Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/n-iHl7Wf5272TaFqby-GPSyAi2g.roa
File: n-iHl7Wf5272TaFqby-GPSyAi2g.roa (raw, json)
Hash identifier: O8zPtPF4BKMvUqA3sAhW2h6QXxshQo0wC6IJRqzSEpk=
Subject key identifier: 9F:E8:87:97:B5:9F:E7:6E:F6:4D:A1:6A:6F:2F:86:3D:2C:80:8B:68
Certificate issuer: /CN=ce958f181fb507a0a2a821856b8be0d54b118b85
Certificate serial: 018CC56EF1AF5F746317B88D15ACB19DBDFC
Authority key identifier: CE:95:8F:18:1F:B5:07:A0:A2:A8:21:85:6B:8B:E0:D5:4B:11:8B:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zpWPGB-1B6CiqCGFa4vg1UsRi4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/n-iHl7Wf5272TaFqby-GPSyAi2g.roa
Signing time: Mon 01 Jan 2024 14:30:31 +0000
ROA not before: Mon 01 Jan 2024 14:30:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 398772
IP address blocks: 185.174.88.0/23 maxlen: 23
185.168.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/zpWPGB-1B6CiqCGFa4vg1UsRi4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/zpWPGB-1B6CiqCGFa4vg1UsRi4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/zpWPGB-1B6CiqCGFa4vg1UsRi4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:f1:af:5f:74:63:17:b8:8d:15:ac:b1:9d:bd:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce958f181fb507a0a2a821856b8be0d54b118b85
Validity
Not Before: Jan 1 14:30:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9fe88797b59fe76ef64da16a6f2f863d2c808b68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:cc:81:cf:77:95:41:47:ff:4b:fa:ca:6f:49:
5f:33:35:8f:37:6f:81:02:5a:dc:39:c5:ee:4c:38:
fc:76:ba:d6:71:5a:b4:f4:f0:47:84:47:4e:df:30:
25:2a:03:32:a6:f0:8b:7a:4a:6d:3e:d9:a5:2d:4e:
83:f0:9f:d6:fc:1d:df:93:05:21:bf:3b:88:b4:21:
9b:0d:cc:4d:0f:84:43:20:26:1f:c9:1e:a8:c0:11:
89:62:e8:a9:fe:b6:c3:bd:ae:89:fd:02:cd:db:c2:
a0:ae:5b:0d:ab:32:4d:a8:e2:1b:13:a8:ed:d6:1e:
20:46:8c:6c:e5:10:22:72:18:7c:8c:87:48:df:87:
29:d0:14:f2:c9:69:dc:5e:07:65:b7:a1:d9:c3:72:
cf:98:28:ea:5a:8d:a9:75:98:86:b8:ac:24:99:1e:
66:13:60:fe:4b:08:35:bb:c4:21:90:01:96:d4:0c:
0c:0c:75:91:f8:c8:b9:0a:04:80:52:0f:b0:c1:f7:
be:c5:aa:0e:a4:ec:35:86:73:ad:48:a6:92:c2:f0:
92:6f:33:1c:a5:5e:ad:24:94:51:25:99:ab:7a:04:
1b:88:a0:b7:a2:f5:22:0c:7f:f2:f8:87:4b:27:d5:
1b:17:fe:dc:68:1b:5c:a3:a2:3c:6e:54:c7:29:11:
87:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:E8:87:97:B5:9F:E7:6E:F6:4D:A1:6A:6F:2F:86:3D:2C:80:8B:68
X509v3 Authority Key Identifier:
keyid:CE:95:8F:18:1F:B5:07:A0:A2:A8:21:85:6B:8B:E0:D5:4B:11:8B:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zpWPGB-1B6CiqCGFa4vg1UsRi4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/n-iHl7Wf5272TaFqby-GPSyAi2g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/zpWPGB-1B6CiqCGFa4vg1UsRi4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.168.156.0/24
185.174.88.0/23
Signature Algorithm: sha256WithRSAEncryption
60:f2:77:58:c5:50:8e:ff:82:fb:89:9a:99:f3:bf:47:33:1a:
32:64:62:75:c0:b2:cf:b1:97:3b:c1:5a:6e:a3:9a:dd:0f:d1:
63:13:4f:c6:23:37:aa:10:7a:1b:62:62:fb:31:1c:ba:53:01:
d2:f7:90:f7:b3:69:f2:e4:40:8c:7b:d3:a3:91:7e:80:b0:5f:
d8:7e:9c:3e:52:3c:4b:b0:29:4d:0f:02:0d:00:a4:88:61:93:
40:d9:44:4b:cd:c2:5c:c9:9a:62:54:42:8f:6f:e8:26:5c:0e:
a8:43:31:0f:0d:5c:b5:bb:62:e6:b2:b5:e1:2f:9f:ce:bc:b6:
ec:49:15:3b:b9:15:07:18:7a:9a:12:ae:67:dc:b0:8e:89:de:
d8:f3:e8:ee:c3:67:1d:38:f0:ad:21:21:5e:5c:87:6b:47:90:
08:ad:f2:4a:9f:b7:0e:5b:93:55:1a:e0:d6:ca:b8:07:cd:3a:
07:bd:0d:b7:8b:4b:37:bc:a9:d1:a7:db:f3:ec:21:c3:22:c4:
ec:c8:f2:62:40:88:22:fb:dc:6b:8f:9c:ac:bd:92:45:76:a4:
c0:d9:40:bb:b6:99:31:d3:85:cf:d4:2c:83:46:f4:1f:ac:fa:
4c:b7:c1:2f:b6:0b:e1:87:f5:7e:94:ef:10:e5:5e:60:91:6e:
29:3c:a2:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 19:34:39 2024 by rpki-client on console-fra.rpki-client.org