Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/41e9b0-62e7-4718-b966-1f9ae055646f/1/e5FUAix0xw5OOs8knhppTLUcePc.roa
File: e5FUAix0xw5OOs8knhppTLUcePc.roa (raw, json)
Hash identifier: IblXg2QY0Dr1T55a/v2dGcPNeHKhXoEZ9e/iHFMyN58=
Subject key identifier: 7B:91:54:02:2C:74:C7:0E:4E:3A:CF:24:9E:1A:69:4C:B5:1C:78:F7
Certificate issuer: /CN=8aa1fe9a4c03d015aec974e2d29709a979eb82f1
Certificate serial: 018CC26D0DA7CBEC6CACBE4A3184CD523350
Authority key identifier: 8A:A1:FE:9A:4C:03:D0:15:AE:C9:74:E2:D2:97:09:A9:79:EB:82:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iqH-mkwD0BWuyXTi0pcJqXnrgvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/41e9b0-62e7-4718-b966-1f9ae055646f/1/e5FUAix0xw5OOs8knhppTLUcePc.roa
Signing time: Mon 01 Jan 2024 00:29:35 +0000
ROA not before: Mon 01 Jan 2024 00:29:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 396982
IP address blocks: 185.241.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/41e9b0-62e7-4718-b966-1f9ae055646f/1/iqH-mkwD0BWuyXTi0pcJqXnrgvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/41e9b0-62e7-4718-b966-1f9ae055646f/1/iqH-mkwD0BWuyXTi0pcJqXnrgvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/iqH-mkwD0BWuyXTi0pcJqXnrgvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 16:03:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:0d:a7:cb:ec:6c:ac:be:4a:31:84:cd:52:33:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8aa1fe9a4c03d015aec974e2d29709a979eb82f1
Validity
Not Before: Jan 1 00:29:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7b9154022c74c70e4e3acf249e1a694cb51c78f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:df:38:7f:a7:8e:f3:40:b9:04:41:be:a8:36:
c6:77:87:68:61:9c:e8:f7:2f:92:be:cb:0f:ca:32:
5c:d8:4f:35:16:b0:28:92:d5:df:d3:8e:4b:bf:4e:
d7:0c:a3:4a:ec:80:07:2e:52:06:e5:87:08:46:8b:
3e:8d:fc:a4:43:ef:54:c7:6f:42:26:e3:f3:70:e3:
5f:e9:09:84:f5:d7:0a:05:3b:10:1c:73:12:29:d7:
52:c1:23:30:c9:83:82:f1:4d:3a:64:28:62:79:8a:
c3:e5:a8:ba:07:a0:55:47:45:b5:04:dc:0f:51:6b:
48:c1:a9:7c:ac:ba:85:1a:28:c7:83:29:e7:e4:bc:
d8:aa:3c:71:ae:d7:fb:18:72:d2:51:d2:3b:d1:57:
29:89:69:34:d8:dc:4d:05:f8:55:f7:f1:06:d4:02:
a0:c0:ab:55:38:80:9a:27:67:80:fb:c2:ff:79:a5:
08:b8:79:8b:7a:80:a7:66:76:05:ec:4f:1c:51:c1:
cb:f5:01:85:56:50:1c:2c:6e:4f:58:b5:f1:4b:14:
47:43:57:1e:09:cf:b9:43:5a:68:40:12:40:60:25:
9e:b8:4b:28:e3:1f:59:b8:6e:35:4d:1b:5f:47:df:
4c:72:f5:f8:05:91:5c:ff:21:19:06:b7:44:dc:c7:
ce:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:91:54:02:2C:74:C7:0E:4E:3A:CF:24:9E:1A:69:4C:B5:1C:78:F7
X509v3 Authority Key Identifier:
keyid:8A:A1:FE:9A:4C:03:D0:15:AE:C9:74:E2:D2:97:09:A9:79:EB:82:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iqH-mkwD0BWuyXTi0pcJqXnrgvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/41e9b0-62e7-4718-b966-1f9ae055646f/1/e5FUAix0xw5OOs8knhppTLUcePc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/41e9b0-62e7-4718-b966-1f9ae055646f/1/iqH-mkwD0BWuyXTi0pcJqXnrgvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.241.47.0/24
Signature Algorithm: sha256WithRSAEncryption
26:64:ba:c2:be:0a:29:3e:1b:61:e1:95:88:7d:dc:14:91:4b:
63:8a:3c:cc:f7:e4:36:07:dd:f6:96:5a:ac:98:43:4f:14:8e:
82:6c:6a:a9:fe:8a:d2:85:bc:45:f8:ee:42:0a:de:b5:5d:8c:
f2:6c:84:46:78:41:6f:2c:87:67:b3:e1:cc:81:bd:59:94:05:
23:76:12:6d:ae:c6:e8:12:2a:49:1d:b4:5b:dc:c0:0c:3c:6f:
00:2b:82:40:91:bb:e4:13:ee:da:53:1f:91:1e:f8:7f:f5:ba:
c1:fb:82:52:15:77:ca:67:e5:f3:ca:6f:25:fd:5f:5e:af:4a:
85:eb:69:0c:75:4f:f5:34:95:dd:f5:06:ff:8e:02:8a:14:62:
a0:fd:e9:90:95:00:75:c2:01:68:c3:13:ba:fb:04:ab:8e:5a:
64:e3:1f:44:14:27:ea:0d:24:6d:90:c1:3d:f3:a2:10:7f:10:
08:b8:c3:ac:d2:7c:43:42:3a:2c:0c:a3:81:e7:4c:04:53:d5:
af:11:d7:99:e8:0d:57:5d:88:b5:68:e1:87:28:df:ea:99:5b:
f1:74:d3:6c:8e:e4:84:79:06:7f:fc:27:b6:27:01:8d:3a:21:
87:10:2d:c7:63:7d:a1:43:ac:bf:0d:84:b1:c9:f9:7e:68:fb:
d6:ee:56:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 20:04:34 2024 by rpki-client on console-ams.rpki-client.org