Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/4ESnHDkMiH3VXGRcMNV45lvdzjg.roa
File: 4ESnHDkMiH3VXGRcMNV45lvdzjg.roa (raw, json)
Hash identifier: rDXZb2CTO6v2yflTTZ1nHz2ARvrDpwcC2SH66LgceiE=
Subject key identifier: E0:44:A7:1C:39:0C:88:7D:D5:5C:64:5C:30:D5:78:E6:5B:DD:CE:38
Certificate issuer: /CN=b72588c00eef715809eb5fdd6d6717cc28c0dfac
Certificate serial: 018CC349648AF1FF03BCD5E4E3AE9EF37CE0
Authority key identifier: B7:25:88:C0:0E:EF:71:58:09:EB:5F:DD:6D:67:17:CC:28:C0:DF:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/4ESnHDkMiH3VXGRcMNV45lvdzjg.roa
Signing time: Mon 01 Jan 2024 04:30:16 +0000
ROA not before: Mon 01 Jan 2024 04:30:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42775
IP address blocks: 178.236.136.0/23 maxlen: 23
185.39.192.0/22 maxlen: 22
2a02:1710:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.mft
rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 21:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:64:8a:f1:ff:03:bc:d5:e4:e3:ae:9e:f3:7c:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72588c00eef715809eb5fdd6d6717cc28c0dfac
Validity
Not Before: Jan 1 04:30:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e044a71c390c887dd55c645c30d578e65bddce38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:49:3c:de:11:4b:f2:67:c6:11:82:3c:e9:24:
81:67:89:79:68:63:7a:4a:5b:dd:98:e6:b3:8f:6c:
aa:98:b9:07:cb:0a:b4:a7:52:92:1c:ba:26:b8:7c:
34:67:14:62:33:a4:af:f4:c7:ae:2e:d5:d7:09:88:
b7:4f:5e:88:ce:dd:c0:11:c0:99:b8:60:68:a4:9a:
c2:16:fc:3c:31:3b:5f:94:31:ee:ec:11:1a:11:fa:
0f:82:4e:74:6e:aa:ce:44:02:c6:d0:25:a7:eb:a1:
38:ec:53:84:26:49:da:83:d8:bc:b7:23:46:99:93:
c2:85:e9:15:58:1f:9b:af:30:2f:39:f9:0f:f4:71:
bc:80:a1:72:52:5f:fd:b6:72:05:bc:e2:84:3f:81:
6f:dc:52:fb:14:e9:b7:95:be:05:99:a1:2f:11:2e:
71:c3:b4:90:ec:27:b3:74:05:54:25:53:43:64:7d:
9e:1b:7b:4b:c0:2a:42:49:07:65:0c:b2:aa:14:3d:
5a:34:e5:f3:90:e2:1c:be:3d:fa:01:bb:80:78:8c:
b0:92:d9:09:44:ea:a2:ba:d9:68:31:97:7a:c4:8a:
ef:dd:d1:e8:eb:7a:d6:69:3a:71:cd:df:46:ee:13:
a3:03:39:67:04:4f:aa:b0:e3:03:b3:cf:21:f2:22:
51:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:44:A7:1C:39:0C:88:7D:D5:5C:64:5C:30:D5:78:E6:5B:DD:CE:38
X509v3 Authority Key Identifier:
keyid:B7:25:88:C0:0E:EF:71:58:09:EB:5F:DD:6D:67:17:CC:28:C0:DF:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/4ESnHDkMiH3VXGRcMNV45lvdzjg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.236.136.0/23
185.39.192.0/22
IPv6:
2a02:1710:2::/48
Signature Algorithm: sha256WithRSAEncryption
86:f0:c5:9f:3a:22:a3:63:28:b5:1c:30:ee:2c:5f:50:4c:27:
15:3a:64:62:90:94:26:7e:37:7b:73:f3:57:15:16:4a:9c:38:
dd:7c:b4:5d:2e:29:9f:2d:8b:a2:e1:37:80:fe:94:c1:3e:9a:
ec:b9:a2:ca:62:3b:6d:d7:60:cc:27:16:c0:e6:a4:d2:db:a3:
92:83:fc:9d:10:57:5c:ca:bd:e1:25:4c:c7:43:ff:aa:ad:21:
96:10:c4:bb:cb:c1:ff:bc:8c:07:b1:4d:8c:92:5b:ba:72:07:
a5:4a:30:6f:08:c4:fe:05:19:04:e9:7b:83:7c:cd:a3:8f:1a:
27:c3:10:3f:11:bb:14:eb:94:bf:98:71:eb:91:01:07:74:51:
f1:be:47:d5:eb:78:2d:3d:3c:2b:0e:e6:ac:23:34:26:5f:8b:
22:f2:e1:b2:bf:27:28:c9:27:db:a2:2c:1a:3e:b1:1f:33:8e:
75:23:9c:5d:e8:c4:81:90:c3:0b:32:0e:27:be:69:a1:ef:fd:
ae:dd:44:03:13:78:00:e1:f2:c2:8a:78:89:8d:b2:15:a8:44:
b1:d5:3d:90:9e:5b:94:83:22:fa:0f:65:83:e4:3a:1d:f9:01:
84:bb:c5:76:ad:5b:dd:80:ba:59:9a:b7:a0:85:13:7d:91:bd:
b8:89:48:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 00:50:35 2024 by rpki-client on console-fra.rpki-client.org