Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/O7yiNUi1jMVw4lQtj4u_ekFtXR4.roa
File: O7yiNUi1jMVw4lQtj4u_ekFtXR4.roa (raw, json)
Hash identifier: H6+UsDn6HQ7LuUkJaGrJ1YaSDWOsgHzKcqgtKJ79MFU=
Subject key identifier: 3B:BC:A2:35:48:B5:8C:C5:70:E2:54:2D:8F:8B:BF:7A:41:6D:5D:1E
Certificate issuer: /CN=cf5567122a88ca9889a1798b6c942dcc0cbc753b
Certificate serial: 018CC86F73BAE20343C0FE80EEC1D6D91A3E
Authority key identifier: CF:55:67:12:2A:88:CA:98:89:A1:79:8B:6C:94:2D:CC:0C:BC:75:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z1VnEiqIypiJoXmLbJQtzAy8dTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/O7yiNUi1jMVw4lQtj4u_ekFtXR4.roa
Signing time: Tue 02 Jan 2024 04:29:56 +0000
ROA not before: Tue 02 Jan 2024 04:29:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58224
IP address blocks: 185.115.76.0/23 maxlen: 23
185.115.77.0/24 maxlen: 24
185.115.76.0/22 maxlen: 22
185.115.78.0/24 maxlen: 24
185.115.76.0/24 maxlen: 24
185.115.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.mft
rsync://rpki.ripe.net/repository/DEFAULT/z1VnEiqIypiJoXmLbJQtzAy8dTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Jun 2024 03:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:73:ba:e2:03:43:c0:fe:80:ee:c1:d6:d9:1a:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf5567122a88ca9889a1798b6c942dcc0cbc753b
Validity
Not Before: Jan 2 04:29:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3bbca23548b58cc570e2542d8f8bbf7a416d5d1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:f4:c2:04:cc:ae:5d:ca:c8:81:4e:cf:1c:db:
f8:f6:4a:2f:9e:62:0f:15:1d:91:52:a7:a0:25:89:
8d:a9:50:27:94:43:d3:25:5f:ef:52:3a:e0:a5:94:
d8:9c:45:fd:34:fd:2a:f3:a2:55:bb:0a:1c:cf:de:
34:73:8d:67:03:39:6e:db:87:d4:64:60:f3:fe:08:
a3:5b:67:16:1e:b1:5f:1a:67:af:dc:2b:55:a8:26:
56:71:18:1b:78:fd:9d:32:ac:02:23:2c:54:c9:5f:
00:37:29:b0:e0:44:dc:6a:fe:72:82:46:ca:17:3e:
37:1c:7d:27:43:a3:74:c7:e1:17:8c:40:3d:37:38:
62:15:d6:ec:06:17:8a:67:61:c7:11:78:9b:a9:78:
0d:a7:f6:34:e5:37:4c:ca:9c:28:36:2b:ca:b3:cf:
a7:fe:5c:20:9f:ec:6e:72:e6:8c:46:a5:f6:91:60:
fd:e4:74:3d:e0:b6:ea:98:c6:2d:49:18:37:70:d2:
af:46:8f:4a:5f:d3:67:42:ae:57:93:a1:b1:b1:72:
69:3c:17:c0:01:56:13:78:12:fb:7b:7f:78:f6:5c:
24:ef:69:e5:87:2a:83:0e:2b:a9:af:13:b8:1b:dd:
c2:68:5a:f7:37:33:89:13:30:85:82:6d:dd:8e:be:
01:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:BC:A2:35:48:B5:8C:C5:70:E2:54:2D:8F:8B:BF:7A:41:6D:5D:1E
X509v3 Authority Key Identifier:
keyid:CF:55:67:12:2A:88:CA:98:89:A1:79:8B:6C:94:2D:CC:0C:BC:75:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z1VnEiqIypiJoXmLbJQtzAy8dTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/O7yiNUi1jMVw4lQtj4u_ekFtXR4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.115.76.0/22
Signature Algorithm: sha256WithRSAEncryption
11:e4:40:42:0b:93:1a:0d:40:e6:4c:52:5c:e7:64:9e:50:b8:
e8:f2:a2:cc:20:61:c4:72:3c:21:41:e0:cc:d3:9b:98:32:b4:
f0:d9:40:a6:dc:55:29:7b:9d:66:44:80:23:89:9c:94:97:c1:
27:19:3b:36:d8:ee:8d:72:5a:f7:8d:dc:58:fc:16:61:bd:e9:
3b:fd:79:7a:27:33:b1:f6:a1:c4:48:60:cf:98:5a:30:d8:00:
3d:8f:f9:fa:fa:1a:55:99:7e:91:78:36:5a:29:62:d2:4a:33:
3d:1d:29:54:4f:0a:89:09:a1:7b:b5:81:83:e0:8a:b9:b7:be:
8c:2f:81:e5:4e:17:ff:ed:af:7e:6b:b6:be:31:2b:24:35:40:
72:77:06:05:61:1e:37:eb:69:c4:85:c0:d3:56:a7:35:41:bd:
9f:db:f5:0c:12:aa:e2:67:63:43:2a:59:d7:8a:7b:c5:60:60:
56:0b:08:34:96:17:89:ab:c6:10:24:17:d0:e6:64:fe:b6:aa:
26:f8:e2:52:8d:aa:fd:b9:c3:ac:41:32:43:fc:c3:f8:1f:b8:
8e:88:8d:f1:99:91:e3:33:28:9f:08:af:c0:81:60:a6:ac:69:
52:9a:4b:1c:a2:a4:3c:53:7f:5f:b9:f8:e4:6e:93:8d:9c:48:
b3:3f:d3:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 10:03:01 2024 by rpki-client on console-fra.rpki-client.org