Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/55b9d7-f703-45fe-8b63-10534c67bbb8/1/z4WfJQOkAWRG9YQROTFkfF8D_XI.roa
File: z4WfJQOkAWRG9YQROTFkfF8D_XI.roa (raw, json)
Hash identifier: jRFDik6eSIABg1yaLyqx9wnNvbjTNi+J57BWbI72w6I=
Subject key identifier: CF:85:9F:25:03:A4:01:64:46:F5:84:11:39:31:64:7C:5F:03:FD:72
Certificate issuer: /CN=e5de0de73e73874bbc66738805d373cab833b7a5
Certificate serial: 018CC793D8A9AE6892039436FF57CC5696F6
Authority key identifier: E5:DE:0D:E7:3E:73:87:4B:BC:66:73:88:05:D3:73:CA:B8:33:B7:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5d4N5z5zh0u8ZnOIBdNzyrgzt6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/55b9d7-f703-45fe-8b63-10534c67bbb8/1/z4WfJQOkAWRG9YQROTFkfF8D_XI.roa
Signing time: Tue 02 Jan 2024 00:30:04 +0000
ROA not before: Tue 02 Jan 2024 00:30:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 185.137.156.0/24 maxlen: 24
2a10:a100::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/55b9d7-f703-45fe-8b63-10534c67bbb8/1/5d4N5z5zh0u8ZnOIBdNzyrgzt6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/55b9d7-f703-45fe-8b63-10534c67bbb8/1/5d4N5z5zh0u8ZnOIBdNzyrgzt6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/5d4N5z5zh0u8ZnOIBdNzyrgzt6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 16:59:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:93:d8:a9:ae:68:92:03:94:36:ff:57:cc:56:96:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5de0de73e73874bbc66738805d373cab833b7a5
Validity
Not Before: Jan 2 00:30:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cf859f2503a4016446f584113931647c5f03fd72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6b:b2:b2:4b:05:50:a6:80:08:a0:aa:d7:e4:
4d:e2:94:62:6e:6b:82:0e:e2:6e:39:94:09:86:86:
33:c4:02:83:17:17:2d:16:d1:9c:b5:b0:1a:8b:6a:
0e:12:62:01:97:12:27:e7:b3:b8:16:55:ce:8f:6b:
95:f3:0d:fc:c0:aa:79:3b:20:47:63:bc:da:dd:ca:
b2:5d:a3:55:11:39:51:44:a2:49:69:f4:a6:a6:d9:
28:2a:d7:db:dd:90:d5:ed:8c:b6:7c:74:36:09:3d:
b9:0a:41:e8:ec:d8:6f:3c:a8:37:56:74:a4:88:48:
42:6b:02:d2:e4:eb:8d:c9:a4:25:7f:cb:85:94:42:
68:5a:3b:d4:21:74:59:49:c5:5c:17:37:1b:bc:f2:
4e:78:0d:6b:18:82:a0:66:ed:af:d9:39:da:f2:6a:
3c:73:5d:da:81:a3:5d:c0:4d:e7:de:a8:a9:46:6c:
4c:1a:1d:90:21:90:7f:d1:1e:5c:d2:ff:3b:d8:5d:
c7:5b:0c:d1:9d:ea:dc:95:23:d0:03:54:76:a6:58:
f4:53:4f:23:1f:6a:1b:0b:69:d8:2a:fb:d4:2a:81:
2c:21:12:dd:4c:48:d5:df:0f:a8:5e:08:e1:6e:1a:
19:bb:4d:9b:52:84:66:5d:6a:e6:11:0c:0c:d2:54:
3b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:85:9F:25:03:A4:01:64:46:F5:84:11:39:31:64:7C:5F:03:FD:72
X509v3 Authority Key Identifier:
keyid:E5:DE:0D:E7:3E:73:87:4B:BC:66:73:88:05:D3:73:CA:B8:33:B7:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d4N5z5zh0u8ZnOIBdNzyrgzt6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/55b9d7-f703-45fe-8b63-10534c67bbb8/1/z4WfJQOkAWRG9YQROTFkfF8D_XI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/55b9d7-f703-45fe-8b63-10534c67bbb8/1/5d4N5z5zh0u8ZnOIBdNzyrgzt6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.137.156.0/24
IPv6:
2a10:a100::/32
Signature Algorithm: sha256WithRSAEncryption
78:9e:9d:e7:ca:e0:a3:69:65:34:53:69:6b:99:aa:be:f7:53:
32:d7:f9:db:05:82:10:18:e2:78:ed:1c:26:a3:45:23:0a:a5:
09:16:68:fa:6f:79:a1:6c:3f:d1:db:36:4c:81:00:a7:3f:78:
0b:49:1a:5f:65:d6:49:3c:66:c6:05:8a:f3:d7:fd:63:ad:c2:
f2:34:3c:98:91:88:60:6a:38:eb:c6:09:45:05:6a:5d:aa:0f:
3d:2f:f2:90:44:d0:86:86:79:6f:93:9c:91:25:c5:a8:e3:3a:
76:af:05:a1:d2:16:00:2d:ed:db:19:38:56:ec:80:1a:cb:6c:
1e:12:9b:13:0c:ed:cb:ed:37:c3:e1:e8:b9:85:95:14:26:0e:
f5:8a:ac:5b:c3:b8:5c:55:33:93:84:08:de:77:1f:d8:32:56:
d8:98:8e:86:73:27:54:ac:b6:a4:8c:f3:21:5a:c5:b5:d2:c6:
bd:bb:af:d2:02:d4:85:ca:3a:e1:a4:8d:1e:60:e8:9b:27:2b:
99:0d:1d:fd:6d:76:ff:18:1a:7e:97:00:7d:7d:66:d2:be:e6:
e3:26:8f:06:5c:c0:3a:68:01:12:91:4f:fe:7d:c1:f6:2f:a1:
a1:03:09:68:b6:25:28:28:a3:30:2c:8a:7b:45:9e:c2:24:49:
ce:10:d3:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 22:20:52 2024 by rpki-client on console-fra.rpki-client.org