Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/01ebc2-84d0-4ae3-a2c2-a3b6be4a9e9b/1/dVsMi4XxrAmLrGRMtWbzxtc42_I.roa
File: dVsMi4XxrAmLrGRMtWbzxtc42_I.roa (raw, json)
Hash identifier: KR51J0CVwuxiF/qHpViX4BPtSd8IKKptZI3GUx6te7A=
Subject key identifier: 75:5B:0C:8B:85:F1:AC:09:8B:AC:64:4C:B5:66:F3:C6:D7:38:DB:F2
Certificate issuer: /CN=c0fbd5876613edc56e0f5de468cce5eb2885ff29
Certificate serial: 018CC8DF294E350367DD78A1FD9A72DADA59
Authority key identifier: C0:FB:D5:87:66:13:ED:C5:6E:0F:5D:E4:68:CC:E5:EB:28:85:FF:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wPvVh2YT7cVuD13kaMzl6yiF_yk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/01ebc2-84d0-4ae3-a2c2-a3b6be4a9e9b/1/dVsMi4XxrAmLrGRMtWbzxtc42_I.roa
Signing time: Tue 02 Jan 2024 06:31:57 +0000
ROA not before: Tue 02 Jan 2024 06:31:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7754
IP address blocks: 185.212.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/01ebc2-84d0-4ae3-a2c2-a3b6be4a9e9b/1/wPvVh2YT7cVuD13kaMzl6yiF_yk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/01ebc2-84d0-4ae3-a2c2-a3b6be4a9e9b/1/wPvVh2YT7cVuD13kaMzl6yiF_yk.mft
rsync://rpki.ripe.net/repository/DEFAULT/wPvVh2YT7cVuD13kaMzl6yiF_yk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:29:4e:35:03:67:dd:78:a1:fd:9a:72:da:da:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0fbd5876613edc56e0f5de468cce5eb2885ff29
Validity
Not Before: Jan 2 06:31:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=755b0c8b85f1ac098bac644cb566f3c6d738dbf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d5:e3:a1:3a:4b:f5:a5:0e:30:02:e0:d8:fc:
d4:cc:5f:d6:83:0f:f9:f0:c9:8a:e2:cd:58:5b:19:
d1:ce:c1:91:ea:ef:6e:49:6b:e4:63:18:c5:42:46:
02:84:0d:23:da:77:99:1a:1b:d1:db:48:cb:32:71:
4e:14:86:4e:ae:52:b9:68:95:05:23:6e:7e:70:95:
63:9d:ed:4c:e9:3f:d4:20:25:aa:8a:d3:d5:3c:3c:
59:8f:66:9e:9e:40:c2:ba:cd:7c:7c:37:45:aa:c7:
31:05:37:97:49:0a:2e:e4:b3:18:56:82:ef:c8:52:
b5:d4:53:01:be:29:ea:50:e5:6c:30:21:e7:71:ea:
9e:89:e6:12:af:d4:f8:9c:74:15:af:2e:4f:79:8a:
85:e9:f7:85:40:62:37:97:dc:64:d8:7c:ec:d4:07:
70:a3:68:4b:56:32:ad:52:1d:89:ff:c7:5f:93:e9:
d9:cb:ad:4b:84:fe:f4:0d:32:97:f5:b8:34:22:11:
a8:44:36:28:2a:bd:df:4a:4f:50:2e:74:48:93:f1:
05:c0:1a:7b:e0:3a:33:26:74:6e:83:09:64:3a:4d:
db:f7:02:81:5e:17:57:dc:81:43:3f:76:dd:05:dd:
d2:e3:2e:25:fd:32:62:e2:4a:e1:60:34:3f:96:96:
4d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:5B:0C:8B:85:F1:AC:09:8B:AC:64:4C:B5:66:F3:C6:D7:38:DB:F2
X509v3 Authority Key Identifier:
keyid:C0:FB:D5:87:66:13:ED:C5:6E:0F:5D:E4:68:CC:E5:EB:28:85:FF:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wPvVh2YT7cVuD13kaMzl6yiF_yk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/01ebc2-84d0-4ae3-a2c2-a3b6be4a9e9b/1/dVsMi4XxrAmLrGRMtWbzxtc42_I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/01ebc2-84d0-4ae3-a2c2-a3b6be4a9e9b/1/wPvVh2YT7cVuD13kaMzl6yiF_yk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.212.104.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:bc:1e:15:22:5a:f0:04:3c:99:f0:14:e3:30:c1:2c:25:4e:
36:44:22:45:a1:33:0e:1e:f3:5a:9a:98:69:4e:af:a1:aa:28:
44:ab:70:6e:0d:de:b4:cd:b8:77:70:47:8c:5c:99:fb:55:bf:
1d:cd:34:94:dd:a0:fe:f7:ee:be:d0:52:11:58:c5:1c:04:87:
d4:85:b2:cc:bb:70:ab:ab:f5:55:e2:26:94:46:a2:b4:58:9f:
a9:35:3c:02:86:84:45:a6:b6:eb:a0:6f:61:7c:4a:c4:5b:6d:
26:3f:00:4d:f3:d7:8a:7a:26:36:b5:ff:0d:4b:ee:74:0d:2f:
88:91:71:28:79:02:51:55:8f:a5:2a:db:f5:b8:7d:9f:0e:e9:
85:81:65:98:66:74:7e:34:29:de:1e:85:08:bf:a7:95:89:ce:
d6:4e:40:97:b0:49:d3:ba:bc:43:0a:58:2c:56:88:c0:b7:cd:
7a:88:cb:53:71:64:38:42:80:23:67:96:9a:33:67:ba:1d:23:
4b:6c:ab:28:fc:31:1d:0b:ba:94:b9:e5:6e:a4:fc:b4:f3:ab:
38:85:d8:eb:fc:6e:77:34:e1:db:53:ae:0b:4b:70:dd:2b:56:
e7:e6:73:98:ce:71:79:51:7d:d8:5f:86:ad:1a:76:d6:4b:2c:
38:b1:7c:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:22:56 2024 by rpki-client on console-fra.rpki-client.org