Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/ECADpdgOH_F5wzqs6pVIRdGH30c.roa
File: ECADpdgOH_F5wzqs6pVIRdGH30c.roa (raw, json)
Hash identifier: PnbpVK/oQQ57q9A+X0rXgxD3MT/u9+oKMD4DWP0p/5M=
Subject key identifier: 10:20:03:A5:D8:0E:1F:F1:79:C3:3A:AC:EA:95:48:45:D1:87:DF:47
Certificate issuer: /CN=9f0743496c7ff3effb870601139cad9d2f271e10
Certificate serial: 018CC500E2C2254A184AAB248F9B00CD4D35
Authority key identifier: 9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/ECADpdgOH_F5wzqs6pVIRdGH30c.roa
Signing time: Mon 01 Jan 2024 12:30:18 +0000
ROA not before: Mon 01 Jan 2024 12:30:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206092
IP address blocks: 185.92.26.0/24 maxlen: 24
185.92.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:e2:c2:25:4a:18:4a:ab:24:8f:9b:00:cd:4d:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f0743496c7ff3effb870601139cad9d2f271e10
Validity
Not Before: Jan 1 12:30:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=102003a5d80e1ff179c33aacea954845d187df47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:da:fe:05:d6:f6:1e:80:0c:d4:e1:2e:47:28:
56:91:bc:bb:36:e9:b0:de:5e:f5:76:0e:95:e8:41:
a5:ea:dd:32:f3:c8:db:bb:11:ea:7d:cf:90:b3:9a:
bd:12:22:f9:15:a0:f7:34:a8:36:39:89:3a:12:9b:
19:61:ab:f8:8f:b3:05:94:9e:7e:f8:47:e7:27:2c:
09:82:7d:f0:ff:1c:9e:ee:d6:cf:b0:6a:7a:b2:25:
8d:43:30:f1:62:d0:ec:5f:86:3f:77:55:3f:6b:06:
a0:67:30:29:de:54:7b:3e:08:be:51:7d:e2:5d:53:
fb:13:0b:e4:40:f4:39:74:c7:b9:f0:04:25:19:41:
e3:6b:93:45:36:92:a7:0d:af:55:ee:7d:e2:01:38:
e1:7a:83:43:01:32:45:3b:91:ba:d3:7e:e5:32:b6:
e9:e1:bc:2e:96:1d:7b:ed:50:ff:c6:f4:df:53:8e:
d9:1d:c0:d7:3d:4a:f5:3e:67:dc:ea:f5:75:bc:c8:
45:07:3f:b1:1c:81:2d:07:7a:f0:64:1f:40:d3:ea:
3b:ca:35:6a:f8:00:12:1e:33:42:5c:fd:93:4a:45:
4e:36:de:62:25:ec:f8:73:fa:b8:20:5c:ff:f1:50:
61:1c:3e:2b:e3:ec:bc:33:f3:81:68:f4:17:0b:a9:
52:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:20:03:A5:D8:0E:1F:F1:79:C3:3A:AC:EA:95:48:45:D1:87:DF:47
X509v3 Authority Key Identifier:
keyid:9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/ECADpdgOH_F5wzqs6pVIRdGH30c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.92.25.0-185.92.26.255
Signature Algorithm: sha256WithRSAEncryption
8d:fe:78:75:e2:3d:c5:ca:f3:06:4f:1a:24:0e:a3:47:85:db:
d5:82:7d:3f:cd:b6:fa:fb:8e:24:76:ec:bb:e2:f0:08:47:9d:
53:13:68:91:a5:a8:a3:20:b9:10:a3:79:ad:be:2e:68:eb:9d:
61:a1:b8:4a:c3:b0:8c:31:d9:b8:ee:1b:df:bf:88:18:19:80:
a4:b1:5c:a7:46:98:d3:48:e1:32:0b:55:67:5b:5d:62:44:71:
b2:66:5a:a3:ce:66:2c:53:b7:56:2c:ab:0f:a2:5d:59:cc:cc:
46:93:a3:e9:88:1c:04:35:34:00:e6:47:e8:11:8a:7a:29:07:
30:06:6c:d1:f9:27:a8:58:08:c7:97:a9:75:66:f3:97:2a:dc:
52:41:46:62:68:ec:0f:5f:6d:48:2f:45:f6:72:71:28:25:d4:
58:5d:23:ce:e4:9d:9e:7c:b0:85:a7:cc:09:e6:56:e1:54:08:
33:8f:a9:43:67:1b:02:a5:b0:57:e4:de:c8:91:7c:01:b7:08:
f4:1a:b2:c7:3a:c9:0c:56:06:d7:80:08:c2:21:eb:a9:b6:bc:
bd:8b:39:4b:e0:db:22:99:3e:e5:d2:2c:d8:ca:53:e8:c7:55:
7f:26:42:a0:6f:fb:d2:ec:3b:9e:83:55:29:d0:e8:3a:58:71:
3b:37:93:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 15:07:11 2024 by rpki-client on console-fra.rpki-client.org