Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1ehwT1je00JTF6INaWVnHp07tro.roa
File: 1ehwT1je00JTF6INaWVnHp07tro.roa (raw, json)
Hash identifier: E3yptuKKE5UwZWumpSVXtOkLIsWP5JUEnd36u1tO5/c=
Subject key identifier: D5:E8:70:4F:58:DE:D3:42:53:17:A2:0D:69:65:67:1E:9D:3B:B6:BA
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0192002EA34A91A155A567F8C8EC1D1D74D4
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1ehwT1je00JTF6INaWVnHp07tro.roa
Signing time: Tue 17 Sep 2024 13:31:49 +0000
ROA not before: Tue 17 Sep 2024 13:31:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 52055
IP address blocks: 85.217.149.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:00:2e:a3:4a:91:a1:55:a5:67:f8:c8:ec:1d:1d:74:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Sep 17 13:31:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d5e8704f58ded3425317a20d6965671e9d3bb6ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c3:4a:cd:e5:2c:6b:55:d9:2f:ac:66:6c:84:
a1:a2:1b:c2:92:d3:22:dd:ed:3a:f3:06:7c:2d:3a:
1d:0d:5d:ea:a6:63:04:47:ac:71:34:58:0e:69:ca:
e8:cf:dc:9f:c9:82:8e:33:4a:bb:a0:00:6e:4c:ac:
2d:a9:da:c9:26:62:ab:0d:91:c5:2e:a8:f5:c4:ea:
f3:bb:45:07:29:a3:44:d9:b7:26:73:0b:1c:62:d5:
9b:82:f5:1e:91:12:51:b6:60:f0:7d:00:38:db:38:
79:62:3d:ab:8b:e3:b9:48:fa:d7:a5:01:73:2a:dd:
b8:6d:f9:cb:7b:31:b4:a6:9b:35:98:f2:29:bf:c8:
76:1f:cb:ce:0b:0b:69:3d:05:0b:9e:50:6b:95:41:
62:19:f1:62:a4:df:ff:5b:58:3f:33:b0:95:f2:55:
69:f4:1c:ca:29:c9:ac:96:bc:09:e1:f0:ef:5d:12:
fc:79:a6:b7:30:7c:f3:e0:85:14:f0:30:36:70:b4:
9c:6e:59:f4:33:87:01:c0:d4:3a:8c:dc:c7:d4:4f:
a1:2e:c9:5e:59:4e:29:24:52:2a:e9:bc:8c:ee:71:
9e:31:45:3f:35:ff:77:04:f4:1c:59:e9:da:86:5b:
a6:3e:55:9d:c2:68:44:73:f7:8f:00:ec:75:b3:8d:
15:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:E8:70:4F:58:DE:D3:42:53:17:A2:0D:69:65:67:1E:9D:3B:B6:BA
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1ehwT1je00JTF6INaWVnHp07tro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.217.149.0/24
Signature Algorithm: sha256WithRSAEncryption
19:c4:03:81:58:de:f7:a1:0a:8e:ce:80:ae:bc:71:d5:fe:94:
6b:18:8d:2e:0c:bf:28:49:75:66:97:fb:13:f8:48:3a:cf:0b:
c4:17:24:1e:95:85:95:77:19:2d:c0:e5:6f:48:fc:6e:d5:41:
05:22:ff:13:87:56:2e:c1:2d:99:4a:58:0a:99:3a:cd:25:52:
f9:00:dc:75:6b:2a:c7:0d:b6:15:d4:a9:af:58:58:0f:f0:52:
68:7a:85:72:8f:ef:85:cb:da:6c:c7:66:14:51:55:51:b6:c4:
02:19:63:65:ab:a3:89:01:9f:52:4f:b8:66:26:17:f4:df:7c:
d9:43:62:9d:b5:93:31:f3:5b:11:6e:a8:82:bd:a1:e4:60:c5:
66:5c:30:b0:bb:eb:b5:f7:27:4c:ee:6a:50:77:6b:7d:06:6e:
75:a7:9c:72:d2:c1:f2:30:bf:37:cc:c5:a0:ef:fa:0e:de:fa:
22:a7:c7:bb:bd:09:82:71:24:ce:6b:bf:31:80:ad:18:a2:91:
ac:57:03:f9:d8:62:f3:25:f3:36:d4:8c:f8:db:c6:c0:dc:9b:
e1:c3:82:07:e9:87:21:cd:6b:08:29:a8:5d:00:63:63:38:67:
ad:22:a3:11:95:c0:2f:94:78:17:44:06:ab:1d:a7:02:0e:ed:
76:d4:6e:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:15:14 2024 by rpki-client on console-ams.rpki-client.org