Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/R1_1RcvMjRvAJ8ntCUj3VOAZIx4.roa
File: R1_1RcvMjRvAJ8ntCUj3VOAZIx4.roa (raw, json)
Hash identifier: FjckIStSOi9KX8+tjrjULqQ4sqV3V/tvo+JURvWdfYg=
Subject key identifier: 47:5F:F5:45:CB:CC:8D:1B:C0:27:C9:ED:09:48:F7:54:E0:19:23:1E
Certificate issuer: /CN=c8544c778152f0fd85e5dcb44904f001e5987424
Certificate serial: 018CC86F5D206D553E02C568A12166691CF5
Authority key identifier: C8:54:4C:77:81:52:F0:FD:85:E5:DC:B4:49:04:F0:01:E5:98:74:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/R1_1RcvMjRvAJ8ntCUj3VOAZIx4.roa
Signing time: Tue 02 Jan 2024 04:29:50 +0000
ROA not before: Tue 02 Jan 2024 04:29:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205185
IP address blocks: 185.142.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 12:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:5d:20:6d:55:3e:02:c5:68:a1:21:66:69:1c:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8544c778152f0fd85e5dcb44904f001e5987424
Validity
Not Before: Jan 2 04:29:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=475ff545cbcc8d1bc027c9ed0948f754e019231e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:9b:62:17:e6:d8:01:a2:9d:93:5d:bb:17:b8:
ba:29:a5:e6:80:bd:12:65:eb:8d:31:35:1f:50:ea:
b4:b0:6a:31:9f:ce:2f:8c:a3:2d:6c:0e:5e:f7:14:
82:97:68:19:b3:8d:39:7e:9d:3f:90:f5:7d:7e:c8:
59:1e:1d:2d:8e:4c:48:29:a3:19:5b:ba:4d:90:71:
fb:e6:c4:8d:0f:1c:78:db:19:79:8d:f9:bc:c2:a7:
9a:68:9a:12:c6:1a:24:9a:88:3f:40:69:d6:76:29:
cb:32:37:fe:14:2f:3f:82:99:3b:a6:ea:60:aa:59:
e9:36:f9:a5:17:a1:90:cc:ad:e6:43:ac:dd:9f:58:
76:2e:ac:24:37:73:0c:83:c8:17:41:dc:0e:cb:39:
6a:3c:42:3f:fd:25:fe:40:9c:2a:b9:2e:77:59:a2:
8b:71:62:f2:4a:6f:9b:4c:28:c3:5c:47:37:dd:b3:
cc:2c:5f:e8:3e:34:28:de:17:9a:14:e3:07:76:2d:
0c:ca:16:92:ba:4d:67:ab:74:9f:d3:a4:86:98:fe:
d5:3a:a9:25:65:42:83:21:ea:ab:07:a7:95:b2:29:
97:81:1f:93:7e:d0:ae:2c:d6:c4:46:42:71:e9:3f:
28:5a:03:32:91:b5:14:4c:95:64:52:e3:eb:0c:fd:
54:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:5F:F5:45:CB:CC:8D:1B:C0:27:C9:ED:09:48:F7:54:E0:19:23:1E
X509v3 Authority Key Identifier:
keyid:C8:54:4C:77:81:52:F0:FD:85:E5:DC:B4:49:04:F0:01:E5:98:74:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/R1_1RcvMjRvAJ8ntCUj3VOAZIx4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.142.79.0/24
Signature Algorithm: sha256WithRSAEncryption
13:93:94:c6:1e:02:db:a0:f4:77:60:57:26:a1:30:7c:d9:68:
18:e5:ca:9b:f1:98:40:9e:67:fa:3b:93:c8:af:e0:fb:ae:3d:
3d:e2:c5:3a:49:16:0d:46:27:42:36:e3:b7:df:39:86:50:f6:
ff:b4:66:26:ce:44:37:9f:0a:e0:83:a5:ff:a1:f5:fe:b9:d7:
24:ed:24:7b:7c:6a:1b:f3:46:6c:7f:04:47:63:b8:63:3a:1d:
2f:67:8d:ea:b9:a0:36:a6:06:e9:17:c2:ac:9b:d9:37:0c:30:
77:9e:d8:ee:98:28:a9:55:5e:0e:bb:38:25:5c:a6:eb:a2:73:
30:53:32:db:44:1e:9d:e1:10:14:97:c3:f5:e4:5f:c5:43:e0:
c0:ec:15:1e:18:90:65:a3:1a:00:92:f5:66:9a:18:de:81:cc:
ea:e0:03:01:9e:c8:fb:67:7d:37:1b:86:3e:f2:44:e5:64:b8:
12:3b:3b:70:4e:49:a8:26:82:fe:f2:16:d6:84:41:39:b1:84:
a7:85:05:c2:bc:ef:f8:37:4a:c6:ed:61:2e:23:92:a0:9d:7e:
48:cf:3e:40:cc:eb:ef:0b:74:f4:35:89:de:73:26:4c:d9:df:
0f:6d:7b:eb:43:b1:89:1a:7c:08:2b:e8:00:ac:eb:1e:fc:d4:
4e:42:2d:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 22 18:52:13 2024 by rpki-client on console-ams.rpki-client.org