Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/d50912-0b8d-43cc-8bee-dedc5a6964fc/1/ofmtRuy5pAyJmCxuTOnQ5E0DGGE.roa
File: ofmtRuy5pAyJmCxuTOnQ5E0DGGE.roa (raw, json)
Hash identifier: TRYzOM8b9TpDOR/LQxK3ng5Y1RnIMZ35zTcb34M57v0=
Subject key identifier: A1:F9:AD:46:EC:B9:A4:0C:89:98:2C:6E:4C:E9:D0:E4:4D:03:18:61
Certificate issuer: /CN=e618eff923e35bf83792353c4633ca2300f75b6c
Certificate serial: 018F9F676597FA92C5379BD8E1DC40FF3D55
Authority key identifier: E6:18:EF:F9:23:E3:5B:F8:37:92:35:3C:46:33:CA:23:00:F7:5B:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5hjv-SPjW_g3kjU8RjPKIwD3W2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/d50912-0b8d-43cc-8bee-dedc5a6964fc/1/ofmtRuy5pAyJmCxuTOnQ5E0DGGE.roa
Signing time: Wed 22 May 2024 08:25:04 +0000
ROA not before: Wed 22 May 2024 08:25:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 400866
IP address blocks: 185.218.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/d50912-0b8d-43cc-8bee-dedc5a6964fc/1/5hjv-SPjW_g3kjU8RjPKIwD3W2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/d50912-0b8d-43cc-8bee-dedc5a6964fc/1/5hjv-SPjW_g3kjU8RjPKIwD3W2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/5hjv-SPjW_g3kjU8RjPKIwD3W2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Jun 2024 00:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:9f:67:65:97:fa:92:c5:37:9b:d8:e1:dc:40:ff:3d:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e618eff923e35bf83792353c4633ca2300f75b6c
Validity
Not Before: May 22 08:25:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a1f9ad46ecb9a40c89982c6e4ce9d0e44d031861
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d9:cd:a4:4a:11:05:99:5b:5e:a5:e2:87:b8:
02:39:9c:4a:96:66:18:0e:6b:e8:ab:2a:76:b1:92:
73:9e:20:6a:79:a8:a4:6e:f4:35:30:7c:85:ce:17:
16:68:7e:93:6b:b8:12:81:02:9b:b6:91:bb:af:ab:
c8:21:0c:38:9f:e0:8e:eb:ca:45:53:9f:07:de:a1:
bd:a2:5f:79:b5:e9:32:f7:8d:24:9d:4b:d1:46:59:
d6:e3:66:8e:2c:db:9b:ea:95:5c:6a:19:f9:ba:0b:
38:c9:4a:ae:51:b0:a9:73:1d:34:02:53:96:79:11:
66:14:3f:b2:5a:2a:02:14:5c:09:01:a7:38:e0:07:
f0:06:64:e7:44:12:63:27:b2:26:ec:73:d3:fe:b9:
45:21:55:a9:5f:03:99:4e:37:98:cd:be:8f:49:0c:
6d:56:6b:f4:ea:e4:a5:65:f5:ec:1a:d2:97:43:4b:
c6:31:d9:b9:ae:f9:6e:fb:7f:27:da:07:e0:85:e3:
52:fb:fa:03:34:53:d7:5a:04:b3:d9:26:9f:31:44:
bc:53:b0:fb:34:00:4c:7a:ce:90:43:7d:8a:8f:f9:
67:58:9b:28:0b:59:ee:8f:f8:fb:ce:45:bd:24:05:
f4:46:7d:c8:25:47:2e:ab:56:6d:23:5f:34:2b:75:
b0:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:F9:AD:46:EC:B9:A4:0C:89:98:2C:6E:4C:E9:D0:E4:4D:03:18:61
X509v3 Authority Key Identifier:
keyid:E6:18:EF:F9:23:E3:5B:F8:37:92:35:3C:46:33:CA:23:00:F7:5B:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hjv-SPjW_g3kjU8RjPKIwD3W2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d50912-0b8d-43cc-8bee-dedc5a6964fc/1/ofmtRuy5pAyJmCxuTOnQ5E0DGGE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d50912-0b8d-43cc-8bee-dedc5a6964fc/1/5hjv-SPjW_g3kjU8RjPKIwD3W2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.218.142.0/24
Signature Algorithm: sha256WithRSAEncryption
42:44:eb:23:5f:5d:8b:bc:c1:e0:87:73:d6:83:25:4e:97:3d:
45:90:b4:19:f1:6f:62:1f:03:46:cd:38:42:e5:70:d0:21:ae:
40:1e:5e:93:00:50:cc:d6:3e:65:c2:dd:5b:9c:a9:b5:ca:0e:
b7:77:0e:ef:00:dd:dd:dc:21:a6:5b:42:9d:1d:7c:2a:08:c7:
75:79:8d:14:40:a7:ce:51:4a:d8:85:c5:26:29:0f:14:32:b3:
84:76:cb:70:33:f7:37:d6:9d:6b:f1:d1:d5:e9:c9:cf:d8:3c:
2c:81:64:0c:05:39:d6:d2:fd:1b:d3:da:40:c4:bb:ef:1e:b3:
c1:48:de:b1:64:2c:fb:be:b7:38:91:6f:ae:c2:1e:0a:94:41:
4c:1e:62:4e:83:13:7c:96:e1:2e:dd:eb:4b:df:d4:bf:d9:da:
47:94:69:a3:11:c8:3a:d4:96:b0:55:02:3d:68:3b:18:05:17:
59:30:82:8a:ab:a6:cb:09:c3:b6:ef:89:43:75:f9:dd:15:09:
9b:df:88:28:3d:e0:86:0f:15:99:1d:51:a4:ca:76:a2:39:50:
78:c6:d6:10:44:3f:bd:0d:45:d1:e1:51:e3:6c:6c:39:d2:1d:
93:74:54:16:b3:43:f8:59:c6:52:38:45:1a:2c:e2:90:57:c1:
18:8e:9a:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 03:38:04 2024 by rpki-client on console-fra.rpki-client.org