Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/cEDv8IlP4XwbKw-0sGwyab64-R8.roa
File: cEDv8IlP4XwbKw-0sGwyab64-R8.roa (raw, json)
Hash identifier: qkXQYkRGpJsGBP6RsvBqVltLaVJammPJNrZGpe+VfNY=
Subject key identifier: 70:40:EF:F0:89:4F:E1:7C:1B:2B:0F:B4:B0:6C:32:69:BE:B8:F9:1F
Certificate issuer: /CN=0dd441c3ffae829842249e944b03851081f4d9e0
Certificate serial: 018CC5DCAA634931260E5320BA421E1057CD
Authority key identifier: 0D:D4:41:C3:FF:AE:82:98:42:24:9E:94:4B:03:85:10:81:F4:D9:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdRBw_-ugphCJJ6USwOFEIH02eA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/cEDv8IlP4XwbKw-0sGwyab64-R8.roa
Signing time: Mon 01 Jan 2024 16:30:22 +0000
ROA not before: Mon 01 Jan 2024 16:30:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207456
IP address blocks: 185.82.74.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DdRBw_-ugphCJJ6USwOFEIH02eA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:aa:63:49:31:26:0e:53:20:ba:42:1e:10:57:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dd441c3ffae829842249e944b03851081f4d9e0
Validity
Not Before: Jan 1 16:30:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7040eff0894fe17c1b2b0fb4b06c3269beb8f91f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ba:78:e5:02:a7:7a:fa:00:03:d2:d6:9e:90:
0a:a4:75:92:14:40:9e:67:0d:26:fe:ed:5f:7b:05:
d6:87:98:e7:3b:a8:38:7e:b4:90:80:a6:f1:11:c8:
01:42:e5:4b:75:d5:bd:7d:d9:56:f3:66:47:62:4b:
2a:25:da:6d:70:78:13:06:57:78:28:ed:32:bb:01:
8e:32:9e:00:c8:94:fa:31:97:ea:e1:49:e2:e8:02:
68:0e:4a:dc:23:c2:66:d7:83:7b:0a:bf:b8:a6:d0:
4b:a1:f7:3c:ea:51:42:6e:b9:66:16:9f:34:4a:dc:
c3:4b:34:87:50:9e:f0:c5:fd:af:dc:aa:9f:dc:c9:
36:98:9f:f2:ce:b2:f3:11:ca:18:de:23:d8:47:ce:
2f:92:df:03:7e:7c:ed:23:56:59:eb:a8:02:2c:a6:
76:0e:bb:69:90:e9:a1:33:9b:39:33:b5:83:ab:2f:
8e:88:6d:c8:aa:14:19:b0:c0:19:f1:63:46:e1:8c:
1b:be:87:01:9e:30:e0:04:fe:5d:32:82:d6:6b:91:
ff:58:5d:af:05:11:82:63:f0:e0:b3:e1:79:49:98:
d6:55:7e:db:ff:aa:2b:49:35:b7:dc:62:72:8e:96:
9e:d4:16:82:1e:f0:67:65:1f:54:2c:60:d2:c8:cd:
9e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:40:EF:F0:89:4F:E1:7C:1B:2B:0F:B4:B0:6C:32:69:BE:B8:F9:1F
X509v3 Authority Key Identifier:
keyid:0D:D4:41:C3:FF:AE:82:98:42:24:9E:94:4B:03:85:10:81:F4:D9:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdRBw_-ugphCJJ6USwOFEIH02eA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/cEDv8IlP4XwbKw-0sGwyab64-R8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.82.74.0/23
Signature Algorithm: sha256WithRSAEncryption
40:8b:88:48:c7:b7:1e:63:83:a1:35:d2:36:54:23:85:cb:d1:
ad:e6:e5:cd:86:d9:3c:e2:40:4b:ac:12:ee:ee:03:f4:35:34:
68:7c:18:65:18:dd:0e:1d:e6:79:24:96:13:89:c0:d4:5e:79:
33:1a:67:31:60:54:0e:2a:77:8b:75:14:ae:c6:0f:eb:60:a0:
5d:7f:58:dd:cc:70:09:64:d3:c5:10:e3:6b:b4:df:6f:a7:ee:
58:38:fe:b5:f0:42:60:b4:fe:7e:33:a5:54:dd:45:e2:bc:0c:
8c:3d:cf:aa:b4:e8:8b:60:93:dd:3f:b6:a3:11:3b:78:f7:92:
33:79:42:c8:57:8a:89:6f:54:4b:60:94:1d:70:ec:27:a2:8b:
6a:5d:4c:5c:84:f4:9e:a2:be:f6:f7:53:72:f7:ac:1c:bf:8d:
2e:0a:ad:dc:97:e2:e9:dc:2e:9d:3d:c4:04:59:d1:89:c9:51:
07:e1:e5:cd:45:ca:36:5f:3e:4c:2e:25:52:2e:56:db:95:f3:
27:28:21:00:ed:40:56:a9:fe:3d:61:23:be:ef:b9:3e:c6:50:
e0:5f:2c:7b:1d:0b:db:0e:d9:a2:77:53:b1:a6:52:8d:11:91:
12:29:d3:35:f6:94:3d:29:15:be:bf:ab:04:89:18:ad:36:4c:
88:e3:92:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 13:56:20 2024 by rpki-client on console-fra.rpki-client.org