Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/439efe-f130-4931-931c-c8d5c04e3d43/1/_16KtKwHIyoglK1plBQNQQDTIb0.roa
File: _16KtKwHIyoglK1plBQNQQDTIb0.roa (raw, json)
Hash identifier: IR9OKL6T6WlGdXJRgy89hl04sfMNq0zvsnXCPtBDDtQ=
Subject key identifier: FF:5E:8A:B4:AC:07:23:2A:20:94:AD:69:94:14:0D:41:00:D3:21:BD
Certificate issuer: /CN=cc4491558cd24875db524273410502fdae3a6782
Certificate serial: 018CC26D827B9067168C6C7F23A1FB3B9AC4
Authority key identifier: CC:44:91:55:8C:D2:48:75:DB:52:42:73:41:05:02:FD:AE:3A:67:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zESRVYzSSHXbUkJzQQUC_a46Z4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/439efe-f130-4931-931c-c8d5c04e3d43/1/_16KtKwHIyoglK1plBQNQQDTIb0.roa
Signing time: Mon 01 Jan 2024 00:30:05 +0000
ROA not before: Mon 01 Jan 2024 00:30:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60724
IP address blocks: 185.7.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/439efe-f130-4931-931c-c8d5c04e3d43/1/zESRVYzSSHXbUkJzQQUC_a46Z4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/439efe-f130-4931-931c-c8d5c04e3d43/1/zESRVYzSSHXbUkJzQQUC_a46Z4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/zESRVYzSSHXbUkJzQQUC_a46Z4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:82:7b:90:67:16:8c:6c:7f:23:a1:fb:3b:9a:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc4491558cd24875db524273410502fdae3a6782
Validity
Not Before: Jan 1 00:30:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ff5e8ab4ac07232a2094ad6994140d4100d321bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:56:d3:bc:97:53:64:b1:61:e8:55:a2:85:b6:
df:4c:42:9f:7f:d3:dc:02:79:75:56:eb:28:da:2c:
b4:d2:e0:81:3b:52:72:bd:2c:ac:8b:e6:83:df:23:
e6:e1:03:4c:2e:8b:33:a6:52:2d:03:d5:56:07:f7:
7c:88:25:fc:53:42:4b:98:30:98:f0:81:30:4d:6b:
05:72:aa:6f:94:2f:a0:52:b1:2a:22:56:11:f1:43:
bb:66:6b:cb:4f:f3:76:f2:40:84:42:3b:d3:3e:68:
55:bd:6e:ce:73:05:6f:cf:cf:78:0c:e8:68:ab:51:
bd:24:80:f1:c2:3f:ed:6d:0e:fb:cf:d4:b0:ba:cd:
85:69:08:ad:20:08:71:3b:b1:d7:34:24:88:77:87:
cd:0d:f1:4f:e2:23:17:ab:65:8a:f1:38:79:8e:f3:
61:30:43:3c:36:43:9e:a8:65:27:b0:48:48:71:75:
27:40:17:30:ae:47:74:65:57:f5:a1:de:4f:48:0c:
83:31:fe:b9:1f:7d:03:4c:b5:bf:88:eb:a1:8f:1f:
be:de:06:58:aa:70:99:52:30:d3:0e:86:13:56:8a:
3c:a6:8f:39:4e:99:69:fd:d1:08:9f:c5:ab:79:6b:
39:cd:35:51:e1:10:7f:f4:76:1f:a3:5c:45:6f:a5:
fe:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:5E:8A:B4:AC:07:23:2A:20:94:AD:69:94:14:0D:41:00:D3:21:BD
X509v3 Authority Key Identifier:
keyid:CC:44:91:55:8C:D2:48:75:DB:52:42:73:41:05:02:FD:AE:3A:67:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zESRVYzSSHXbUkJzQQUC_a46Z4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/439efe-f130-4931-931c-c8d5c04e3d43/1/_16KtKwHIyoglK1plBQNQQDTIb0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/439efe-f130-4931-931c-c8d5c04e3d43/1/zESRVYzSSHXbUkJzQQUC_a46Z4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.7.44.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:04:bf:07:49:a0:f3:39:f5:83:8b:56:fa:a3:59:fe:bd:25:
41:f2:51:0e:e9:78:94:8b:8a:61:8c:9c:5e:38:b3:0a:42:09:
29:c5:de:bd:ab:eb:e5:9d:73:c1:32:b9:49:eb:87:8e:58:e8:
a2:8b:3a:84:aa:3a:6e:06:9c:88:62:f0:e2:ec:68:9d:15:1d:
72:d6:a1:58:51:cf:c6:e0:b0:d6:6f:cb:9d:db:a5:fc:63:9d:
ad:ff:fa:6d:81:c8:1f:5e:68:7a:0b:ad:24:24:e1:a3:19:25:
bf:71:d3:e9:80:0b:c9:b6:ab:df:69:b8:d4:13:86:f0:17:75:
eb:f4:f3:1e:7f:c2:49:cd:69:6f:03:80:15:42:c2:d5:20:be:
03:7f:d6:b1:e2:e4:34:7a:7c:b9:22:0b:1c:bd:ef:8e:c3:17:
51:7c:f3:24:84:5a:c1:a7:75:d5:b7:7f:9f:87:d3:1d:aa:c5:
ef:4e:dd:75:bf:20:c3:06:70:2a:86:e3:c8:25:0d:78:57:3d:
72:bd:fe:6d:53:4a:27:fd:88:c9:ef:b3:af:0c:8e:cc:34:d6:
01:9b:6c:0b:28:38:d8:11:38:31:9e:e6:36:ba:d2:33:1b:19:
0c:a0:9a:c6:bb:47:ff:72:41:4c:f1:fa:30:75:23:49:f4:d7:
13:02:4c:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 13:23:24 2024 by rpki-client on console-fra.rpki-client.org