Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/e23969-ffb0-4e57-a36a-760f6b6aabc1/1/V_3GSV5KXcJGlT0pHRbOJcCOpiQ.roa
File: V_3GSV5KXcJGlT0pHRbOJcCOpiQ.roa (raw, json)
Hash identifier: TCEK2csyxggzpKv5ea2DfRCef6/bg5OQQH3b19jC6nQ=
Subject key identifier: 57:FD:C6:49:5E:4A:5D:C2:46:95:3D:29:1D:16:CE:25:C0:8E:A6:24
Certificate issuer: /CN=1d10e38ed55e3185aed6f079f8bb9bf12d4448db
Certificate serial: 018CC64B0B91605A385358D0733E2B3545D0
Authority key identifier: 1D:10:E3:8E:D5:5E:31:85:AE:D6:F0:79:F8:BB:9B:F1:2D:44:48:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HRDjjtVeMYWu1vB5-Lub8S1ESNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/e23969-ffb0-4e57-a36a-760f6b6aabc1/1/V_3GSV5KXcJGlT0pHRbOJcCOpiQ.roa
Signing time: Mon 01 Jan 2024 18:30:56 +0000
ROA not before: Mon 01 Jan 2024 18:30:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 64443
IP address blocks: 185.164.107.0/24 maxlen: 24
185.164.104.0/24 maxlen: 24
185.164.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/e23969-ffb0-4e57-a36a-760f6b6aabc1/1/HRDjjtVeMYWu1vB5-Lub8S1ESNs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/e23969-ffb0-4e57-a36a-760f6b6aabc1/1/HRDjjtVeMYWu1vB5-Lub8S1ESNs.mft
rsync://rpki.ripe.net/repository/DEFAULT/HRDjjtVeMYWu1vB5-Lub8S1ESNs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 19:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:0b:91:60:5a:38:53:58:d0:73:3e:2b:35:45:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d10e38ed55e3185aed6f079f8bb9bf12d4448db
Validity
Not Before: Jan 1 18:30:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=57fdc6495e4a5dc246953d291d16ce25c08ea624
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:f2:5b:06:d3:47:aa:f7:36:0f:f8:22:27:18:
26:34:8c:bb:41:03:37:7b:af:d5:3d:06:42:43:fb:
3c:9c:09:0e:8d:7e:2c:2b:a3:8a:1d:96:20:ce:9c:
a0:3a:3e:10:dd:48:39:84:57:f6:68:f1:17:67:67:
0c:7f:47:ff:3b:64:16:63:b1:60:fc:ff:b4:77:e9:
1c:77:87:71:ea:f8:57:93:6c:84:0a:57:ee:9e:59:
a1:8f:ad:a8:6c:8f:f5:3e:ea:12:2e:44:af:6b:3f:
7d:9c:db:25:20:69:b4:4f:39:b1:79:e6:c5:a5:21:
3b:8b:b1:c4:f6:77:61:f8:62:8c:48:e1:02:b1:9a:
83:6c:6a:ed:be:f1:ee:3a:f8:1d:df:ec:f5:41:c2:
db:03:98:4d:3a:1b:7f:97:8c:bd:39:94:12:bb:3d:
a5:52:c5:99:13:eb:63:b2:6c:ca:c7:46:c1:eb:6a:
3b:54:4c:cb:5f:8f:cd:fe:eb:19:24:76:21:b1:6b:
e4:dc:a6:2e:62:a9:41:a4:b4:17:1d:56:5f:01:a2:
bb:a0:43:b2:0a:67:fc:3a:d9:16:81:ec:33:c0:50:
d6:e1:6f:c0:af:7a:ce:61:31:dd:55:3e:70:c6:74:
34:6b:14:b7:a2:08:2c:7c:ae:ea:ca:33:d2:36:e7:
69:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:FD:C6:49:5E:4A:5D:C2:46:95:3D:29:1D:16:CE:25:C0:8E:A6:24
X509v3 Authority Key Identifier:
keyid:1D:10:E3:8E:D5:5E:31:85:AE:D6:F0:79:F8:BB:9B:F1:2D:44:48:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HRDjjtVeMYWu1vB5-Lub8S1ESNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e23969-ffb0-4e57-a36a-760f6b6aabc1/1/V_3GSV5KXcJGlT0pHRbOJcCOpiQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e23969-ffb0-4e57-a36a-760f6b6aabc1/1/HRDjjtVeMYWu1vB5-Lub8S1ESNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.164.104.0/23
185.164.107.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:ff:c2:fc:af:f7:13:6c:cf:2d:de:9e:b6:44:f5:92:93:96:
57:42:dc:b2:f5:88:49:6d:9a:c9:ba:7c:94:c1:36:5d:f5:77:
16:d7:bc:0f:bd:9e:e2:6b:b1:b5:2a:6d:05:47:00:ac:0a:65:
e9:8a:96:fa:c2:ee:86:1a:57:a6:2c:45:c4:0e:e4:45:07:66:
a7:a7:c3:fa:92:39:32:9b:65:46:06:92:b2:8c:b5:4a:4c:b1:
6c:8c:e4:3d:45:91:cb:b1:10:14:71:10:80:0c:6b:c7:15:dd:
33:37:2c:7d:04:cb:33:e0:40:54:18:4c:03:8e:56:27:eb:a9:
30:82:cd:5b:1f:c4:5d:de:90:3f:91:65:bb:67:f2:da:22:68:
c1:35:a3:1b:42:c1:d5:74:6b:36:26:84:99:6f:95:64:4e:a7:
83:df:71:f5:1d:42:68:7c:64:be:39:6d:54:7b:c6:42:45:51:
2c:75:8e:01:af:b7:00:c3:00:cd:70:9b:17:78:64:48:03:ab:
e1:31:e1:42:9c:97:00:09:8e:29:ac:a8:85:c9:5d:8d:2c:07:
e5:cd:81:cb:22:16:58:7e:84:a5:19:3d:7e:a9:da:23:a7:69:
b0:82:c5:e3:5f:d2:7a:5f:9e:8e:92:6d:32:f7:b0:40:34:0f:
63:60:a1:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 23:06:49 2024 by rpki-client on console-fra.rpki-client.org