Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/18feb3-f3d2-49f3-90d2-9d4b16b59de6/1/bHNmbDFHUX9LljKOHRhQtJ-TJ5Q.roa
File: bHNmbDFHUX9LljKOHRhQtJ-TJ5Q.roa (raw, json)
Hash identifier: cll3XTW1O0hPqO3XsvqV14fZqz8MJG4jFtcdNy16qZI=
Subject key identifier: 6C:73:66:6C:31:47:51:7F:4B:96:32:8E:1D:18:50:B4:9F:93:27:94
Certificate issuer: /CN=082a6e377f1c885a6d73f3f569fd06d7ea4c7a45
Certificate serial: 018CCA28538008D0D982DFF43B9FCC51C428
Authority key identifier: 08:2A:6E:37:7F:1C:88:5A:6D:73:F3:F5:69:FD:06:D7:EA:4C:7A:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CCpuN38ciFptc_P1af0G1-pMekU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/18feb3-f3d2-49f3-90d2-9d4b16b59de6/1/bHNmbDFHUX9LljKOHRhQtJ-TJ5Q.roa
Signing time: Tue 02 Jan 2024 12:31:29 +0000
ROA not before: Tue 02 Jan 2024 12:31:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20559
IP address blocks: 185.157.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/18feb3-f3d2-49f3-90d2-9d4b16b59de6/1/CCpuN38ciFptc_P1af0G1-pMekU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/18feb3-f3d2-49f3-90d2-9d4b16b59de6/1/CCpuN38ciFptc_P1af0G1-pMekU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CCpuN38ciFptc_P1af0G1-pMekU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 07:02:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:28:53:80:08:d0:d9:82:df:f4:3b:9f:cc:51:c4:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=082a6e377f1c885a6d73f3f569fd06d7ea4c7a45
Validity
Not Before: Jan 2 12:31:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6c73666c3147517f4b96328e1d1850b49f932794
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:44:86:a0:64:cc:3a:61:e1:3e:30:e7:40:e3:
f5:b0:f4:79:fc:de:56:58:da:81:23:65:27:48:fc:
69:32:b7:e7:ca:c4:84:88:27:fb:25:be:14:c4:3e:
40:90:19:b5:a3:6f:4c:83:32:ab:ba:96:85:e0:1a:
e0:b8:f9:67:06:ae:e1:bd:a5:21:15:ec:d1:8c:da:
d1:55:7e:5a:e0:c2:a0:5f:6a:59:85:0f:c5:45:e5:
47:c5:72:ae:d8:5c:73:1f:90:00:13:26:32:da:7f:
50:23:02:4e:fc:4f:67:2f:f2:0f:a5:e5:68:bc:29:
d7:82:1b:77:0a:6d:56:94:03:71:e9:f4:62:d6:ea:
90:88:aa:f9:3b:49:0e:f5:ad:15:49:15:ec:cb:ca:
ad:52:7b:a2:eb:85:30:f0:6b:a9:b6:52:40:f5:f9:
df:81:6d:8a:75:19:71:58:fc:4b:e9:cf:31:83:21:
d8:60:e4:b3:36:bc:e0:62:ae:f5:7a:85:d5:2e:79:
15:9f:24:53:04:9c:7c:a9:22:86:45:32:28:76:bf:
de:c7:78:d5:8d:6e:a7:2b:80:9b:33:99:5a:36:6a:
3c:51:42:7f:92:1a:11:82:35:54:aa:da:bb:7a:3a:
5d:79:3b:c6:53:1b:3c:f1:8f:81:9d:ad:49:ea:6c:
a9:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:73:66:6C:31:47:51:7F:4B:96:32:8E:1D:18:50:B4:9F:93:27:94
X509v3 Authority Key Identifier:
keyid:08:2A:6E:37:7F:1C:88:5A:6D:73:F3:F5:69:FD:06:D7:EA:4C:7A:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CCpuN38ciFptc_P1af0G1-pMekU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/18feb3-f3d2-49f3-90d2-9d4b16b59de6/1/bHNmbDFHUX9LljKOHRhQtJ-TJ5Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/18feb3-f3d2-49f3-90d2-9d4b16b59de6/1/CCpuN38ciFptc_P1af0G1-pMekU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.157.145.0/24
Signature Algorithm: sha256WithRSAEncryption
20:b5:74:12:8f:b8:a5:79:44:51:49:ca:ef:1f:ea:3a:75:a6:
27:a5:d3:e1:80:7b:49:b0:c6:77:d6:b4:31:dc:da:f6:a9:9c:
a3:22:41:26:dc:cc:e1:e2:55:5d:66:89:2c:db:47:7c:c9:a6:
98:a6:83:2a:b7:9a:a4:36:b4:c5:74:4d:1c:b2:40:85:13:c3:
17:e9:ea:02:15:7a:49:3b:46:22:06:6c:cb:be:e5:2b:1d:d5:
30:65:80:ad:9e:42:60:2c:49:a4:e9:ba:72:5c:cf:1d:2a:90:
11:9b:f0:ae:09:1a:27:22:83:2e:a1:17:70:c1:69:51:0d:9e:
0a:26:01:4d:15:60:73:ef:5a:c4:42:e0:d4:6b:76:c8:31:d7:
f2:f3:43:a9:00:48:2a:b4:92:b3:c6:44:a1:ff:43:0f:02:63:
b6:67:db:5f:cc:e2:8e:27:f7:22:c5:29:c3:f6:a5:10:13:b5:
d1:78:3d:4a:5d:34:62:08:be:a2:d5:13:c1:f7:fb:e5:3b:e3:
86:7b:a5:28:5e:db:d6:9b:f4:7c:66:37:5f:7e:25:b4:21:a0:
f5:59:ee:1b:7c:ef:df:13:02:87:f9:5f:54:8c:03:1e:b3:28:
e1:ac:af:45:30:26:a0:0a:c9:72:41:01:7a:71:e7:50:ae:64:
c5:1b:77:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 17:45:16 2024 by rpki-client on console-ams.rpki-client.org