Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/c514cd-7954-44ce-bd7f-713b41688706/1/I13eE-JHB6lsSLA8cbB4fhl3lEA.roa
File: I13eE-JHB6lsSLA8cbB4fhl3lEA.roa (raw, json)
Hash identifier: dCfu/6ijsxDgZ9u4aW4qM88Qfq1OZPrs9VYrUXdia0M=
Subject key identifier: 23:5D:DE:13:E2:47:07:A9:6C:48:B0:3C:71:B0:78:7E:19:77:94:40
Certificate issuer: /CN=57e898bf420924f976b5ae451108b9e6a01fc7dc
Certificate serial: 018CC4246FB08A97A68B445EF192F29CBBF0
Authority key identifier: 57:E8:98:BF:42:09:24:F9:76:B5:AE:45:11:08:B9:E6:A0:1F:C7:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V-iYv0IJJPl2ta5FEQi55qAfx9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/c514cd-7954-44ce-bd7f-713b41688706/1/I13eE-JHB6lsSLA8cbB4fhl3lEA.roa
Signing time: Mon 01 Jan 2024 08:29:31 +0000
ROA not before: Mon 01 Jan 2024 08:29:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207996
IP address blocks: 185.155.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/c514cd-7954-44ce-bd7f-713b41688706/1/V-iYv0IJJPl2ta5FEQi55qAfx9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/c514cd-7954-44ce-bd7f-713b41688706/1/V-iYv0IJJPl2ta5FEQi55qAfx9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/V-iYv0IJJPl2ta5FEQi55qAfx9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:6f:b0:8a:97:a6:8b:44:5e:f1:92:f2:9c:bb:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57e898bf420924f976b5ae451108b9e6a01fc7dc
Validity
Not Before: Jan 1 08:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=235dde13e24707a96c48b03c71b0787e19779440
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:51:fa:be:35:e9:cb:fe:be:f1:a7:e7:c9:d9:
3a:03:fd:79:e4:0e:94:1f:34:5d:94:42:7f:be:8e:
c7:5b:1f:db:4e:47:6b:8c:d9:eb:08:3b:f2:02:86:
0e:5e:ef:52:89:bb:bc:13:f0:d9:77:47:be:54:fa:
3c:e0:98:b1:95:5e:69:a2:d5:37:eb:12:3d:a1:d5:
ec:e5:6a:30:9e:72:cd:42:79:a0:2a:5e:07:99:19:
96:56:c5:27:ed:5d:b6:2c:aa:5e:a3:4e:19:53:ee:
d7:28:4b:7e:46:c9:3d:7c:bf:41:8f:d7:7f:10:72:
72:09:24:8d:82:49:8b:3e:11:90:2f:e3:cd:97:79:
ba:5b:8c:8c:db:3c:36:dd:56:b3:51:81:45:dd:2a:
d5:b7:c4:cf:01:41:df:92:58:0f:52:b1:ec:fc:8d:
d3:ca:b7:89:74:26:3a:81:8e:a9:23:6e:b9:50:a0:
09:0f:82:ed:43:9b:ac:38:83:9c:55:6a:f3:7a:9f:
aa:af:6e:a4:89:f8:e3:13:88:e1:32:cc:20:e1:b5:
ea:85:2d:88:fc:77:de:2e:9f:99:f1:ff:5c:d2:4b:
a0:91:9c:92:76:70:c7:15:8c:19:71:44:1f:b8:a5:
b6:9e:60:2c:62:9d:ec:c6:d7:f2:8b:74:39:68:ea:
2a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:5D:DE:13:E2:47:07:A9:6C:48:B0:3C:71:B0:78:7E:19:77:94:40
X509v3 Authority Key Identifier:
keyid:57:E8:98:BF:42:09:24:F9:76:B5:AE:45:11:08:B9:E6:A0:1F:C7:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V-iYv0IJJPl2ta5FEQi55qAfx9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c514cd-7954-44ce-bd7f-713b41688706/1/I13eE-JHB6lsSLA8cbB4fhl3lEA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c514cd-7954-44ce-bd7f-713b41688706/1/V-iYv0IJJPl2ta5FEQi55qAfx9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.155.29.0/24
Signature Algorithm: sha256WithRSAEncryption
94:84:92:a5:e1:ce:5c:44:b8:8a:ac:e6:da:3e:52:2b:eb:18:
e7:68:db:0c:38:c1:e7:67:17:17:9a:5f:b2:08:27:2f:e4:5f:
3b:d9:60:b3:16:6b:9e:ce:ba:19:76:5e:d0:ee:13:05:fc:1a:
7f:dc:15:2c:f5:11:25:00:2a:38:82:22:b9:77:2d:9b:6c:bf:
b9:66:ea:aa:3a:12:55:9d:66:ec:fe:a3:07:18:dd:fe:86:e3:
f6:72:9f:da:87:91:09:88:ce:63:7b:5f:b5:73:b0:6b:04:da:
7a:77:ed:65:ee:07:3d:a5:f8:06:c2:c0:47:74:a0:da:1f:1b:
46:1f:c4:f7:83:f2:f4:69:43:b6:ca:05:1c:ad:6f:fb:f9:41:
3b:f6:be:59:59:41:ef:1c:f3:a0:13:57:d3:f0:e0:83:9f:10:
28:b6:4e:2e:35:87:7e:cb:9e:76:1f:b0:0c:67:ec:8c:10:1a:
8f:d0:48:cb:40:6a:f3:f3:ba:d6:b5:9d:1e:76:20:c0:a9:36:
a4:c7:6c:5a:d7:8c:64:49:2b:5b:2b:18:34:f6:ca:54:13:90:
19:36:2e:1e:16:ab:61:0f:3b:ba:67:7d:f8:05:3a:6b:03:98:
1e:d1:13:9a:b6:f6:ce:5c:44:ea:0e:bf:5d:47:91:3a:7b:a4:
4f:86:ed:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 17:07:39 2024 by rpki-client on console-fra.rpki-client.org