Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/5c4a71-b38a-4eb4-8633-24b3572a83bb/1/Si7OAWrrnZtOz_E_U0YJH9v1Nec.roa
File: Si7OAWrrnZtOz_E_U0YJH9v1Nec.roa (raw, json)
Hash identifier: S6U/Hz70SERrf8aKvJNxxVG7BkRd+R1eIAjxfm9/7Gk=
Subject key identifier: 4A:2E:CE:01:6A:EB:9D:9B:4E:CF:F1:3F:53:46:09:1F:DB:F5:35:E7
Certificate issuer: /CN=2fe17bf80ee1e2e70db3ea05dc16f304e7090cf4
Certificate serial: 018CC34904737C99D4C128BF0D0D4A5BF2FC
Authority key identifier: 2F:E1:7B:F8:0E:E1:E2:E7:0D:B3:EA:05:DC:16:F3:04:E7:09:0C:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L-F7-A7h4ucNs-oF3BbzBOcJDPQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/5c4a71-b38a-4eb4-8633-24b3572a83bb/1/Si7OAWrrnZtOz_E_U0YJH9v1Nec.roa
Signing time: Mon 01 Jan 2024 04:29:51 +0000
ROA not before: Mon 01 Jan 2024 04:29:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203713
IP address blocks: 185.153.76.0/22 maxlen: 24
2a06:9880::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/5c4a71-b38a-4eb4-8633-24b3572a83bb/1/L-F7-A7h4ucNs-oF3BbzBOcJDPQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/5c4a71-b38a-4eb4-8633-24b3572a83bb/1/L-F7-A7h4ucNs-oF3BbzBOcJDPQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/L-F7-A7h4ucNs-oF3BbzBOcJDPQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 19:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:04:73:7c:99:d4:c1:28:bf:0d:0d:4a:5b:f2:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fe17bf80ee1e2e70db3ea05dc16f304e7090cf4
Validity
Not Before: Jan 1 04:29:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4a2ece016aeb9d9b4ecff13f5346091fdbf535e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f5:55:98:9a:db:82:84:f5:73:3e:ec:ed:83:
d8:e0:a2:ca:d9:63:3e:b7:f1:0f:43:25:7c:03:06:
dd:a7:16:84:34:0b:a2:9a:8d:ad:06:5e:15:8d:75:
77:14:dd:3f:56:62:ff:46:04:69:5d:5a:e1:37:3c:
19:2b:6c:91:fb:81:22:62:0a:d3:68:82:97:96:9f:
d5:99:19:5c:78:c0:8e:0c:2c:2a:17:7b:da:68:f5:
04:71:19:09:7e:e6:a9:18:52:ba:dd:fb:f7:5d:13:
66:bc:56:da:52:38:05:64:18:91:69:d5:25:3b:09:
27:36:d9:b8:44:c3:f5:1e:0a:f9:aa:99:47:a6:5a:
76:3c:f3:72:3f:a5:89:ed:91:c3:53:55:a3:db:f3:
eb:bd:19:b3:36:03:39:18:1a:28:02:ad:d4:2a:7e:
7c:62:ee:b3:3b:b5:25:39:5c:ac:4c:69:51:49:47:
c1:8c:d3:2f:d6:f1:2a:f1:45:7d:2e:a5:c6:ab:49:
62:08:58:28:2c:90:79:ae:15:29:30:6b:b8:1e:ff:
6a:66:5f:70:8b:5a:b7:2e:23:b4:86:32:77:77:4d:
39:43:ee:f3:68:09:23:21:3b:ae:14:74:4e:91:1a:
86:11:4c:f1:12:8b:32:f7:71:06:22:e3:fb:5f:1c:
61:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:2E:CE:01:6A:EB:9D:9B:4E:CF:F1:3F:53:46:09:1F:DB:F5:35:E7
X509v3 Authority Key Identifier:
keyid:2F:E1:7B:F8:0E:E1:E2:E7:0D:B3:EA:05:DC:16:F3:04:E7:09:0C:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L-F7-A7h4ucNs-oF3BbzBOcJDPQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/5c4a71-b38a-4eb4-8633-24b3572a83bb/1/Si7OAWrrnZtOz_E_U0YJH9v1Nec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/5c4a71-b38a-4eb4-8633-24b3572a83bb/1/L-F7-A7h4ucNs-oF3BbzBOcJDPQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.153.76.0/22
IPv6:
2a06:9880::/29
Signature Algorithm: sha256WithRSAEncryption
37:79:74:76:5d:ca:7e:c7:9b:5d:5f:8a:10:ce:96:71:6d:c1:
1b:a7:23:c7:96:37:22:a9:b7:04:7c:0d:72:81:25:33:04:fd:
1c:53:9f:b5:c9:1b:89:b1:f6:08:be:f3:d8:61:33:ad:d1:d2:
9c:00:4a:81:18:f4:7c:24:d1:65:75:5d:38:eb:b9:50:46:8c:
dc:ae:55:a1:0f:0f:95:08:c2:6d:3c:66:ee:64:59:c3:d6:56:
0a:13:fc:d6:dc:ba:e1:fa:09:47:cf:7b:a9:33:eb:b4:32:ed:
61:d6:fa:c0:17:2c:cb:cb:39:6a:5f:53:a8:d7:93:b6:74:10:
d1:2e:01:9d:0b:57:d0:0d:ee:de:b8:f9:c2:fb:8f:7f:26:a2:
10:94:c2:96:30:c5:42:18:c3:7d:65:ba:ac:fe:fa:53:34:d1:
38:73:cc:db:a1:d6:1a:8e:be:d9:b4:22:d4:a9:98:36:65:5d:
ef:3b:3d:aa:e3:4c:10:66:c9:4e:f6:6e:02:ef:7c:7c:d0:de:
84:e2:6d:b9:17:f3:99:8e:a8:9c:08:05:e5:e3:63:98:91:c5:
71:e8:7d:d6:cb:80:1e:02:4d:46:b3:75:e8:9a:58:e2:56:05:
ad:9f:be:f8:26:52:87:8d:88:fd:37:32:5b:cf:6b:33:b9:16:
68:33:a7:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 04:04:25 2024 by rpki-client on console-ams.rpki-client.org