Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/f6be03-4f44-4354-b9eb-ba4d06df0be5/1/HSu42wYVHeQlFkn0sBRbDFJNtNw.roa
File: HSu42wYVHeQlFkn0sBRbDFJNtNw.roa (raw, json)
Hash identifier: uXEuIu7iJLHGA9YkMe9FXvzqaLOp23KpaKzttxmQPys=
Subject key identifier: 1D:2B:B8:DB:06:15:1D:E4:25:16:49:F4:B0:14:5B:0C:52:4D:B4:DC
Certificate issuer: /CN=e2e4ac6224fe1944420dc3a98dd63abae4af7e00
Certificate serial: 018CC34925AC0FD61BDFE5F4AD8725197D75
Authority key identifier: E2:E4:AC:62:24:FE:19:44:42:0D:C3:A9:8D:D6:3A:BA:E4:AF:7E:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4uSsYiT-GURCDcOpjdY6uuSvfgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/f6be03-4f44-4354-b9eb-ba4d06df0be5/1/HSu42wYVHeQlFkn0sBRbDFJNtNw.roa
Signing time: Mon 01 Jan 2024 04:29:59 +0000
ROA not before: Mon 01 Jan 2024 04:29:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9121
IP address blocks: 185.57.245.0/24 maxlen: 24
185.57.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/f6be03-4f44-4354-b9eb-ba4d06df0be5/1/4uSsYiT-GURCDcOpjdY6uuSvfgA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/f6be03-4f44-4354-b9eb-ba4d06df0be5/1/4uSsYiT-GURCDcOpjdY6uuSvfgA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4uSsYiT-GURCDcOpjdY6uuSvfgA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 19:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:25:ac:0f:d6:1b:df:e5:f4:ad:87:25:19:7d:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2e4ac6224fe1944420dc3a98dd63abae4af7e00
Validity
Not Before: Jan 1 04:29:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1d2bb8db06151de4251649f4b0145b0c524db4dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:27:0d:bd:ca:05:d5:8e:ab:fd:61:d4:0c:fd:
ae:44:68:0c:cc:b4:e8:59:8a:a2:2b:73:ba:61:9c:
e5:73:d3:28:2d:20:19:64:d1:d5:5d:e1:32:57:35:
27:77:1e:90:b8:d1:c6:ef:47:10:e7:9e:fb:23:2b:
c3:09:33:bd:a4:65:21:b1:64:6e:ae:01:8d:b8:69:
31:08:a9:b8:b7:df:ce:73:69:61:8e:1a:1f:8b:e3:
e3:a2:a7:f9:88:5d:8c:39:0b:44:3c:83:81:da:71:
af:e5:fb:c7:f8:94:3d:35:fb:d6:38:38:9a:2f:71:
a6:bc:1d:52:90:28:47:aa:31:2c:69:0b:48:e5:78:
32:e5:50:7a:72:ae:b9:26:11:a1:13:71:2c:a7:97:
5b:eb:33:e9:52:09:57:33:7a:2c:ca:58:66:96:52:
5f:1c:79:25:eb:92:01:53:55:06:3f:16:bd:41:14:
97:ce:59:30:13:93:bc:e2:d4:8f:7c:e9:db:9f:9f:
0e:c1:24:4f:95:f0:3f:0f:97:bf:c3:d4:78:2c:33:
14:07:ab:51:c2:30:43:12:b5:dd:19:a0:ef:15:8e:
5d:1f:69:f2:2c:62:2d:ff:88:ec:00:b6:16:00:c4:
d1:37:6b:d4:7c:6a:7e:d0:eb:70:28:54:ba:75:c4:
25:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:2B:B8:DB:06:15:1D:E4:25:16:49:F4:B0:14:5B:0C:52:4D:B4:DC
X509v3 Authority Key Identifier:
keyid:E2:E4:AC:62:24:FE:19:44:42:0D:C3:A9:8D:D6:3A:BA:E4:AF:7E:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4uSsYiT-GURCDcOpjdY6uuSvfgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/f6be03-4f44-4354-b9eb-ba4d06df0be5/1/HSu42wYVHeQlFkn0sBRbDFJNtNw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/f6be03-4f44-4354-b9eb-ba4d06df0be5/1/4uSsYiT-GURCDcOpjdY6uuSvfgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.57.244.0/23
Signature Algorithm: sha256WithRSAEncryption
52:dc:02:a8:91:87:a8:c1:5f:ae:85:86:75:bb:f3:0e:7b:6f:
89:e9:27:74:d0:3a:75:77:3a:42:a5:e5:49:44:39:cc:e0:2f:
ef:c6:4c:6d:07:42:63:ba:e4:87:27:7e:bb:ad:32:62:b5:4b:
0e:b0:c2:9b:a1:5e:31:bb:e2:36:0e:f5:92:6c:08:de:39:52:
d5:21:ff:fb:38:34:6b:14:44:c4:31:c5:01:be:80:e5:59:53:
37:8e:91:e6:16:d9:cc:67:6e:fe:27:00:26:0b:33:7f:a4:f6:
3e:69:9f:d1:1b:60:7a:6e:0b:60:08:4a:9c:b1:7d:f7:de:63:
c5:7c:d9:b3:2f:20:e3:e9:16:b1:83:94:e5:bd:1d:88:36:1a:
b5:37:60:8b:a2:e6:a6:25:e1:ef:63:95:de:44:46:4c:72:1a:
42:8c:fb:b5:77:67:0b:fa:87:d6:ac:55:5f:b8:08:cf:a4:39:
80:e1:59:9f:c9:d2:ad:d7:95:eb:16:f9:70:f9:ea:8d:21:c2:
13:4b:22:d8:f6:3c:d0:d1:c2:b6:06:bd:49:e8:39:6b:8b:66:
e7:0d:d5:4a:6b:44:77:1e:43:ad:c4:36:9e:9c:21:6f:7d:c3:
23:cf:65:67:2f:db:2a:a9:44:c9:80:5d:a2:c4:9c:3a:62:aa:
1c:86:06:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:57:33 2024 by rpki-client on console-ams.rpki-client.org