Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/CVnDCoDNkq_PZ2LusS6nH-s4MiY.roa
File: CVnDCoDNkq_PZ2LusS6nH-s4MiY.roa (raw, json)
Hash identifier: qUG50XmtuJVF4QkrKXrwkxEGp18u9CBniRJViLupcXY=
Subject key identifier: 09:59:C3:0A:80:CD:92:AF:CF:67:62:EE:B1:2E:A7:1F:EB:38:32:26
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 018CC8DFA47726C79601C630C50B6AD30BE1
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/CVnDCoDNkq_PZ2LusS6nH-s4MiY.roa
Signing time: Tue 02 Jan 2024 06:32:28 +0000
ROA not before: Tue 02 Jan 2024 06:32:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201138
IP address blocks: 185.102.137.0/24 maxlen: 24
185.125.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Jun 2024 09:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:a4:77:26:c7:96:01:c6:30:c5:0b:6a:d3:0b:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 2 06:32:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0959c30a80cd92afcf6762eeb12ea71feb383226
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c1:53:ca:c3:e0:0a:df:2d:65:9d:26:07:a6:
9a:96:96:93:66:b4:b3:50:42:e6:3a:70:34:bc:1b:
03:3d:0d:84:c5:2e:08:c4:97:2a:7a:05:c6:06:76:
49:00:d4:4a:3f:a8:b4:ad:72:db:b2:a3:46:19:13:
3b:9a:c8:64:96:a0:9f:13:ce:fb:6b:29:8a:1a:55:
14:57:45:e4:95:84:fe:77:f4:35:3b:4e:8d:24:6e:
1b:df:de:35:6c:84:80:58:5a:6d:47:43:88:5d:99:
f7:86:c9:6a:89:ca:6a:2b:aa:87:5f:79:99:5b:7a:
74:eb:de:67:28:a5:27:38:77:23:cf:21:d9:b7:2b:
77:71:f5:00:d1:c8:ae:65:92:24:97:81:c5:70:13:
d8:93:4d:f4:d5:55:48:8c:e4:36:e8:3a:09:54:36:
2d:ca:ac:2f:95:a5:b5:84:1a:f5:08:27:42:fd:24:
8e:39:86:5c:a0:eb:90:46:2b:79:40:e2:ca:50:0d:
70:93:84:d5:f9:93:e8:29:5c:99:e6:bf:57:c8:89:
0a:73:08:75:33:4e:be:fa:a8:f5:bc:9f:81:fd:89:
36:f5:1e:67:35:0f:07:2c:b1:f5:dc:80:e4:1d:9f:
98:7e:1f:c9:49:66:cc:7a:aa:e4:b8:b3:65:7b:10:
21:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:59:C3:0A:80:CD:92:AF:CF:67:62:EE:B1:2E:A7:1F:EB:38:32:26
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/CVnDCoDNkq_PZ2LusS6nH-s4MiY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.102.137.0/24
185.125.229.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:c1:14:ed:71:23:29:bc:67:bc:d5:29:24:9a:af:ea:f4:8f:
47:4b:57:15:c1:e4:f8:64:4a:5c:28:8c:f2:3c:5e:2e:a4:4b:
c5:03:a9:b4:6c:29:44:6b:60:49:b6:a2:5a:94:42:97:b8:eb:
fd:ff:05:92:c3:a3:f9:91:2a:90:af:56:90:1e:9b:03:5a:60:
1c:68:79:fc:6c:2c:01:7a:f2:44:0c:05:c0:9e:f9:7c:34:67:
96:08:24:b3:ae:ca:81:bf:26:fb:b5:6d:2a:7a:99:22:58:92:
94:af:a9:5c:6d:c1:5d:73:a1:30:d9:8d:21:05:49:82:e4:72:
68:4e:60:52:98:a7:88:a8:6b:19:dc:cb:0b:2b:47:c1:c1:b2:
f9:26:e7:10:1a:b5:e2:64:91:2e:e6:b4:33:2d:d6:ca:40:e3:
1e:69:a3:8d:3f:9c:73:4d:f0:fc:d7:a4:23:28:06:f3:b9:60:
1a:a9:71:1e:25:c1:18:37:f4:e0:59:77:f0:f1:85:1d:41:40:
f3:fe:42:de:a5:82:3a:cd:a2:04:64:9a:8b:e7:c2:4a:de:83:
d3:97:db:2f:09:07:85:22:83:42:36:9f:2b:ed:82:e1:85:f0:
67:9b:ab:fc:e6:fc:23:fa:59:4a:e5:57:f6:36:ca:b7:ff:04:
61:9e:83:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 19:49:07 2024 by rpki-client on console-ams.rpki-client.org