Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/460c00-3e95-4274-bc9c-060dacfebe0f/1/1-5GwnChyBxACGugQDZDkXHgAjiY.roa
File: 1-5GwnChyBxACGugQDZDkXHgAjiY.roa (raw, json)
Hash identifier: VGd0OZZ4ePR59O/0XK1PyWaPfO8kO5wGV4T7ldy0F+4=
Subject key identifier: FB:91:B0:9C:28:72:07:10:02:1A:E8:10:0D:90:E4:5C:78:00:8E:26
Certificate issuer: /CN=05bfdbb6a4b1663369da407db97b021f73284a28
Certificate serial: 018EBC34B3B71E32931098CF7003EDF34572
Authority key identifier: 05:BF:DB:B6:A4:B1:66:33:69:DA:40:7D:B9:7B:02:1F:73:28:4A:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bb_btqSxZjNp2kB9uXsCH3MoSig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/460c00-3e95-4274-bc9c-060dacfebe0f/1/1-5GwnChyBxACGugQDZDkXHgAjiY.roa
Signing time: Mon 08 Apr 2024 05:35:54 +0000
ROA not before: Mon 08 Apr 2024 05:35:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215322
IP address blocks: 185.17.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/460c00-3e95-4274-bc9c-060dacfebe0f/1/Bb_btqSxZjNp2kB9uXsCH3MoSig.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/460c00-3e95-4274-bc9c-060dacfebe0f/1/Bb_btqSxZjNp2kB9uXsCH3MoSig.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bb_btqSxZjNp2kB9uXsCH3MoSig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:bc:34:b3:b7:1e:32:93:10:98:cf:70:03:ed:f3:45:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05bfdbb6a4b1663369da407db97b021f73284a28
Validity
Not Before: Apr 8 05:35:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fb91b09c28720710021ae8100d90e45c78008e26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:07:33:aa:87:dd:cd:3f:a7:3c:9d:81:97:b7:
88:75:12:b4:e3:b4:a2:1a:eb:6d:38:a8:c6:e2:a8:
4d:ce:af:bf:b7:90:af:b8:70:49:fe:3f:65:66:79:
8e:56:b2:9e:01:99:4f:5f:fe:c2:37:f7:a2:e3:8a:
3f:0c:d3:76:3b:0c:f8:81:5d:1e:0f:ca:03:a0:49:
94:4b:7f:55:7b:d2:42:83:3e:43:4d:15:30:e4:d0:
48:78:b6:b8:20:ac:34:27:b7:f5:77:bb:57:26:61:
9c:44:8a:11:2d:0e:77:f9:4a:c5:3f:59:02:8a:07:
82:48:05:79:0c:6f:e7:6d:c3:fd:a7:01:b8:54:c1:
51:f5:33:62:c1:44:6f:f6:22:80:a5:20:87:b8:70:
1e:88:79:ae:64:d0:3d:3d:1a:f4:67:88:26:72:da:
f1:a1:12:11:9e:30:d4:a9:d2:c7:f9:24:58:37:92:
25:0e:de:1b:a5:2b:e2:d5:31:4a:ba:e4:c0:cc:15:
c8:3c:e4:92:05:1f:d1:4d:bb:5e:a7:cf:2e:26:25:
72:e2:40:ea:6a:50:e7:21:31:c2:58:9b:00:4b:79:
73:a9:7d:28:af:c7:d5:a2:10:a5:d0:45:5c:bd:82:
27:c9:ec:5a:8a:cd:fb:b8:e1:7b:3a:06:6a:ac:15:
fa:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:91:B0:9C:28:72:07:10:02:1A:E8:10:0D:90:E4:5C:78:00:8E:26
X509v3 Authority Key Identifier:
keyid:05:BF:DB:B6:A4:B1:66:33:69:DA:40:7D:B9:7B:02:1F:73:28:4A:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bb_btqSxZjNp2kB9uXsCH3MoSig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/460c00-3e95-4274-bc9c-060dacfebe0f/1/1-5GwnChyBxACGugQDZDkXHgAjiY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/460c00-3e95-4274-bc9c-060dacfebe0f/1/Bb_btqSxZjNp2kB9uXsCH3MoSig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.17.25.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:e6:fa:5a:09:26:be:a6:71:a5:7e:5b:a0:b4:6d:58:1e:f8:
84:f3:28:e3:67:23:52:9e:fe:f7:0d:e8:b6:26:3f:8f:9d:32:
31:98:0a:1a:3c:56:ad:2c:b1:ac:30:c2:8e:70:21:28:8f:48:
56:c1:75:40:5b:38:ad:dc:f6:87:fd:26:9c:3e:8a:f1:1d:0b:
e0:ef:7a:cf:e9:c0:62:8b:ff:5a:18:92:c6:ed:33:00:40:39:
ab:fc:8c:50:b1:71:db:bc:70:f1:97:2d:e7:97:a4:08:25:b3:
ce:02:8b:74:af:1a:37:85:01:58:0e:af:d0:c0:fd:04:36:1a:
78:00:57:4c:51:3b:3b:0d:0e:10:5a:32:f8:06:66:7e:ef:f1:
b5:91:b0:7c:30:37:4e:93:28:51:c4:26:71:13:48:51:82:bd:
e1:55:f4:54:e8:3c:f5:e1:1b:7f:2e:4e:bc:6e:02:98:a4:30:
bf:de:d6:c9:f0:15:5e:d9:2f:51:a3:51:e0:2d:fc:b8:00:e0:
10:68:9d:96:09:36:e3:a1:c1:1c:2b:f6:96:de:b9:db:c7:d9:
48:69:6f:e4:df:65:a2:ce:f7:75:e6:70:7d:8f:e1:de:a7:f9:
94:31:56:b1:9a:d1:7f:47:23:f7:94:cd:cf:08:13:bd:09:c3:
59:0e:a9:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 23:11:19 2024 by rpki-client on console-ams.rpki-client.org