Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/7cc6ea-774a-4876-84f9-304d2191a4f3/1/a4nVjj6OI8DjTRM5WFPGHhbpk10.roa
File: a4nVjj6OI8DjTRM5WFPGHhbpk10.roa (raw, json)
Hash identifier: r5qKTwt3b8F9/RSnDsAQtquGACsOF5+j41JQ16fdLus=
Subject key identifier: 6B:89:D5:8E:3E:8E:23:C0:E3:4D:13:39:58:53:C6:1E:16:E9:93:5D
Certificate issuer: /CN=656d33c5f16e3cdd960ae05c80d9f6f36fc553f2
Certificate serial: 018CC4937BB083F80620D6966B284E819474
Authority key identifier: 65:6D:33:C5:F1:6E:3C:DD:96:0A:E0:5C:80:D9:F6:F3:6F:C5:53:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZW0zxfFuPN2WCuBcgNn282_FU_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/7cc6ea-774a-4876-84f9-304d2191a4f3/1/a4nVjj6OI8DjTRM5WFPGHhbpk10.roa
Signing time: Mon 01 Jan 2024 10:30:48 +0000
ROA not before: Mon 01 Jan 2024 10:30:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 185.219.146.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/7cc6ea-774a-4876-84f9-304d2191a4f3/1/ZW0zxfFuPN2WCuBcgNn282_FU_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/7cc6ea-774a-4876-84f9-304d2191a4f3/1/ZW0zxfFuPN2WCuBcgNn282_FU_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZW0zxfFuPN2WCuBcgNn282_FU_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 07:04:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:7b:b0:83:f8:06:20:d6:96:6b:28:4e:81:94:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=656d33c5f16e3cdd960ae05c80d9f6f36fc553f2
Validity
Not Before: Jan 1 10:30:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6b89d58e3e8e23c0e34d13395853c61e16e9935d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:98:56:ad:aa:21:18:cb:5d:48:b3:2e:b0:3f:
6f:08:fe:41:97:fd:93:ec:4b:25:8e:28:8a:4d:1d:
04:8f:c1:47:2f:ef:49:23:02:1a:81:52:87:d1:13:
33:06:18:06:e1:e6:99:af:46:e9:13:5f:95:12:7c:
56:6a:9e:27:21:8e:87:01:92:66:a5:3b:f4:8a:31:
79:2c:c0:d7:df:a5:f2:6b:48:88:51:9a:f9:1d:33:
1a:5b:c8:50:18:0e:e2:2f:cf:b8:33:cc:b4:f0:04:
2c:d7:5e:b0:3f:23:78:c4:08:c5:13:12:c8:1a:c4:
5a:fe:d0:19:c3:85:da:90:0e:d8:94:a4:eb:99:ed:
21:41:14:c6:db:c9:aa:f0:8b:93:9e:4b:4d:77:26:
0a:e3:05:94:e9:68:13:9b:a1:08:4e:cd:c3:e0:2f:
f2:3b:dc:10:49:a5:6b:a3:1d:82:80:86:99:d5:da:
c6:ce:98:0f:b0:d1:f7:5a:b0:78:40:98:30:8e:64:
c9:b3:3b:c6:49:10:82:62:c5:25:ba:f8:32:a4:05:
ee:a3:0a:4f:d8:02:df:23:91:46:00:92:a4:01:9e:
96:5c:26:4c:48:97:c7:7f:6f:81:b4:97:30:30:a9:
79:84:b1:4f:60:72:6f:48:4e:d0:fd:92:3c:8b:27:
85:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:89:D5:8E:3E:8E:23:C0:E3:4D:13:39:58:53:C6:1E:16:E9:93:5D
X509v3 Authority Key Identifier:
keyid:65:6D:33:C5:F1:6E:3C:DD:96:0A:E0:5C:80:D9:F6:F3:6F:C5:53:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZW0zxfFuPN2WCuBcgNn282_FU_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/7cc6ea-774a-4876-84f9-304d2191a4f3/1/a4nVjj6OI8DjTRM5WFPGHhbpk10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/7cc6ea-774a-4876-84f9-304d2191a4f3/1/ZW0zxfFuPN2WCuBcgNn282_FU_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.219.146.0/23
Signature Algorithm: sha256WithRSAEncryption
1b:73:56:eb:d2:72:bb:1b:ae:65:ca:4e:90:fa:e0:88:21:b5:
0b:4a:1d:48:cd:ec:7e:18:cb:db:99:0f:1f:53:a2:bb:3c:a1:
01:0a:33:09:77:b8:44:bb:cd:56:f5:a9:5a:c3:8d:b7:ea:6d:
d4:9f:36:93:f2:56:cd:70:b7:ea:4d:b3:87:b2:ba:b4:6b:f5:
c3:2f:c6:da:91:40:cf:f6:20:be:4b:64:31:a7:6b:73:b1:5c:
3b:ba:05:c0:75:37:cf:7b:b4:50:f9:3d:a5:93:b1:75:e7:64:
51:da:4c:7a:64:86:17:07:ea:0a:25:8e:c2:e5:36:09:63:63:
c9:b5:ae:9a:c4:b9:59:03:13:2f:df:a2:7c:ff:02:81:13:21:
f4:3c:6f:cc:93:72:c6:4a:40:37:30:db:5d:df:1e:c3:5a:ff:
83:42:3c:87:94:03:07:e4:a1:09:20:52:a1:25:30:d8:82:cc:
25:a6:2e:96:10:d0:d4:05:c2:7c:90:f4:a2:6a:91:37:ad:86:
2d:c8:6b:e1:df:9b:ad:f6:fe:22:cc:34:9b:d4:c3:a2:55:8a:
9c:73:e3:bc:72:30:9f:92:21:f3:e1:ba:8a:a1:f8:96:71:e9:
c0:38:33:af:5b:f5:88:cf:67:1c:0a:2f:e0:be:b9:fd:ff:17:
26:8a:2d:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 13:39:13 2024 by rpki-client on console-ams.rpki-client.org