Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/c2e5ef-ae02-42e3-a44a-372cc78ef7a7/1/74dE9K-1t7X3osXGKKA2Yrz9m1Q.roa
File: 74dE9K-1t7X3osXGKKA2Yrz9m1Q.roa (raw, json)
Hash identifier: +G3AnBpHm48/4REveTmD9LZAmJDRxkhRBo5R9LKaPpA=
Subject key identifier: EF:87:44:F4:AF:B5:B7:B5:F7:A2:C5:C6:28:A0:36:62:BC:FD:9B:54
Certificate issuer: /CN=818d5373ace1d4c67809263a0d24f358cf56d9b7
Certificate serial: 018CC9BCB25244EF17FF411528410B59BFF4
Authority key identifier: 81:8D:53:73:AC:E1:D4:C6:78:09:26:3A:0D:24:F3:58:CF:56:D9:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gY1Tc6zh1MZ4CSY6DSTzWM9W2bc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/c2e5ef-ae02-42e3-a44a-372cc78ef7a7/1/74dE9K-1t7X3osXGKKA2Yrz9m1Q.roa
Signing time: Tue 02 Jan 2024 10:33:55 +0000
ROA not before: Tue 02 Jan 2024 10:33:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29119
IP address blocks: 185.236.246.0/24 maxlen: 24
185.236.245.0/24 maxlen: 24
185.236.244.0/24 maxlen: 24
185.236.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/c2e5ef-ae02-42e3-a44a-372cc78ef7a7/1/gY1Tc6zh1MZ4CSY6DSTzWM9W2bc.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/c2e5ef-ae02-42e3-a44a-372cc78ef7a7/1/gY1Tc6zh1MZ4CSY6DSTzWM9W2bc.mft
rsync://rpki.ripe.net/repository/DEFAULT/gY1Tc6zh1MZ4CSY6DSTzWM9W2bc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 15:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:b2:52:44:ef:17:ff:41:15:28:41:0b:59:bf:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=818d5373ace1d4c67809263a0d24f358cf56d9b7
Validity
Not Before: Jan 2 10:33:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ef8744f4afb5b7b5f7a2c5c628a03662bcfd9b54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:de:c8:5c:f1:c1:10:df:ee:41:55:91:46:1a:
fa:04:0d:5e:a2:61:32:13:74:dc:5d:9b:e2:29:21:
c2:5c:e3:80:09:15:45:39:91:ca:ba:db:b0:be:74:
e8:3a:ff:e7:fd:57:bc:f0:3e:24:00:92:78:80:ba:
4b:76:63:13:68:11:f0:44:27:08:9e:d0:dc:26:74:
88:c8:75:12:05:96:dd:83:1e:6c:88:27:af:b2:84:
c6:72:89:aa:63:c4:82:cc:1b:0b:08:16:16:3c:43:
bf:1e:ad:45:3a:e9:88:b4:14:05:00:da:7a:10:75:
c9:95:37:41:64:ca:81:06:46:51:c2:21:9c:3e:d2:
f4:a0:75:cf:4d:b2:ed:49:db:32:eb:a5:39:d8:35:
08:a3:25:1a:22:79:08:ef:26:af:75:b2:39:79:c3:
55:38:b4:ac:b8:51:dc:27:81:01:9e:67:83:13:eb:
59:33:66:4c:c6:fe:bf:61:fe:ee:80:37:3c:b2:3e:
11:d4:6a:cc:7d:5c:1a:0e:fa:2c:3a:fe:bf:2a:98:
a6:77:55:4b:bd:05:8b:22:e9:fe:c0:d7:49:f8:04:
87:3a:4f:f5:66:64:6b:df:c8:52:8a:68:32:ec:5d:
17:da:fb:77:bd:06:33:ad:d6:18:e0:cd:4f:c7:28:
a9:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:87:44:F4:AF:B5:B7:B5:F7:A2:C5:C6:28:A0:36:62:BC:FD:9B:54
X509v3 Authority Key Identifier:
keyid:81:8D:53:73:AC:E1:D4:C6:78:09:26:3A:0D:24:F3:58:CF:56:D9:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gY1Tc6zh1MZ4CSY6DSTzWM9W2bc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/c2e5ef-ae02-42e3-a44a-372cc78ef7a7/1/74dE9K-1t7X3osXGKKA2Yrz9m1Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/c2e5ef-ae02-42e3-a44a-372cc78ef7a7/1/gY1Tc6zh1MZ4CSY6DSTzWM9W2bc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.236.244.0/22
Signature Algorithm: sha256WithRSAEncryption
0e:6e:c8:6a:8f:d8:a0:ec:2c:3d:c6:db:1f:ae:63:57:5a:9a:
72:50:a1:4c:fa:cf:2c:a5:3d:30:9d:fc:44:41:cb:bc:57:4d:
0a:62:17:47:2c:55:60:a7:d6:51:cf:4d:35:4c:3a:4d:57:12:
f9:c1:39:2a:1e:a6:29:1e:21:07:db:2e:5e:99:45:2d:78:6c:
25:32:e2:04:63:59:c8:a5:f0:76:1d:fa:1e:74:d2:b3:a2:db:
ea:68:91:df:1c:85:15:1c:17:4d:62:6e:de:73:2f:7d:83:61:
08:37:d8:d8:dd:e1:46:32:d1:da:68:d3:d6:cb:fd:99:a6:ee:
69:d8:cb:aa:50:4b:81:52:69:a4:b9:5d:30:ad:3f:6b:20:d3:
bf:46:96:58:5f:a4:35:f8:65:e0:2d:ea:7f:76:e4:bf:ae:34:
35:d7:d1:6b:57:2e:ea:42:6a:38:18:a7:32:09:f8:e8:d5:98:
a5:84:17:7a:ca:66:3e:26:3d:9e:f4:31:7a:99:da:77:19:52:
6e:98:9d:d3:25:a5:c5:cc:a0:59:ff:00:48:f6:e4:69:6f:07:
70:fe:68:36:17:d7:1e:a1:3a:66:0e:19:1c:2b:86:7b:b7:ff:
45:0b:92:e5:a1:c7:93:c4:7a:4a:c9:41:e2:c1:4e:ff:98:fa:
a2:4c:9a:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:18:08 2024 by rpki-client on console-fra.rpki-client.org