Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/Efy52md_2hx4ZvN30xF3SSi1yyw.roa
File: Efy52md_2hx4ZvN30xF3SSi1yyw.roa (raw, json)
Hash identifier: Qdn32WZhltv1usZMpoTJHff+xGOZRk1s22DjB5vhwGs=
Subject key identifier: 11:FC:B9:DA:67:7F:DA:1C:78:66:F3:77:D3:11:77:49:28:B5:CB:2C
Certificate issuer: /CN=827af17f0499627e4b3c8cc5c333ec4b8e7635e0
Certificate serial: 018CC795062E0348CF64B1A3B12AB0D28374
Authority key identifier: 82:7A:F1:7F:04:99:62:7E:4B:3C:8C:C5:C3:33:EC:4B:8E:76:35:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnrxfwSZYn5LPIzFwzPsS452NeA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/Efy52md_2hx4ZvN30xF3SSi1yyw.roa
Signing time: Tue 02 Jan 2024 00:31:21 +0000
ROA not before: Tue 02 Jan 2024 00:31:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 185.195.0.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/gnrxfwSZYn5LPIzFwzPsS452NeA.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/gnrxfwSZYn5LPIzFwzPsS452NeA.mft
rsync://rpki.ripe.net/repository/DEFAULT/gnrxfwSZYn5LPIzFwzPsS452NeA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:06:2e:03:48:cf:64:b1:a3:b1:2a:b0:d2:83:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=827af17f0499627e4b3c8cc5c333ec4b8e7635e0
Validity
Not Before: Jan 2 00:31:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=11fcb9da677fda1c7866f377d311774928b5cb2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:01:41:24:de:45:27:bb:01:c2:4e:52:22:4c:
1e:01:3b:e0:5c:72:19:e5:00:a1:15:ef:59:1e:0e:
29:8b:05:f1:f0:00:83:09:19:d0:aa:ab:17:7d:7d:
f7:d4:68:eb:ef:8c:3c:ab:8c:e7:85:6f:f7:ff:c6:
03:11:6b:fa:7b:93:79:11:d6:d6:35:db:13:e7:fc:
07:4b:09:46:fe:85:e6:8a:e3:e3:a8:b9:8d:74:4d:
d4:79:46:78:af:83:4b:9c:3f:67:db:82:58:0c:d7:
5e:ad:1a:00:19:da:1b:74:5d:72:71:ce:1e:b3:45:
2f:6e:ec:49:45:f4:46:f5:1e:fd:fa:21:69:be:51:
bd:62:f9:13:34:1d:b3:e1:dc:ec:6d:db:16:4a:e6:
2e:b1:66:4e:5e:76:30:09:4a:84:61:9b:d5:1b:7d:
61:43:0d:c9:14:62:a0:00:60:e8:64:8b:ef:6e:e3:
e1:d6:49:4a:fc:02:b8:ea:1f:a2:bd:6d:ec:52:11:
5e:0c:0f:f5:a1:9c:d3:aa:4b:41:68:60:36:60:08:
bd:de:b4:e5:16:2e:81:9d:d2:f3:b2:5e:be:1d:fc:
8b:1c:2a:f9:4d:dc:f0:75:b8:97:35:d8:3d:14:90:
64:40:29:aa:a5:8b:2b:e6:e2:1e:ee:03:b3:4a:c4:
ab:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:FC:B9:DA:67:7F:DA:1C:78:66:F3:77:D3:11:77:49:28:B5:CB:2C
X509v3 Authority Key Identifier:
keyid:82:7A:F1:7F:04:99:62:7E:4B:3C:8C:C5:C3:33:EC:4B:8E:76:35:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnrxfwSZYn5LPIzFwzPsS452NeA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/Efy52md_2hx4ZvN30xF3SSi1yyw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/gnrxfwSZYn5LPIzFwzPsS452NeA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.195.0.0/22
Signature Algorithm: sha256WithRSAEncryption
c8:d2:d6:be:7f:00:b4:6c:ac:72:e5:2b:f8:d9:f3:17:1f:fe:
52:8d:35:8c:d9:ce:cd:40:a3:5b:df:ac:8b:46:fb:a4:0b:df:
74:c4:d4:3a:16:dd:0f:ce:75:82:94:82:37:d7:d7:64:4a:83:
6d:c9:d8:b2:cb:31:56:da:0f:62:ba:31:4a:f4:21:ba:0a:99:
9b:ff:b5:d4:b6:b6:59:69:34:2d:a8:71:e8:b9:b1:11:8e:8d:
35:c3:19:62:92:fb:60:02:1f:67:63:a3:88:4a:23:86:09:4b:
81:c6:3e:f2:a5:d1:64:dc:50:cc:37:69:75:6f:28:e9:2b:ad:
38:05:91:08:bf:38:2e:8e:dd:cc:ec:c9:56:6a:2a:f3:fe:b3:
9c:7b:80:6c:50:6f:b7:a8:0a:dc:84:5f:cd:34:a4:c4:61:1b:
52:ba:f4:e8:72:d8:cd:79:18:b7:ee:f9:f8:40:d4:37:03:b9:
21:ee:62:4b:92:29:e6:80:36:51:8b:3c:49:30:79:51:07:e4:
f1:8f:c0:9d:ec:c0:c6:43:19:2a:ab:10:b6:46:74:25:87:f2:
b0:a7:85:75:d2:bb:4a:bf:44:25:bd:26:31:29:16:a3:cf:5b:
fb:a6:d1:3b:a9:e4:71:a3:57:23:d9:5b:c7:92:55:5f:66:62:
cf:13:cd:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 17:36:11 2024 by rpki-client on console-ams.rpki-client.org