Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/IKbDv3h7qyqkqkPMVt4xtOpqscc.roa
File: IKbDv3h7qyqkqkPMVt4xtOpqscc.roa (raw, json)
Hash identifier: ClXJ5f/aVxQkhF6CJXhOcGkFoJOd8IsMItZjLjvlmIo=
Subject key identifier: 20:A6:C3:BF:78:7B:AB:2A:A4:AA:43:CC:56:DE:31:B4:EA:6A:B1:C7
Certificate issuer: /CN=eac2c1afd4bdec980506fa07df7c8662d554fa46
Certificate serial: 018CCF2884C535C7CB62FBAFFB1497303EB3
Authority key identifier: EA:C2:C1:AF:D4:BD:EC:98:05:06:FA:07:DF:7C:86:62:D5:54:FA:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/IKbDv3h7qyqkqkPMVt4xtOpqscc.roa
Signing time: Wed 03 Jan 2024 11:49:48 +0000
ROA not before: Wed 03 Jan 2024 11:49:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209043
IP address blocks: 147.185.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 May 2024 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:cf:28:84:c5:35:c7:cb:62:fb:af:fb:14:97:30:3e:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eac2c1afd4bdec980506fa07df7c8662d554fa46
Validity
Not Before: Jan 3 11:49:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=20a6c3bf787bab2aa4aa43cc56de31b4ea6ab1c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:4b:e5:51:7a:8d:68:09:c2:60:e5:e1:8a:61:
fe:d1:1b:cb:95:c0:af:90:5d:10:ed:d3:f5:30:ff:
0b:a3:ca:77:e0:11:a0:95:41:0d:89:ce:14:33:0b:
06:2d:fb:42:75:75:4e:0d:d3:99:1c:3e:1b:a7:0d:
8e:6c:4d:16:8c:e4:77:d1:63:fe:a0:9b:b0:06:3f:
07:78:aa:52:dc:61:a0:31:03:36:e2:14:cd:86:63:
c1:62:50:91:6e:d4:1e:9e:cd:ea:4d:e4:4b:37:0f:
01:c9:15:b8:4f:66:95:36:42:b4:b8:be:e5:4c:8d:
23:b8:f8:64:d3:86:7e:20:24:1d:85:45:56:44:fb:
9b:cd:c0:0a:b8:21:a0:05:97:10:62:ac:60:04:47:
f4:29:9d:3f:fa:03:38:12:38:3e:83:d9:ec:a5:85:
73:e1:1e:0c:81:d1:7e:76:08:5d:2a:2d:b7:92:5f:
9a:f2:1b:12:7d:0a:d6:ba:46:6d:dc:20:d3:cb:4b:
0e:3e:2b:65:2b:2a:6d:22:e6:ac:14:20:91:1a:e4:
35:da:ba:b5:ca:e3:6e:2f:1f:90:7c:a2:2f:a7:be:
6a:23:4c:bd:3e:84:20:af:e7:fd:77:d8:f1:30:ce:
c1:34:ab:44:27:0e:32:51:0b:e6:7f:87:e4:91:38:
e5:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:A6:C3:BF:78:7B:AB:2A:A4:AA:43:CC:56:DE:31:B4:EA:6A:B1:C7
X509v3 Authority Key Identifier:
keyid:EA:C2:C1:AF:D4:BD:EC:98:05:06:FA:07:DF:7C:86:62:D5:54:FA:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/IKbDv3h7qyqkqkPMVt4xtOpqscc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.185.106.0/24
Signature Algorithm: sha256WithRSAEncryption
48:6e:16:81:ce:f1:5a:f2:48:cb:5e:fc:08:3e:e2:b8:00:59:
2b:29:c1:86:f8:98:bf:bf:1d:54:36:26:4e:15:7f:e0:f5:30:
c7:98:c1:ce:32:c2:6d:9a:44:9f:99:20:77:35:fb:dc:b7:bc:
52:40:ca:d6:41:ee:ff:fb:92:3d:cb:ac:85:78:a7:11:2a:34:
2e:0a:86:62:71:a8:fe:8e:ef:53:4f:07:c9:a4:51:79:e1:f3:
54:10:41:ae:ae:5b:27:4e:12:47:b3:11:76:b4:a0:b2:e3:31:
0d:0e:a5:b3:c5:58:a0:21:d4:23:36:dd:a9:50:83:2a:b3:4e:
9e:c0:75:f9:63:68:2f:72:ca:aa:da:07:7a:17:c2:50:f8:4e:
1e:2b:c2:69:88:29:87:04:55:18:da:da:3c:9a:d9:e2:5c:a0:
93:62:07:2d:5f:ae:29:86:fe:72:8a:a7:a4:06:ae:c8:0b:a0:
7c:8d:6a:f7:fc:e1:12:23:a9:1e:95:29:48:c1:ac:80:6d:55:
66:dc:a2:1c:d3:51:41:d6:15:d8:07:e5:21:93:ef:2a:0b:ac:
9f:9f:c6:db:0b:86:85:73:42:75:92:6b:0f:37:bf:10:2a:1a:
f1:4c:a9:58:5b:39:4e:6d:04:bc:11:b0:69:2d:d3:ef:45:ce:
22:4f:2c:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 26 09:39:00 2024 by rpki-client on console-ams.rpki-client.org