Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/44ec43-5935-4ab2-b13d-02eb9a412637/1/fvHKDoWx1UGjqXj6GAHWNRuSrxQ.roa
File: fvHKDoWx1UGjqXj6GAHWNRuSrxQ.roa (raw, json)
Hash identifier: Gv6YwFxiwlxziZZEUO3lzzBwSonavhf+Z3I/U05QGJA=
Subject key identifier: 7E:F1:CA:0E:85:B1:D5:41:A3:A9:78:FA:18:01:D6:35:1B:92:AF:14
Certificate issuer: /CN=e2344ba6340961da5eeb4ae239e9a06267793e2e
Certificate serial: 018FDDCC0980E42C97F15A584DC1101D6604
Authority key identifier: E2:34:4B:A6:34:09:61:DA:5E:EB:4A:E2:39:E9:A0:62:67:79:3E:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4jRLpjQJYdpe60riOemgYmd5Pi4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/44ec43-5935-4ab2-b13d-02eb9a412637/1/fvHKDoWx1UGjqXj6GAHWNRuSrxQ.roa
Signing time: Mon 03 Jun 2024 11:11:27 +0000
ROA not before: Mon 03 Jun 2024 11:11:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57717
IP address blocks: 185.225.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/44ec43-5935-4ab2-b13d-02eb9a412637/1/4jRLpjQJYdpe60riOemgYmd5Pi4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/44ec43-5935-4ab2-b13d-02eb9a412637/1/4jRLpjQJYdpe60riOemgYmd5Pi4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4jRLpjQJYdpe60riOemgYmd5Pi4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Jul 2024 11:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:dd:cc:09:80:e4:2c:97:f1:5a:58:4d:c1:10:1d:66:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2344ba6340961da5eeb4ae239e9a06267793e2e
Validity
Not Before: Jun 3 11:11:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7ef1ca0e85b1d541a3a978fa1801d6351b92af14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:35:e5:3d:18:bf:53:07:98:d9:b1:02:4e:91:
a0:fa:22:49:84:70:8a:ab:ec:b4:4a:52:38:7c:e4:
27:86:44:9f:cb:30:c9:18:d9:1c:03:d0:69:97:a2:
07:dc:83:07:6a:60:7c:03:78:c1:71:f9:6d:c1:68:
9e:68:07:c4:ee:e2:26:1f:d0:82:47:2b:8f:a9:fb:
e1:45:3a:e2:94:c5:75:96:04:68:c2:03:35:63:4d:
ac:c3:79:7d:eb:51:19:cc:68:c4:09:ed:7b:08:f2:
ad:a0:d3:77:39:7e:98:ac:be:01:db:14:cf:97:f5:
60:22:dc:4b:c9:49:d2:1b:9d:99:39:f2:58:73:8d:
8f:39:7b:9f:9a:d8:e0:9c:b8:b9:69:47:18:99:fb:
31:ab:f2:52:c4:80:00:11:0a:cc:13:d7:2e:dd:33:
4d:99:c4:a1:ce:14:b0:c7:79:d9:9e:57:17:7a:34:
b2:7d:e3:67:6b:a5:3f:a7:b1:19:48:0e:c7:f1:8e:
e9:fb:08:8d:fd:0f:0a:a1:2e:93:40:f0:e7:a1:14:
92:22:7d:e7:7c:cb:19:99:b9:78:13:00:9c:df:cf:
64:2b:8c:98:fe:78:27:ab:0b:01:72:c8:46:7c:32:
5f:8b:cd:f0:0e:c5:df:5e:9f:0c:4a:16:2c:e9:14:
09:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:F1:CA:0E:85:B1:D5:41:A3:A9:78:FA:18:01:D6:35:1B:92:AF:14
X509v3 Authority Key Identifier:
keyid:E2:34:4B:A6:34:09:61:DA:5E:EB:4A:E2:39:E9:A0:62:67:79:3E:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4jRLpjQJYdpe60riOemgYmd5Pi4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/44ec43-5935-4ab2-b13d-02eb9a412637/1/fvHKDoWx1UGjqXj6GAHWNRuSrxQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/44ec43-5935-4ab2-b13d-02eb9a412637/1/4jRLpjQJYdpe60riOemgYmd5Pi4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.225.112.0/24
Signature Algorithm: sha256WithRSAEncryption
57:6b:33:8e:97:c4:c0:c1:7a:3b:99:a7:80:81:8c:f3:13:b6:
52:e2:db:a7:ec:40:0e:b7:87:39:69:71:88:02:c8:2f:b0:53:
ed:cb:34:5d:a5:e2:04:ee:d4:e5:d3:e9:c2:7b:95:de:af:02:
28:a2:c0:ec:43:85:28:09:df:a0:48:43:db:ed:70:8a:1a:ba:
53:1b:17:44:c0:34:bb:fc:f4:40:75:ba:3f:31:89:15:56:0e:
a8:8f:48:52:53:aa:f3:23:fd:bb:d0:98:e5:cc:7f:75:bf:aa:
64:aa:c5:a0:85:5c:a2:98:2e:28:f4:92:b2:3e:5d:6f:c7:e4:
c8:0b:7b:d0:0e:8d:b4:d9:36:1b:26:84:45:59:bd:3a:22:05:
c1:14:7f:56:1b:eb:9c:e3:66:94:50:ae:62:e6:cb:f4:84:d4:
b3:8d:81:d1:70:cf:e9:8a:a0:2c:d1:6b:79:e0:b0:97:a3:76:
b0:72:07:56:0d:4e:fe:5b:05:17:07:9d:3a:c4:7d:f2:46:67:
de:0b:b2:a0:6c:4f:cf:d2:15:27:a1:d6:b0:99:28:df:81:f8:
a0:72:9a:24:a7:79:14:f1:95:d4:3a:cf:0c:bf:5c:5b:5f:96:
b7:5f:5e:13:a2:07:2e:f9:f9:6e:9b:92:85:03:11:61:30:f7:
9a:3a:7c:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 5 18:08:06 2024 by rpki-client on console-ams.rpki-client.org