Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/bbb30b-2688-4a6e-b2a2-1399a282227a/1/h3cjrnnyjkjwyjmhtVLlegmIBQE.roa
File: h3cjrnnyjkjwyjmhtVLlegmIBQE.roa (raw, json)
Hash identifier: whXU63yyr3uhzXyagf9PqR/a17+WxE/Iov/bfVlv6Kg=
Subject key identifier: 87:77:23:AE:79:F2:8E:48:F0:CA:39:A1:B5:52:E5:7A:09:88:05:01
Certificate issuer: /CN=9a5550e908a9b9688c29aac9895353dea836c45a
Certificate serial: 018CC64AA833EB439A0265D12CFDA3862053
Authority key identifier: 9A:55:50:E9:08:A9:B9:68:8C:29:AA:C9:89:53:53:DE:A8:36:C4:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mlVQ6QipuWiMKarJiVNT3qg2xFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/bbb30b-2688-4a6e-b2a2-1399a282227a/1/h3cjrnnyjkjwyjmhtVLlegmIBQE.roa
Signing time: Mon 01 Jan 2024 18:30:30 +0000
ROA not before: Mon 01 Jan 2024 18:30:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 185.11.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/bbb30b-2688-4a6e-b2a2-1399a282227a/1/mlVQ6QipuWiMKarJiVNT3qg2xFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/bbb30b-2688-4a6e-b2a2-1399a282227a/1/mlVQ6QipuWiMKarJiVNT3qg2xFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/mlVQ6QipuWiMKarJiVNT3qg2xFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 22:03:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:a8:33:eb:43:9a:02:65:d1:2c:fd:a3:86:20:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a5550e908a9b9688c29aac9895353dea836c45a
Validity
Not Before: Jan 1 18:30:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=877723ae79f28e48f0ca39a1b552e57a09880501
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:7b:fd:78:60:4c:04:99:b3:df:f8:85:bd:ea:
f1:dc:f6:bb:04:cd:38:16:1b:0f:b2:b2:04:a5:3f:
04:30:63:f7:92:53:76:9b:59:26:b1:2a:7c:c8:2f:
91:8d:56:ee:a5:75:d5:68:93:79:a6:11:14:e4:9a:
24:4c:0e:00:55:63:bf:4e:f9:c3:94:54:7e:3f:ab:
05:a1:2f:15:29:fd:3b:8c:ad:30:8f:5b:05:2a:35:
d4:80:68:07:74:bc:d3:fa:62:72:ef:2b:2a:c1:ff:
f9:8f:ec:bf:de:a1:59:08:cd:e5:6c:24:89:25:b4:
95:3a:aa:9c:88:a7:0e:5e:ea:8b:7f:a0:c6:46:60:
b4:48:fa:97:da:4f:a6:f6:cc:bf:80:86:d6:b4:33:
9a:58:d0:dd:29:3d:d1:30:39:3b:7d:fe:cf:03:49:
c0:53:0b:3d:31:78:f2:50:2a:de:0f:12:3b:0d:75:
05:ab:0e:92:71:03:d1:77:ff:15:de:aa:23:59:f8:
fe:26:10:0e:f6:6b:ef:ed:de:e0:f0:13:2e:79:59:
96:d2:9b:3c:6b:7d:51:e7:1e:df:3e:02:69:ae:35:
60:ac:97:9e:91:96:57:57:d0:af:46:76:c6:41:73:
37:56:07:2e:46:03:70:8f:52:57:d6:c1:36:23:2c:
fe:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:77:23:AE:79:F2:8E:48:F0:CA:39:A1:B5:52:E5:7A:09:88:05:01
X509v3 Authority Key Identifier:
keyid:9A:55:50:E9:08:A9:B9:68:8C:29:AA:C9:89:53:53:DE:A8:36:C4:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mlVQ6QipuWiMKarJiVNT3qg2xFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/bbb30b-2688-4a6e-b2a2-1399a282227a/1/h3cjrnnyjkjwyjmhtVLlegmIBQE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/bbb30b-2688-4a6e-b2a2-1399a282227a/1/mlVQ6QipuWiMKarJiVNT3qg2xFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.11.126.0/24
Signature Algorithm: sha256WithRSAEncryption
56:6b:20:8c:f4:44:cb:3a:19:fb:69:f5:f7:97:9e:64:15:32:
8c:c3:98:1d:78:a3:ad:b4:e9:95:ba:0d:23:f0:89:01:c7:57:
4a:5b:2a:5f:0b:1d:6d:cc:40:0d:5e:38:4f:c4:6e:6d:e2:1d:
c0:09:03:40:10:0f:b7:ed:d8:34:58:e3:e3:8f:cb:12:c7:ee:
36:3c:f2:80:95:24:5e:d0:6a:85:aa:a3:c1:0c:54:7b:ca:bc:
1e:26:64:39:9e:16:57:f1:1c:02:bd:e7:61:0f:36:69:d9:1c:
69:9a:da:34:d2:7e:86:2f:aa:df:4b:20:15:13:43:d9:95:a2:
f0:1b:c1:43:8b:13:48:9b:38:d8:4a:99:a4:e0:3f:cf:bb:a8:
c5:ff:7c:65:e8:46:8d:8b:84:66:0a:14:cf:16:41:80:bb:02:
e8:03:7a:52:ad:02:40:4f:1f:06:13:72:5f:a0:b3:69:2f:97:
a3:4d:b9:06:b7:c9:60:3e:c5:63:b7:d8:53:c4:05:d9:90:8c:
65:4a:23:f3:1c:06:23:aa:19:3f:35:2f:90:1c:a1:91:5e:1a:
b4:16:4b:22:4f:3b:8a:75:2f:2d:de:ee:54:f1:25:d5:62:16:
5d:65:28:d6:3f:d6:2b:c1:ba:75:59:c0:81:f2:11:2a:7d:d1:
1a:03:02:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 02:06:35 2024 by rpki-client on console-ams.rpki-client.org