Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/VIYXL1zp3JshgDTi57XSMs50BAU.roa
File: VIYXL1zp3JshgDTi57XSMs50BAU.roa (raw, json)
Hash identifier: S3/68GLlUjCSQhBMEBimZF4fDfGIs/qURWbCBwaGaDw=
Subject key identifier: 54:86:17:2F:5C:E9:DC:9B:21:80:34:E2:E7:B5:D2:32:CE:74:04:05
Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Certificate serial: 018CC2DAD6C4030B11166289D40B5513FBEE
Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/VIYXL1zp3JshgDTi57XSMs50BAU.roa
Signing time: Mon 01 Jan 2024 02:29:30 +0000
ROA not before: Mon 01 Jan 2024 02:29:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212400
IP address blocks: 185.179.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 04:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:d6:c4:03:0b:11:16:62:89:d4:0b:55:13:fb:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Validity
Not Before: Jan 1 02:29:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5486172f5ce9dc9b218034e2e7b5d232ce740405
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:28:56:89:28:fd:8b:a1:34:3c:00:5e:71:7a:
7f:a2:66:8a:b5:94:77:09:46:d5:77:1b:d9:c8:41:
da:f3:40:57:da:26:0f:2d:52:fd:64:d1:42:b9:9b:
5f:a6:01:da:5b:a8:55:d8:a9:c4:96:df:8b:2b:cf:
47:b7:55:ec:b5:46:57:e6:9d:6f:eb:f1:42:84:eb:
22:15:5a:8c:e2:46:44:f0:99:54:73:b5:00:d9:bb:
e8:e8:04:1f:d9:04:b2:86:36:c3:71:97:7e:9a:0b:
00:a6:e1:2f:69:e6:91:fd:cb:48:10:ea:63:91:c0:
91:df:74:2d:33:d5:82:d2:6e:2f:78:7e:9c:6f:6a:
37:f5:3b:1a:49:bc:1e:4b:fb:67:fe:cd:89:b1:09:
fa:bc:d9:79:f4:23:fb:b4:6b:9e:6d:00:71:04:d6:
e7:a5:88:8c:2c:96:1d:bf:b2:20:ce:bf:ae:2b:4c:
de:1f:b5:b1:5a:66:1a:ff:35:2e:c9:f5:a3:53:bf:
55:a6:42:11:88:1c:dd:7d:ed:ec:e7:7c:e6:19:21:
e4:b5:ac:3e:15:4e:fe:26:6c:31:0e:24:5b:0b:8d:
f9:f2:70:d8:d1:cf:78:e6:9d:ad:ed:45:40:50:f0:
62:1e:26:79:03:be:9e:09:5c:a1:2e:44:be:b4:54:
89:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:86:17:2F:5C:E9:DC:9B:21:80:34:E2:E7:B5:D2:32:CE:74:04:05
X509v3 Authority Key Identifier:
keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/VIYXL1zp3JshgDTi57XSMs50BAU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.179.247.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:7d:20:b8:51:a3:99:2d:c2:cc:76:bb:87:1a:d8:dc:f7:24:
63:94:a0:e3:47:8d:dd:95:ce:09:04:2c:ca:e1:f0:aa:78:40:
45:be:82:ca:af:3c:a3:25:2e:40:cb:3f:a3:cb:3d:cb:ee:0d:
3a:f5:0f:e4:38:21:5b:ac:38:4b:62:17:8a:72:be:ce:e7:53:
f1:b6:2a:20:3f:95:42:4c:d6:54:b3:1d:38:9a:72:80:f1:3a:
5a:4e:94:79:ff:ed:3a:ee:7b:06:1d:5c:14:44:8a:72:39:0f:
a5:a0:fe:d2:3e:60:58:bf:0d:17:7d:52:c7:7d:f3:fb:9b:07:
ac:88:b5:cb:d9:39:f1:86:98:f8:99:58:f2:98:50:9e:e7:65:
b1:84:85:ad:32:75:77:0b:8f:68:4e:f7:8b:7e:47:c1:80:c9:
e7:23:18:b5:27:cb:8e:c8:f1:db:64:ef:c0:d8:5b:79:27:17:
1e:9f:35:57:bc:94:84:26:21:e1:24:9b:b5:8d:56:2c:cc:89:
7f:90:91:10:61:44:4a:43:34:42:0d:fe:d5:81:c4:9e:e5:97:
0f:dd:b5:86:3c:f7:be:8a:60:e5:68:f7:b7:ec:7d:4c:17:46:
09:6f:9f:07:f4:4a:04:9e:60:74:a8:84:fd:81:f7:49:49:5c:
15:8b:58:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 09:55:09 2024 by rpki-client on console-fra.rpki-client.org