Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/1f618f-0353-4d07-a10c-e12c4881fcb2/1/0Kk0oWTRglInPcFpkMq6wjVZJTQ.roa
File: 0Kk0oWTRglInPcFpkMq6wjVZJTQ.roa (raw, json)
Hash identifier: 4G6qZVQqNxTVS31fVfi3l+kTeo/oGQnmwLVWvMyJxx4=
Subject key identifier: D0:A9:34:A1:64:D1:82:52:27:3D:C1:69:90:CA:BA:C2:35:59:25:34
Certificate issuer: /CN=70bd1c0ea7dc0e68b98cebc07d7fbf807efe9d1a
Certificate serial: 018CC8017F5C4BA2C573852B74EE39E4BD4A
Authority key identifier: 70:BD:1C:0E:A7:DC:0E:68:B9:8C:EB:C0:7D:7F:BF:80:7E:FE:9D:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cL0cDqfcDmi5jOvAfX-_gH7-nRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/1f618f-0353-4d07-a10c-e12c4881fcb2/1/0Kk0oWTRglInPcFpkMq6wjVZJTQ.roa
Signing time: Tue 02 Jan 2024 02:29:50 +0000
ROA not before: Tue 02 Jan 2024 02:29:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21245
IP address blocks: 185.155.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/1f618f-0353-4d07-a10c-e12c4881fcb2/1/cL0cDqfcDmi5jOvAfX-_gH7-nRo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/1f618f-0353-4d07-a10c-e12c4881fcb2/1/cL0cDqfcDmi5jOvAfX-_gH7-nRo.mft
rsync://rpki.ripe.net/repository/DEFAULT/cL0cDqfcDmi5jOvAfX-_gH7-nRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:7f:5c:4b:a2:c5:73:85:2b:74:ee:39:e4:bd:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70bd1c0ea7dc0e68b98cebc07d7fbf807efe9d1a
Validity
Not Before: Jan 2 02:29:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d0a934a164d18252273dc16990cabac235592534
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:7a:e0:bd:5d:c4:91:c4:e5:27:c4:ca:70:72:
6c:e2:4e:4e:97:5d:14:ac:4d:b9:f8:ea:b9:de:ea:
c7:7b:d1:2c:b0:68:0c:ee:a0:0f:98:13:30:7e:e1:
b8:b1:81:10:47:32:9d:03:5e:6f:04:b2:11:1b:1c:
21:bf:14:e9:2a:12:ff:5d:9a:7e:0f:a3:c9:cd:84:
31:f6:80:e5:68:bc:af:3d:a1:a1:f4:19:c6:56:da:
13:21:2d:00:86:3b:71:f1:05:3f:6f:4b:b1:c0:af:
81:bf:48:1a:92:20:ee:c0:05:46:bd:0a:8f:33:ec:
70:9a:52:a7:70:d0:45:7d:e4:9f:66:82:65:fc:1c:
ae:ae:f7:fb:00:3b:55:0f:81:5c:2d:72:5f:c3:2a:
66:27:58:e4:47:c3:51:8e:d9:b2:7f:dc:32:fa:da:
c9:69:42:b7:33:f2:e3:c0:62:e4:96:45:dd:3e:ad:
02:d3:d0:06:58:53:ce:9b:d4:73:8b:b5:86:be:a7:
fd:b5:4e:88:e0:c1:6d:dd:5b:2b:94:ca:5b:f3:b8:
09:bd:65:45:f9:b9:ff:d2:4d:0b:de:27:54:3a:ec:
79:5f:f8:7e:4f:90:a6:d5:02:84:3f:56:4d:19:fd:
f3:d3:06:55:d0:3d:34:ed:7b:cc:bf:23:88:5c:6d:
2c:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:A9:34:A1:64:D1:82:52:27:3D:C1:69:90:CA:BA:C2:35:59:25:34
X509v3 Authority Key Identifier:
keyid:70:BD:1C:0E:A7:DC:0E:68:B9:8C:EB:C0:7D:7F:BF:80:7E:FE:9D:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cL0cDqfcDmi5jOvAfX-_gH7-nRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/1f618f-0353-4d07-a10c-e12c4881fcb2/1/0Kk0oWTRglInPcFpkMq6wjVZJTQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/1f618f-0353-4d07-a10c-e12c4881fcb2/1/cL0cDqfcDmi5jOvAfX-_gH7-nRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.155.102.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:86:7e:6b:16:3e:23:01:b0:5e:b9:a4:fb:b5:db:cd:d1:37:
a4:f1:19:38:01:d6:4c:45:27:be:4e:3e:ba:4e:52:bc:1e:cc:
bf:1d:99:47:ac:ea:bc:20:9a:ae:ab:a1:38:b7:44:4f:92:7d:
ec:17:62:01:c9:f1:1e:06:59:18:bb:88:f8:27:21:56:a3:ac:
59:9b:a9:d3:4f:e8:55:b0:2a:f8:69:57:ac:42:97:bf:93:43:
73:5e:26:c1:4f:8e:b5:30:66:71:b7:4d:f7:bc:b7:82:e6:4d:
e8:86:da:95:6e:c3:a6:fd:50:91:53:37:a4:94:ec:5b:52:2f:
e3:7d:dd:d7:bf:6f:db:c5:70:fe:44:47:70:aa:5f:ff:69:56:
82:18:d6:e2:78:b1:c8:73:af:78:66:b2:b3:42:1a:0a:b2:d4:
8b:0e:39:c5:e2:92:5e:2f:24:ff:8d:82:de:26:cb:ad:8d:85:
3e:b9:3a:7e:18:18:4d:4a:a1:0e:7a:46:d0:69:f1:d1:5a:4a:
01:f1:2e:ea:44:c3:0a:23:e8:b2:6b:14:91:74:36:b5:5d:2e:
d2:87:cd:da:d5:00:f5:98:63:56:29:7b:7f:72:89:21:1f:a6:
d4:57:d6:82:80:9f:b0:80:00:9c:bb:9e:86:d2:73:9b:65:26:
28:b7:3e:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 07:11:21 2024 by rpki-client on console-ams.rpki-client.org