Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/a75946-57b4-41eb-b6b5-5295f5b3f19b/1/DGZoGdtEl9z1S3wtHCpNUP64UtI.roa
File: DGZoGdtEl9z1S3wtHCpNUP64UtI.roa (raw, json)
Hash identifier: KE5MJiuZdYxCTvRzHl01wnLgnY5lgTPuDonzo+fg4+0=
Subject key identifier: 0C:66:68:19:DB:44:97:DC:F5:4B:7C:2D:1C:2A:4D:50:FE:B8:52:D2
Certificate issuer: /CN=bc83c2843c1649b0054c91124fee03114095e163
Certificate serial: 018CC8013F2583E646E56F7F5F653B71FC2A
Authority key identifier: BC:83:C2:84:3C:16:49:B0:05:4C:91:12:4F:EE:03:11:40:95:E1:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vIPChDwWSbAFTJEST-4DEUCV4WM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/a75946-57b4-41eb-b6b5-5295f5b3f19b/1/DGZoGdtEl9z1S3wtHCpNUP64UtI.roa
Signing time: Tue 02 Jan 2024 02:29:34 +0000
ROA not before: Tue 02 Jan 2024 02:29:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 394805
IP address blocks: 185.240.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/a75946-57b4-41eb-b6b5-5295f5b3f19b/1/vIPChDwWSbAFTJEST-4DEUCV4WM.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/a75946-57b4-41eb-b6b5-5295f5b3f19b/1/vIPChDwWSbAFTJEST-4DEUCV4WM.mft
rsync://rpki.ripe.net/repository/DEFAULT/vIPChDwWSbAFTJEST-4DEUCV4WM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 01:03:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:3f:25:83:e6:46:e5:6f:7f:5f:65:3b:71:fc:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc83c2843c1649b0054c91124fee03114095e163
Validity
Not Before: Jan 2 02:29:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0c666819db4497dcf54b7c2d1c2a4d50feb852d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1b:1c:08:ce:fb:a1:51:c5:c7:be:f7:33:74:
12:80:21:9d:fb:e4:2d:33:63:72:bf:53:79:cc:b3:
3e:85:b7:4e:21:40:d2:33:fa:3b:5d:f0:97:98:6d:
58:a2:0a:f5:27:64:24:83:f0:29:d0:c9:cc:7d:5a:
9d:73:92:a6:72:70:6c:dd:e5:f7:52:f4:a9:ff:20:
32:5d:7a:04:a2:b4:fd:9e:8b:d8:fc:63:1c:e9:e1:
fc:a2:81:b9:ef:21:7e:1a:0a:79:6e:4f:27:69:76:
22:79:58:81:e5:00:e9:4d:e7:f8:53:92:3e:fd:2f:
25:55:ee:ef:d9:1e:11:1f:52:c9:ab:cf:a5:9b:00:
d1:65:af:cf:52:bc:7b:30:07:e5:9b:bd:ca:88:c8:
66:a4:84:0a:f6:c8:c2:c0:69:9e:df:f4:68:18:c5:
bc:71:e7:aa:b3:fa:53:9f:6c:6d:59:c7:38:33:24:
1b:71:ce:5a:34:a5:c1:f0:60:5d:12:ab:05:aa:72:
90:b0:0c:6a:ce:1b:c1:d6:51:c2:2e:60:30:86:82:
77:24:7c:bd:82:93:02:7a:68:df:8c:3d:6d:15:5a:
35:d9:f0:83:0e:20:65:25:fd:0b:6e:09:bc:c6:82:
d3:14:41:d2:ab:bc:34:2b:46:7b:b5:38:d4:5c:0d:
a6:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:66:68:19:DB:44:97:DC:F5:4B:7C:2D:1C:2A:4D:50:FE:B8:52:D2
X509v3 Authority Key Identifier:
keyid:BC:83:C2:84:3C:16:49:B0:05:4C:91:12:4F:EE:03:11:40:95:E1:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vIPChDwWSbAFTJEST-4DEUCV4WM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/a75946-57b4-41eb-b6b5-5295f5b3f19b/1/DGZoGdtEl9z1S3wtHCpNUP64UtI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/a75946-57b4-41eb-b6b5-5295f5b3f19b/1/vIPChDwWSbAFTJEST-4DEUCV4WM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.240.186.0/24
Signature Algorithm: sha256WithRSAEncryption
11:55:71:32:5a:0e:63:53:3d:fa:48:c5:6d:9b:a2:9d:44:43:
23:3a:21:7a:44:32:59:dc:f0:f5:4a:f3:e4:01:4b:ed:72:82:
04:17:66:1b:36:1f:f9:0c:bd:de:0d:84:05:93:df:7a:dc:23:
ed:f6:c4:f8:b9:37:b6:7f:c7:2d:50:18:07:98:83:d1:89:b5:
1a:18:27:2b:09:09:37:96:2e:4c:0d:cc:69:4a:0d:9a:72:c6:
4e:f1:5b:4b:34:64:49:22:7c:cd:97:5a:4c:b0:8a:fd:98:38:
ea:e9:85:a8:0b:9a:4c:db:b7:90:87:bf:29:4b:05:7b:73:d8:
5b:20:56:f5:45:05:be:59:6e:26:00:15:f5:01:e5:3c:0e:c3:
73:30:6d:c5:77:46:57:d3:d7:d5:f9:ff:97:76:2e:cf:9a:ba:
c3:bc:3c:a2:a6:88:e1:ce:a1:2b:ad:3d:cb:08:4f:7c:e6:04:
08:d4:c0:fe:90:d2:81:56:bd:34:d8:15:b5:4d:5b:17:ea:a8:
03:cc:cd:be:a4:b3:75:af:06:95:62:36:4d:34:21:75:6e:5c:
97:e8:94:58:a6:a3:b2:58:28:2c:ea:e9:9e:2f:f1:2c:9e:48:
4c:14:56:57:f2:e7:f1:e1:84:4b:bf:fd:fa:58:7f:36:5d:1e:
a0:70:b9:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 07:49:37 2024 by rpki-client on console-fra.rpki-client.org