Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/5de6df-ce4f-4b09-82d2-377d25be594d/1/20EsF4h7NF0t6O13Zc0rFlmRExM.roa
File: 20EsF4h7NF0t6O13Zc0rFlmRExM.roa (raw, json)
Hash identifier: yGEEg7xI06AyMa2/EBex0kiGbwzFCiaZEm7KBRLebh8=
Subject key identifier: DB:41:2C:17:88:7B:34:5D:2D:E8:ED:77:65:CD:2B:16:59:91:13:13
Certificate issuer: /CN=f339343cc6d51ddb8e3638299a1bb495f4580921
Certificate serial: 018CC72747AFF79157522F6EF700D229129B
Authority key identifier: F3:39:34:3C:C6:D5:1D:DB:8E:36:38:29:9A:1B:B4:95:F4:58:09:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8zk0PMbVHduONjgpmhu0lfRYCSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/5de6df-ce4f-4b09-82d2-377d25be594d/1/20EsF4h7NF0t6O13Zc0rFlmRExM.roa
Signing time: Mon 01 Jan 2024 22:31:29 +0000
ROA not before: Mon 01 Jan 2024 22:31:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205241
IP address blocks: 185.219.56.0/22 maxlen: 24
2a0b:e140::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/5de6df-ce4f-4b09-82d2-377d25be594d/1/8zk0PMbVHduONjgpmhu0lfRYCSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/5de6df-ce4f-4b09-82d2-377d25be594d/1/8zk0PMbVHduONjgpmhu0lfRYCSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8zk0PMbVHduONjgpmhu0lfRYCSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 01 Jul 2024 07:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:47:af:f7:91:57:52:2f:6e:f7:00:d2:29:12:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f339343cc6d51ddb8e3638299a1bb495f4580921
Validity
Not Before: Jan 1 22:31:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=db412c17887b345d2de8ed7765cd2b1659911313
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:a5:c6:2b:2b:94:41:bc:e6:2c:9e:f4:e1:eb:
49:21:8c:38:e2:de:2b:dd:55:48:15:ad:37:92:b3:
44:10:d4:a1:24:0c:ed:42:f2:60:fa:72:e6:e3:bd:
24:66:c4:8c:15:8e:c4:c6:e9:33:54:76:05:b2:e3:
a2:72:bc:a7:6b:ef:a1:22:f0:49:eb:53:0b:74:74:
c2:35:93:f5:ce:23:10:73:7d:7e:8c:1b:a2:95:af:
ad:32:5d:1c:a5:73:25:4c:38:cf:e7:3c:02:45:f5:
48:11:65:0f:11:5b:19:48:27:20:b3:72:f6:90:ef:
6e:6c:e2:e2:0c:29:f9:b7:cd:18:9d:d7:ed:d3:60:
54:f2:56:3a:e9:fe:fc:a8:6e:5c:52:c2:6d:e5:53:
9e:96:fd:38:d5:c8:d8:eb:67:00:26:57:20:96:50:
bb:d6:42:c3:a2:57:ec:ea:83:f7:85:f0:54:7b:89:
91:f9:bc:6a:9f:b2:b9:05:62:d7:9b:5d:09:ac:6a:
55:a8:80:76:a8:ca:46:11:5b:33:47:a4:44:31:db:
e4:f8:66:3f:25:29:be:ac:33:58:76:d7:a3:b2:c0:
2a:8a:8a:1c:96:e3:b7:c9:ab:83:fa:54:d3:23:85:
e6:cd:74:c1:64:9e:4d:e7:eb:69:a1:80:2e:9f:50:
fa:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:41:2C:17:88:7B:34:5D:2D:E8:ED:77:65:CD:2B:16:59:91:13:13
X509v3 Authority Key Identifier:
keyid:F3:39:34:3C:C6:D5:1D:DB:8E:36:38:29:9A:1B:B4:95:F4:58:09:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8zk0PMbVHduONjgpmhu0lfRYCSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/5de6df-ce4f-4b09-82d2-377d25be594d/1/20EsF4h7NF0t6O13Zc0rFlmRExM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/5de6df-ce4f-4b09-82d2-377d25be594d/1/8zk0PMbVHduONjgpmhu0lfRYCSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.219.56.0/22
IPv6:
2a0b:e140::/29
Signature Algorithm: sha256WithRSAEncryption
8c:c3:3c:b2:4f:23:25:e3:07:ad:a4:28:c2:84:30:a1:54:55:
54:06:42:a4:78:81:59:d4:9a:c2:0b:ea:69:a5:24:09:51:b5:
eb:d4:4d:73:74:8a:2a:56:3e:e1:34:13:3b:1b:11:e4:24:e8:
6c:60:77:5c:58:2c:1d:66:95:ef:0b:82:f9:1a:7b:d8:ab:56:
a1:e0:3b:05:d3:b6:9e:1b:bf:14:ab:9d:d1:e1:06:a3:39:ad:
ec:b7:11:09:07:69:53:17:5d:d5:21:b1:ca:7f:c1:0b:be:fc:
1a:98:dd:c6:11:7d:30:6c:ea:f2:5b:17:7a:b5:20:fa:e7:20:
09:39:cf:1f:54:18:7b:60:7f:2a:3b:d8:d2:0d:9c:b2:85:db:
65:73:9f:2f:08:40:ef:33:47:2e:b9:1b:69:09:de:c8:85:48:
dc:ca:71:8f:a8:10:fa:a8:59:07:58:5a:e4:c1:c3:21:95:f4:
26:82:06:55:cc:18:b1:39:22:a2:4a:e7:db:40:53:b1:7d:dc:
df:0e:e5:1c:af:d4:f7:a8:fd:dd:3a:3e:56:9b:05:97:89:f9:
e2:bc:4a:25:11:51:75:67:bf:23:6e:cb:1a:74:de:0d:96:8f:
ed:27:4f:e3:ac:07:15:af:48:f6:dc:17:7c:d4:2c:19:e4:f8:
2e:8b:b9:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 30 16:56:32 2024 by rpki-client on console-ams.rpki-client.org