Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/4Frao6vnKbuyOrkyGv12TpCGRSg.roa
File: 4Frao6vnKbuyOrkyGv12TpCGRSg.roa (raw, json)
Hash identifier: s9ploTaZSw6F2++QUDa2mmM+36ngFMmWj5cnITXgyBc=
Subject key identifier: E0:5A:DA:A3:AB:E7:29:BB:B2:3A:B9:32:1A:FD:76:4E:90:86:45:28
Certificate issuer: /CN=c15e7d7bb69efacb0c73902972c74d72d29bf77f
Certificate serial: 018D6BB7134C2F94CCA8DAF4DF905166E76D
Authority key identifier: C1:5E:7D:7B:B6:9E:FA:CB:0C:73:90:29:72:C7:4D:72:D2:9B:F7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wV59e7ae-ssMc5ApcsdNctKb938.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/4Frao6vnKbuyOrkyGv12TpCGRSg.roa
Signing time: Fri 02 Feb 2024 21:26:16 +0000
ROA not before: Fri 02 Feb 2024 21:26:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 400696
IP address blocks: 185.102.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/wV59e7ae-ssMc5ApcsdNctKb938.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/wV59e7ae-ssMc5ApcsdNctKb938.mft
rsync://rpki.ripe.net/repository/DEFAULT/wV59e7ae-ssMc5ApcsdNctKb938.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 01:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:6b:b7:13:4c:2f:94:cc:a8:da:f4:df:90:51:66:e7:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c15e7d7bb69efacb0c73902972c74d72d29bf77f
Validity
Not Before: Feb 2 21:26:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e05adaa3abe729bbb23ab9321afd764e90864528
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:52:e6:e5:58:77:97:55:9c:2c:b6:ce:8a:7b:
37:72:91:45:ea:05:5c:2c:1d:ad:46:3f:a9:05:61:
93:04:04:19:5c:05:ce:19:b6:f7:9a:26:bb:9b:93:
88:00:11:4d:4f:a1:c4:f3:ea:e6:e6:dc:f1:dc:9e:
b6:4e:19:96:67:78:30:12:93:c2:df:3b:69:1e:24:
f0:08:9e:d8:6c:4b:bc:09:a1:b3:b3:4d:0b:4d:9c:
26:a6:6f:3d:89:0f:b6:be:75:a4:9f:d9:00:2b:64:
0b:8b:b0:1d:e3:43:1f:36:99:5d:78:e2:63:58:a7:
c1:d4:a8:b9:7d:bb:75:4e:ff:82:1f:15:6a:e1:ee:
c4:aa:6c:e3:80:c4:4d:10:49:89:92:04:1a:7e:b7:
db:fd:f5:f5:58:3f:2b:76:25:d0:c7:ef:24:35:23:
24:c4:dd:ab:5f:a6:06:f7:96:b1:e0:47:e0:5b:a3:
aa:42:c3:fc:f7:db:7f:20:96:5a:5e:4d:ac:1e:14:
4d:e9:b6:3b:dc:f2:0e:9c:bc:84:af:96:79:41:80:
f8:b5:99:2d:61:7e:20:0d:74:e8:fa:ea:47:18:52:
7e:a3:1b:1d:05:29:f4:ed:42:0e:8b:a5:16:57:cc:
cd:f1:3b:e6:3f:ab:8b:b6:10:29:32:45:9d:6d:ef:
55:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:5A:DA:A3:AB:E7:29:BB:B2:3A:B9:32:1A:FD:76:4E:90:86:45:28
X509v3 Authority Key Identifier:
keyid:C1:5E:7D:7B:B6:9E:FA:CB:0C:73:90:29:72:C7:4D:72:D2:9B:F7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wV59e7ae-ssMc5ApcsdNctKb938.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/4Frao6vnKbuyOrkyGv12TpCGRSg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/wV59e7ae-ssMc5ApcsdNctKb938.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.102.168.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:5c:80:49:b3:3a:21:50:a9:fb:9a:e8:c4:f5:1d:50:06:8e:
ea:4e:30:39:13:9a:63:15:d2:3b:e0:5d:62:4a:4a:59:6d:01:
59:70:42:ff:5b:34:06:09:7d:a5:e3:8e:08:96:72:31:5f:ef:
dc:05:c5:ee:da:e7:06:e7:33:c5:b9:6a:9a:64:65:85:5a:6b:
fc:91:72:07:a2:89:1f:48:8f:52:d1:93:5a:76:3f:0c:70:b9:
59:c8:3e:b4:00:ea:2b:93:ef:87:f7:1e:83:4b:10:a6:ec:6e:
b8:e4:d2:02:9a:26:26:2c:de:5e:b3:73:00:4d:67:a6:04:5b:
7e:10:a3:64:e8:7b:04:f0:bd:12:ea:90:b2:4b:22:c5:88:e3:
ef:cd:56:2b:8e:1a:a0:39:51:66:cb:9e:9e:12:d0:89:9d:76:
b2:8f:a0:92:bf:21:ab:55:40:cd:32:10:5c:f5:2b:d5:af:db:
fc:b3:a8:f6:bf:72:83:9a:b0:52:ab:83:7b:ac:12:71:eb:50:
d8:31:17:52:95:2c:a9:e2:24:cf:8d:f8:f1:49:bd:b4:a9:5d:
7a:f8:d1:30:f6:d8:b2:45:70:05:c1:b8:8a:40:5a:d4:fd:9b:
84:8a:29:d2:7b:9a:d1:63:78:45:47:ba:f3:b8:3e:f7:1f:06:
90:3a:6f:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 09:56:25 2024 by rpki-client on console-ams.rpki-client.org