Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/YXRb0O3ZdTSv45hLE-gPKHVB4qc.roa
File: YXRb0O3ZdTSv45hLE-gPKHVB4qc.roa (raw, json)
Hash identifier: XczFpXy0dgzeEV02IPabBqjfOunnj24CRlo8D1ar/MA=
Subject key identifier: 61:74:5B:D0:ED:D9:75:34:AF:E3:98:4B:13:E8:0F:28:75:41:E2:A7
Certificate issuer: /CN=85b871d69395610465779323b91b34e69bfcf5b5
Certificate serial: 018EC82AFD93E412D9E7649A7FEB8929B503
Authority key identifier: 85:B8:71:D6:93:95:61:04:65:77:93:23:B9:1B:34:E6:9B:FC:F5:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hbhx1pOVYQRld5MjuRs05pv89bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/YXRb0O3ZdTSv45hLE-gPKHVB4qc.roa
Signing time: Wed 10 Apr 2024 13:20:44 +0000
ROA not before: Wed 10 Apr 2024 13:20:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203263
IP address blocks: 185.168.124.0/23 maxlen: 23
185.168.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/hbhx1pOVYQRld5MjuRs05pv89bU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/hbhx1pOVYQRld5MjuRs05pv89bU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hbhx1pOVYQRld5MjuRs05pv89bU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:c8:2a:fd:93:e4:12:d9:e7:64:9a:7f:eb:89:29:b5:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85b871d69395610465779323b91b34e69bfcf5b5
Validity
Not Before: Apr 10 13:20:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=61745bd0edd97534afe3984b13e80f287541e2a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ca:7d:53:7e:31:95:dd:4d:59:39:56:d2:6b:
5f:5a:eb:34:cc:59:fe:bd:ac:88:6c:ef:ca:75:7f:
fc:77:26:80:7c:7b:07:3c:4f:97:1a:78:db:f9:93:
43:07:e5:6d:4c:9d:51:88:ea:bf:bb:e7:3f:d1:9d:
e4:da:69:2c:e3:f0:90:78:1d:d0:da:b1:e4:d2:34:
bb:30:33:b1:b9:1b:76:e0:4b:51:82:88:48:7d:53:
25:9f:5d:f6:e7:56:44:2c:22:a3:03:a1:76:5d:ad:
44:5e:98:d5:0b:56:11:01:d8:b8:9e:0e:d9:b0:b4:
73:d5:a8:71:83:dc:03:8c:7a:38:19:56:71:9f:c1:
e2:ae:7a:88:07:e0:08:72:cc:c7:4e:54:16:1d:93:
71:4c:7c:af:5b:d8:75:dc:f2:4b:53:30:d3:aa:ad:
60:88:9a:fb:8d:60:2f:29:74:04:bf:66:8f:f8:08:
0f:af:3c:76:13:2e:91:da:aa:c5:41:63:66:d5:5f:
cd:67:eb:15:08:1b:83:bb:67:9a:b9:54:23:fe:0e:
ac:a2:ff:c8:6d:cf:ce:a5:66:84:36:ab:84:3f:5c:
1b:47:e9:48:e6:41:2d:19:91:a0:1f:dd:de:c5:eb:
a4:df:35:57:78:be:28:60:24:41:62:64:9f:c0:a1:
a2:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:74:5B:D0:ED:D9:75:34:AF:E3:98:4B:13:E8:0F:28:75:41:E2:A7
X509v3 Authority Key Identifier:
keyid:85:B8:71:D6:93:95:61:04:65:77:93:23:B9:1B:34:E6:9B:FC:F5:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hbhx1pOVYQRld5MjuRs05pv89bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/YXRb0O3ZdTSv45hLE-gPKHVB4qc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/hbhx1pOVYQRld5MjuRs05pv89bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.168.124.0-185.168.126.255
Signature Algorithm: sha256WithRSAEncryption
c8:42:80:47:f8:8b:c1:f9:69:b8:8c:70:e5:5f:3d:d8:0b:8f:
b7:c2:39:1a:1f:ed:8e:65:a8:de:7c:35:83:ab:c7:ed:15:a7:
4a:89:c1:7a:ed:1a:8a:d2:3e:ce:6e:45:da:90:c7:76:9a:4f:
86:3a:db:86:96:52:54:02:82:c6:8c:d2:fd:7e:0f:04:0b:a2:
1b:68:87:7c:75:c4:ce:b5:c5:5b:88:89:4e:e5:4d:d7:b5:53:
ad:32:47:96:a7:91:e5:0f:7a:6e:bf:ff:17:02:1b:62:8a:bf:
9c:f3:1a:ee:9d:75:8d:d4:76:d1:66:4b:91:c4:c4:2d:27:51:
93:cd:a8:33:dd:74:df:b6:fa:df:7d:23:60:c6:7c:6f:5f:f1:
c6:bc:48:da:43:c1:b7:25:db:80:16:82:78:31:67:24:fb:1a:
35:5d:a5:99:c3:fb:26:7a:de:a8:a0:b3:0a:bc:54:be:c9:b0:
f3:5c:e5:9d:48:aa:5c:9d:b6:8e:b7:96:f4:2e:50:b0:18:80:
77:54:74:41:0c:5d:85:26:36:17:95:13:3b:dd:e7:41:ca:74:
fb:cb:70:7f:80:1e:f0:51:9a:63:a6:0e:9c:79:d2:b1:bf:a1:
c8:45:72:ea:74:e9:0e:78:72:67:3a:fb:96:89:2f:0d:c5:9c:
e5:d4:13:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 23:44:34 2024 by rpki-client on console-ams.rpki-client.org