Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/50a4c4-91d1-4311-b67b-e45fa64d4d2d/1/bTiaXBQN6oL5pf6gThGNI5g8g8E.roa
File: bTiaXBQN6oL5pf6gThGNI5g8g8E.roa (raw, json)
Hash identifier: eddiIVxJ7MC7SwE9sSoocxesp1+Ox+IcCtBE3ITVAko=
Subject key identifier: 6D:38:9A:5C:14:0D:EA:82:F9:A5:FE:A0:4E:11:8D:23:98:3C:83:C1
Certificate issuer: /CN=edb04a943332768017266f4e5f56c006d98ebbb4
Certificate serial: 018CC94E1A7653E0C6EB25FF9B86C1959526
Authority key identifier: ED:B0:4A:94:33:32:76:80:17:26:6F:4E:5F:56:C0:06:D9:8E:BB:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7bBKlDMydoAXJm9OX1bABtmOu7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/50a4c4-91d1-4311-b67b-e45fa64d4d2d/1/bTiaXBQN6oL5pf6gThGNI5g8g8E.roa
Signing time: Tue 02 Jan 2024 08:33:08 +0000
ROA not before: Tue 02 Jan 2024 08:33:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202276
IP address blocks: 185.251.8.0/23 maxlen: 23
185.251.10.0/23 maxlen: 23
2a03:b8c0:1::/48 maxlen: 48
2a03:b8c0:5::/48 maxlen: 48
2a03:b8c0:10::/48 maxlen: 48
2a03:b8c0::/48 maxlen: 48
2a03:b8c0:13::/48 maxlen: 48
2a03:b8c0:3::/48 maxlen: 48
2a03:b8c0:9::/48 maxlen: 48
2a03:b8c0:14::/48 maxlen: 48
2a03:b8c0:7::/48 maxlen: 48
2a03:b8c0:2::/48 maxlen: 48
2a03:b8c0:12::/48 maxlen: 48
2a03:b8c0:8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/50a4c4-91d1-4311-b67b-e45fa64d4d2d/1/7bBKlDMydoAXJm9OX1bABtmOu7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/50a4c4-91d1-4311-b67b-e45fa64d4d2d/1/7bBKlDMydoAXJm9OX1bABtmOu7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/7bBKlDMydoAXJm9OX1bABtmOu7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:1a:76:53:e0:c6:eb:25:ff:9b:86:c1:95:95:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edb04a943332768017266f4e5f56c006d98ebbb4
Validity
Not Before: Jan 2 08:33:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6d389a5c140dea82f9a5fea04e118d23983c83c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:1f:21:88:b2:99:e6:13:9a:ce:a8:1a:b5:14:
2d:de:14:db:b7:49:9e:42:23:81:be:54:42:13:18:
ca:c5:e0:48:e4:0f:64:12:2b:b8:d9:c6:8f:64:49:
29:0c:09:4b:41:be:92:8d:bc:55:d3:00:3f:32:65:
65:0b:09:ef:5f:d8:12:c0:df:c5:49:3a:c4:5b:94:
32:cc:cd:ca:10:ab:a4:39:0b:1d:df:e8:8c:92:c6:
2a:dc:06:03:78:13:04:5e:04:f5:f3:00:ed:92:dc:
65:f0:41:1e:7f:c6:71:08:ce:3f:a1:87:ea:d7:f1:
c9:0e:8c:be:8c:1d:c2:c1:91:79:8e:d1:66:91:b9:
24:0b:a9:e0:81:87:9d:73:e6:51:b1:e4:e2:fd:20:
bf:52:78:24:56:dd:23:50:9a:ea:d2:4a:ad:35:12:
ca:e4:2a:1c:74:2f:cf:fc:6b:a5:d9:4a:0f:1d:e3:
82:63:50:47:a2:18:9b:02:25:45:63:80:ce:09:f8:
8c:6b:50:2c:91:31:42:ec:e8:fa:59:96:53:d5:9a:
1c:ac:b4:35:64:07:0d:46:9e:5b:5d:3d:0d:ef:9e:
0a:7a:a8:60:aa:77:3d:d0:81:12:e7:fe:eb:af:a9:
0a:fb:22:39:b9:03:46:b1:f0:66:12:4c:37:06:62:
76:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:38:9A:5C:14:0D:EA:82:F9:A5:FE:A0:4E:11:8D:23:98:3C:83:C1
X509v3 Authority Key Identifier:
keyid:ED:B0:4A:94:33:32:76:80:17:26:6F:4E:5F:56:C0:06:D9:8E:BB:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7bBKlDMydoAXJm9OX1bABtmOu7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/50a4c4-91d1-4311-b67b-e45fa64d4d2d/1/bTiaXBQN6oL5pf6gThGNI5g8g8E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/50a4c4-91d1-4311-b67b-e45fa64d4d2d/1/7bBKlDMydoAXJm9OX1bABtmOu7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.251.8.0/22
IPv6:
2a03:b8c0::/46
2a03:b8c0:5::/48
2a03:b8c0:7::-2a03:b8c0:9:ffff:ffff:ffff:ffff:ffff
2a03:b8c0:10::/48
2a03:b8c0:12::-2a03:b8c0:14:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
36:c8:be:d3:f5:7c:e4:46:c6:03:04:d5:bb:23:bc:e8:fb:65:
7e:31:a1:44:8d:a1:d5:e4:00:d1:ee:ed:8d:4c:a0:01:ef:09:
59:a9:51:73:44:1d:c8:c4:54:31:9e:b9:0d:87:3c:6e:64:6e:
69:c6:0e:48:2a:6f:46:65:fc:a5:21:5e:e6:a9:f7:7f:00:ef:
f3:5e:de:16:9c:3f:9e:8f:99:6c:d4:dc:76:6c:13:7a:22:75:
5b:ed:21:8a:df:49:de:00:f5:f6:76:ee:62:7e:eb:5e:68:72:
3b:e6:d9:b0:df:40:eb:3c:b7:00:29:f3:d2:ee:a0:61:2c:2a:
c2:90:fd:13:04:3e:94:2a:79:bf:61:2f:39:61:61:34:a8:c9:
dd:c0:5f:6f:71:3a:7c:e3:ad:93:6b:c4:1c:40:7f:bd:77:f1:
e5:12:57:8a:dd:c5:5c:8d:ee:e9:20:47:3e:03:90:ba:71:50:
5b:81:c6:6f:e1:5c:bb:59:0b:ad:27:52:95:e5:78:da:33:d5:
57:bf:76:52:60:24:77:c1:bf:49:c6:0a:d8:b6:e4:9d:2a:6f:
dd:da:78:16:b2:54:2f:af:e0:e4:92:79:cd:c7:72:f5:6a:d4:
e7:2d:6a:c5:15:f2:e5:b5:3d:93:af:63:dd:6a:f4:ae:c8:ee:
f2:86:0e:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 07:05:52 2024 by rpki-client on console-ams.rpki-client.org