Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/EF2IXjK_XVsfZ3OXlWrCnsBGxaY.roa
File: EF2IXjK_XVsfZ3OXlWrCnsBGxaY.roa (raw, json)
Hash identifier: Qpl+/1V4a6gNt3VwT95hYhw/IQ8/deqeeRbNGAGrWQk=
Subject key identifier: 10:5D:88:5E:32:BF:5D:5B:1F:67:73:97:95:6A:C2:9E:C0:46:C5:A6
Certificate issuer: /CN=e4ccd73508a9b59985d5597868e3a5d5ec745f5e
Certificate serial: 018CC5013D4D92469BA52059888671108CBA
Authority key identifier: E4:CC:D7:35:08:A9:B5:99:85:D5:59:78:68:E3:A5:D5:EC:74:5F:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5MzXNQiptZmF1Vl4aOOl1ex0X14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/EF2IXjK_XVsfZ3OXlWrCnsBGxaY.roa
Signing time: Mon 01 Jan 2024 12:30:41 +0000
ROA not before: Mon 01 Jan 2024 12:30:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42926
IP address blocks: 185.122.12.0/24 maxlen: 24
185.122.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/5MzXNQiptZmF1Vl4aOOl1ex0X14.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/5MzXNQiptZmF1Vl4aOOl1ex0X14.mft
rsync://rpki.ripe.net/repository/DEFAULT/5MzXNQiptZmF1Vl4aOOl1ex0X14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:3d:4d:92:46:9b:a5:20:59:88:86:71:10:8c:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4ccd73508a9b59985d5597868e3a5d5ec745f5e
Validity
Not Before: Jan 1 12:30:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=105d885e32bf5d5b1f677397956ac29ec046c5a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:8f:a7:59:b4:f9:db:68:e4:b7:38:68:f9:a1:
57:8a:8d:b4:0b:36:8c:12:d8:db:8a:90:9b:69:1c:
03:12:ec:33:70:95:4f:56:2e:7b:4a:dd:bd:ff:f4:
23:b5:ec:40:76:e6:a0:9c:f9:3f:a2:26:30:62:e2:
27:cd:3b:49:f0:37:b5:75:fd:44:a4:20:ba:d7:f2:
27:8a:c4:f1:f5:d8:83:47:fa:d1:38:b8:54:2f:bf:
01:72:66:30:ab:67:d9:c9:a5:8f:dc:60:6f:2d:db:
bc:a2:9c:3f:97:09:d2:8d:5b:ba:89:18:ce:08:29:
d5:a2:91:f1:c6:5f:f4:8a:7c:05:d6:64:f7:4c:ec:
bc:05:e8:36:96:25:5e:65:25:38:84:39:24:3f:e7:
17:ca:1d:88:af:e9:e9:d1:6a:76:7e:bc:5e:6b:ba:
56:f6:cb:a8:f3:6d:e5:77:78:37:81:9b:57:d4:51:
b7:29:bd:d4:1c:23:99:b5:30:01:02:66:e5:a9:6e:
e0:69:d2:24:91:2c:95:68:2d:38:d1:d0:f3:f7:27:
b6:2f:ba:96:c5:b0:60:75:9a:2d:1d:e2:d2:49:f5:
3a:49:4d:19:a4:eb:bd:81:4f:10:3e:43:66:cc:e1:
1e:66:aa:ea:a7:ab:29:1c:f5:8f:53:d8:1a:37:f0:
ce:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:5D:88:5E:32:BF:5D:5B:1F:67:73:97:95:6A:C2:9E:C0:46:C5:A6
X509v3 Authority Key Identifier:
keyid:E4:CC:D7:35:08:A9:B5:99:85:D5:59:78:68:E3:A5:D5:EC:74:5F:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5MzXNQiptZmF1Vl4aOOl1ex0X14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/EF2IXjK_XVsfZ3OXlWrCnsBGxaY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/5MzXNQiptZmF1Vl4aOOl1ex0X14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.122.12.0/23
Signature Algorithm: sha256WithRSAEncryption
7b:ba:d8:3e:91:88:f6:8c:f6:45:57:90:35:f8:3c:0a:05:7a:
36:cb:b5:f1:a7:7f:a6:ab:79:be:6a:a2:19:b5:11:bd:dc:26:
f6:e4:d6:9d:06:76:84:1e:79:74:b8:de:41:34:2b:fd:fc:74:
02:f1:e7:49:f1:cc:85:bc:89:ac:a9:c9:bb:dc:d7:f3:25:13:
3c:0d:3c:bb:9c:68:cd:0e:22:20:be:ab:16:1f:70:cb:07:bb:
b9:1f:f6:5c:c1:ff:90:22:6e:57:0c:de:b2:17:c2:0a:23:e0:
60:3a:4c:c8:88:f0:c9:7d:63:e4:5b:e4:2d:38:92:70:ba:bc:
cd:7b:11:fc:05:1c:7d:db:30:2f:49:ef:ca:de:88:27:41:2a:
6c:01:0b:24:8b:8f:40:e6:78:9c:12:69:80:65:57:57:ce:71:
3a:f4:d6:2c:81:91:dd:a8:77:b8:14:a0:d4:de:7d:a2:28:c3:
f3:b3:8d:e1:97:cc:40:5d:70:ab:4c:59:92:a0:82:de:66:c1:
e4:a4:c7:00:46:25:c3:e7:d5:3c:00:9b:d1:04:01:f6:29:8a:
9b:ac:17:c0:0e:4b:ec:e4:e0:27:c6:06:b7:8e:4a:85:57:f1:
ac:56:92:5f:b4:1e:5c:dc:ae:66:3a:01:3d:c7:36:9c:64:c5:
34:01:ad:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 21:00:12 2024 by rpki-client on console-ams.rpki-client.org