Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/oV3vWhIV2nlgnY_bEK1xjA7oI2Y.roa
File: oV3vWhIV2nlgnY_bEK1xjA7oI2Y.roa (raw, json)
Hash identifier: C2/zWsUYNcqC3kC41agJwbInu3A2HT2Wj02SGhI/kWE=
Subject key identifier: A1:5D:EF:5A:12:15:DA:79:60:9D:8F:DB:10:AD:71:8C:0E:E8:23:66
Certificate issuer: /CN=bf5db811b5d5d05bec37ee9d09a4ec52eeed1ad5
Certificate serial: 018CC72746E0F65FD0165EDFEDBCF0E8FEA1
Authority key identifier: BF:5D:B8:11:B5:D5:D0:5B:EC:37:EE:9D:09:A4:EC:52:EE:ED:1A:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v124EbXV0FvsN-6dCaTsUu7tGtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/oV3vWhIV2nlgnY_bEK1xjA7oI2Y.roa
Signing time: Mon 01 Jan 2024 22:31:29 +0000
ROA not before: Mon 01 Jan 2024 22:31:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212939
IP address blocks: 185.66.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/v124EbXV0FvsN-6dCaTsUu7tGtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/v124EbXV0FvsN-6dCaTsUu7tGtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/v124EbXV0FvsN-6dCaTsUu7tGtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 04:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:46:e0:f6:5f:d0:16:5e:df:ed:bc:f0:e8:fe:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf5db811b5d5d05bec37ee9d09a4ec52eeed1ad5
Validity
Not Before: Jan 1 22:31:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a15def5a1215da79609d8fdb10ad718c0ee82366
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:af:3b:42:0e:49:66:ce:b7:19:3a:7e:57:83:
bd:c9:28:9c:3b:5b:3c:70:01:75:07:ab:ae:9f:14:
50:31:07:c0:ca:95:b7:da:68:0b:6b:a9:96:e0:67:
ea:1e:54:bc:86:4d:eb:46:d5:52:fa:91:cc:bd:7e:
19:15:13:9a:a3:c9:cc:9b:07:94:a2:17:06:d9:7f:
3a:fe:c9:75:53:26:b2:34:12:9c:01:73:ba:0a:ec:
ec:c7:b1:94:3d:ff:af:93:70:f5:b6:ad:b5:bc:20:
53:6a:c0:48:8b:40:90:97:b3:19:c4:91:c9:e5:9f:
94:a2:6d:f8:c9:6b:35:db:b4:f8:bd:1d:85:73:aa:
83:15:24:da:8a:ba:72:11:5d:78:8e:d5:53:f8:9a:
c7:20:e4:b2:ef:65:0b:2c:af:2c:c0:89:59:f1:39:
3c:15:1c:4d:b8:53:94:e9:b0:a7:57:4b:f8:38:d3:
3d:a1:ec:92:76:ea:4a:fc:7d:1d:99:b4:ba:b6:91:
b4:09:02:f5:e7:e7:06:0c:ac:72:34:2a:83:aa:92:
7f:aa:95:5a:07:d3:34:b9:58:01:f5:a1:38:41:88:
d4:2e:11:bd:21:6d:9e:52:e0:44:30:af:58:02:7d:
ed:2c:41:e3:84:b4:ae:b3:8d:32:a3:f1:d9:9e:56:
05:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:5D:EF:5A:12:15:DA:79:60:9D:8F:DB:10:AD:71:8C:0E:E8:23:66
X509v3 Authority Key Identifier:
keyid:BF:5D:B8:11:B5:D5:D0:5B:EC:37:EE:9D:09:A4:EC:52:EE:ED:1A:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v124EbXV0FvsN-6dCaTsUu7tGtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/oV3vWhIV2nlgnY_bEK1xjA7oI2Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/v124EbXV0FvsN-6dCaTsUu7tGtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.66.230.0/24
Signature Algorithm: sha256WithRSAEncryption
47:c0:83:09:27:96:14:64:4c:7b:57:5c:62:eb:41:d6:fc:c6:
79:3e:2b:98:b7:24:7f:fd:53:70:2b:97:83:5f:6d:c6:70:e6:
b1:0e:4e:0d:27:65:0b:ad:fc:7f:9a:3d:05:c7:1c:08:5a:52:
64:77:67:41:7d:27:d6:84:fb:eb:5c:ee:c4:62:99:bf:8b:8e:
44:4d:7b:45:08:16:22:2d:31:0a:19:99:2a:10:81:cd:b6:d3:
34:38:a0:43:7c:02:c0:62:f0:2a:1b:17:c8:f9:63:e9:12:ae:
64:ea:ed:43:c3:ff:61:ee:16:0c:98:23:38:19:0b:be:1c:b7:
5c:de:59:a5:df:f9:02:93:b9:c5:21:cb:44:fd:4d:13:05:64:
05:95:84:cf:b7:38:45:97:32:c2:7b:35:54:b9:b8:46:3c:b4:
6e:31:31:4b:c2:2d:04:20:b6:2b:19:5e:dd:55:18:24:32:39:
83:4a:e6:75:a0:c6:5e:44:ab:26:e3:b3:42:e5:67:4a:9a:bf:
6c:c5:8e:b7:03:ec:58:fb:da:83:b6:60:bd:9b:92:fe:13:fc:
b2:12:9b:a2:09:eb:e9:09:79:38:38:63:3b:0a:40:fb:72:2c:
2e:5f:ab:21:a2:f6:af:d5:d9:2e:b3:c8:55:11:93:67:eb:60:
0c:12:a2:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 07:28:02 2024 by rpki-client on console-ams.rpki-client.org