Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/_P8QWl0Q92Km9O9kSyM3TnKBns0.roa
File: _P8QWl0Q92Km9O9kSyM3TnKBns0.roa (raw, json)
Hash identifier: b/jlGuY/EUmAGIdxAB6EW371g1/4GukTiGUtk0FzAaw=
Subject key identifier: FC:FF:10:5A:5D:10:F7:62:A6:F4:EF:64:4B:23:37:4E:72:81:9E:CD
Certificate issuer: /CN=09e2af08cf6e12e2304fb3bdec64cfbcedaa8522
Certificate serial: 018CC2DAF9B220899C4B954CDEDD4440239F
Authority key identifier: 09:E2:AF:08:CF:6E:12:E2:30:4F:B3:BD:EC:64:CF:BC:ED:AA:85:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CeKvCM9uEuIwT7O97GTPvO2qhSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/_P8QWl0Q92Km9O9kSyM3TnKBns0.roa
Signing time: Mon 01 Jan 2024 02:29:39 +0000
ROA not before: Mon 01 Jan 2024 02:29:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209854
IP address blocks: 185.123.254.0/24 maxlen: 24
185.123.255.0/24 maxlen: 24
185.128.135.0/24 maxlen: 24
185.123.253.0/24 maxlen: 24
185.123.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/CeKvCM9uEuIwT7O97GTPvO2qhSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/CeKvCM9uEuIwT7O97GTPvO2qhSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/CeKvCM9uEuIwT7O97GTPvO2qhSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 May 2024 07:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:f9:b2:20:89:9c:4b:95:4c:de:dd:44:40:23:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09e2af08cf6e12e2304fb3bdec64cfbcedaa8522
Validity
Not Before: Jan 1 02:29:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fcff105a5d10f762a6f4ef644b23374e72819ecd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:52:22:18:94:f6:88:bb:ac:0b:c8:25:ea:4a:
fd:7b:c6:b1:70:7c:24:d5:b7:ab:58:6b:d0:34:b8:
ea:62:f8:0c:f9:03:53:af:36:40:30:bc:b5:93:6f:
1d:7b:b8:94:53:a0:ba:cb:2f:46:d2:97:c3:c5:0a:
52:7b:39:fc:5d:b7:5e:dc:5e:eb:5d:7a:96:0c:95:
7e:a5:a1:36:9a:e1:56:2e:9f:fd:29:38:1a:59:96:
ab:ce:f7:a6:1a:70:5e:81:04:8c:17:da:12:fc:d2:
b8:21:a4:a4:91:7d:24:7b:5d:c2:ff:9e:75:00:ba:
93:c7:b7:e5:bb:f9:79:a9:9e:f6:71:14:51:73:1d:
be:b0:8a:f5:48:51:10:f4:2b:d0:ca:cf:f4:95:6e:
ef:56:3c:4d:c4:47:bf:51:33:37:1a:4f:69:b9:0a:
6c:5d:ae:c7:f7:7c:81:3f:3d:38:aa:db:52:44:bd:
52:47:1c:91:44:aa:9d:18:ac:99:fb:af:1f:2b:7c:
c0:52:05:88:4f:5f:d9:39:5d:8e:c7:45:21:ca:10:
29:ed:66:5b:0e:b8:09:9a:06:61:28:fa:72:2d:c1:
6f:55:bc:03:a3:12:7f:37:ad:67:dd:6a:c6:a3:56:
30:46:9d:89:40:00:49:57:ce:07:f3:2b:7c:2d:39:
2a:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:FF:10:5A:5D:10:F7:62:A6:F4:EF:64:4B:23:37:4E:72:81:9E:CD
X509v3 Authority Key Identifier:
keyid:09:E2:AF:08:CF:6E:12:E2:30:4F:B3:BD:EC:64:CF:BC:ED:AA:85:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CeKvCM9uEuIwT7O97GTPvO2qhSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/_P8QWl0Q92Km9O9kSyM3TnKBns0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/CeKvCM9uEuIwT7O97GTPvO2qhSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.123.252.0/22
185.128.135.0/24
Signature Algorithm: sha256WithRSAEncryption
03:87:06:8b:af:a3:c9:67:bd:8a:7b:4e:c0:dc:eb:2e:a3:93:
17:2c:7b:7e:ae:9e:eb:6b:28:1b:3b:76:6c:c7:20:39:36:97:
5b:82:e0:fe:7f:87:3c:e9:6d:98:49:61:38:d5:b0:43:4a:b0:
01:2f:1b:18:9a:70:26:80:c3:ee:42:9b:24:b5:8c:bd:24:ab:
6d:de:15:0a:b7:64:d7:3a:54:44:6b:d4:cd:1a:a1:b3:c3:fc:
49:21:5e:7c:a1:1a:d4:7b:8d:e0:cf:98:f1:d7:40:e9:ad:85:
9b:db:0c:b7:da:60:8b:be:87:81:66:01:75:51:38:19:dd:13:
29:26:da:eb:38:bc:97:f0:03:77:c1:98:12:1a:0e:2e:00:25:
d8:54:ec:58:71:d5:68:90:3d:57:46:48:4b:b9:85:83:7d:43:
19:6e:11:69:61:c8:da:98:8a:e1:f3:5a:ba:bb:e1:25:31:3a:
ef:1e:02:80:d3:22:21:fa:70:16:7e:22:e5:be:60:a8:60:c8:
02:90:46:7d:e6:bf:0e:0f:2d:2a:59:7a:e3:60:d3:50:be:fa:
c8:f6:5b:32:ed:26:99:da:8a:d3:97:63:95:09:41:ef:52:53:
f9:51:8d:d3:be:c2:de:3c:a9:e8:25:48:36:4b:1c:51:0b:23:
2f:2a:82:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 13:44:51 2024 by rpki-client on console-ams.rpki-client.org