d0:89:
a0:6f:fc:ed:78:d6:3d:2a:d7:b0:66:8d:bf:04:c5:
48:03:a7:fb:ad:7c:29:0d:ef:11:74:93:87:f4:d6:
50:cc:b6:23:63:b6:71:7c:5e:52:d5:f0:7c:1a:1e:
7f:5d:d7:d4:a2:57:3c:8d:33:b2:c6:be:26:20:14:
83:f0:15:f5:22:78:fa:52:8f:2d:35:b1:4e:41:da:
28:37:6b:37:e3:51:7e:df:ba:05:93:a2:95:68:cd:
1f:e9:ee:08:d1:c6:b4:cf:32:b2:11:02:e5:35:96:
9e:e3:f6:ee:f0:5c:ea:95:c4:7e:f2:92:35:77:f2:
17:fd:86:da:0c:bb:5e:c6:f6:f3:05:51:94:d8:d1:
da:85:0a:a5:ef:8e:51:fc:97:07:f6:e6:54:95:be:
6b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:1C:FE:62:AC:17:BF:FB:22:AA:6A:CC:3D:20:5C:8B:A7:53:B8:50
X509v3 Authority Key Identifier:
keyid:1C:EC:EF:D9:EA:DB:2D:52:84:D7:13:B9:4B:56:D3:AB:BC:10:E9:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HOzv2erbLVKE1xO5S1bTq7wQ6eU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/1eeba8-7399-4bca-9341-ce882a5054c6/1/3Bz-YqwXv_siqmrMPSBci6dTuFA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/1eeba8-7399-4bca-9341-ce882a5054c6/1/HOzv2erbLVKE1xO5S1bTq7wQ6eU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.119.197.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:e1:65:b4:a0:8e:df:8b:20:db:e3:a9:84:c3:b0:19:b0:ca:
5d:f2:10:61:d5:0b:2e:8c:f1:5a:82:96:2e:fa:8a:31:3b:06:
71:7a:36:af:12:7e:48:d5:e1:25:8a:04:d7:0c:10:d8:a9:b5:
c8:b6:0b:94:62:03:78:32:88:0f:01:5f:d9:41:f1:6b:d3:8b:
66:8a:2d:f5:48:14:a3:c4:f9:56:66:03:6d:10:21:e7:3d:b5:
a1:fb:96:67:c9:ee:6d:70:d2:c8:66:3a:9b:6c:8d:f5:27:f6:
52:6e:82:af:1c:ff:07:dc:fa:06:0b:25:31:c1:10:b5:e7:03:
b9:d2:c8:c9:7f:b7:93:bc:4a:88:8d:57:68:0c:7d:33:32:cc:
cb:a4:44:e6:7b:19:2c:b3:a9:cf:40:99:92:df:59:6e:09:e3:
7b:d8:0d:20:03:af:ea:c0:ad:07:b5:47:52:56:42:1f:50:7d:
35:36:ff:e9:5c:9f:4b:ca:f6:9b:d7:07:05:e7:ce:f7:fb:07:
39:c5:3b:af:63:d0:c1:b1:42:38:96:25:0b:1a:28:e7:dc:e9:
e6:c5:46:8f:a4:82:9c:fe:33:09:ee:98:4e:6f:d3:63:4d:26:
6e:73:79:ad:ec:fd:03:91:14:61:53:f5:61:54:8f:88:78:a9:
ac:14:73:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:04:45 2024 by rpki-client on console-ams.rpki-client.org