Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/4eaca0-8db9-4d0a-ba22-8a9935da0588/1/sEea6tL54jRb6WCfdQvpWD3AxyM.roa
File: sEea6tL54jRb6WCfdQvpWD3AxyM.roa (raw, json)
Hash identifier: fBSrdmJRUNzAbOOqgSup+uiiTAxp++0QEUhgI8WtCMg=
Subject key identifier: B0:47:9A:EA:D2:F9:E2:34:5B:E9:60:9F:75:0B:E9:58:3D:C0:C7:23
Certificate issuer: /CN=f1aaa16ddd8d8a12dfd0e53211703ad952e3b214
Certificate serial: 018CC9BC27F1241363567A8AC6D23F112F11
Authority key identifier: F1:AA:A1:6D:DD:8D:8A:12:DF:D0:E5:32:11:70:3A:D9:52:E3:B2:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8aqhbd2NihLf0OUyEXA62VLjshQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/4eaca0-8db9-4d0a-ba22-8a9935da0588/1/sEea6tL54jRb6WCfdQvpWD3AxyM.roa
Signing time: Tue 02 Jan 2024 10:33:20 +0000
ROA not before: Tue 02 Jan 2024 10:33:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15404
IP address blocks: 185.201.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/4eaca0-8db9-4d0a-ba22-8a9935da0588/1/8aqhbd2NihLf0OUyEXA62VLjshQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/4eaca0-8db9-4d0a-ba22-8a9935da0588/1/8aqhbd2NihLf0OUyEXA62VLjshQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8aqhbd2NihLf0OUyEXA62VLjshQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 13:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:27:f1:24:13:63:56:7a:8a:c6:d2:3f:11:2f:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1aaa16ddd8d8a12dfd0e53211703ad952e3b214
Validity
Not Before: Jan 2 10:33:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b0479aead2f9e2345be9609f750be9583dc0c723
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:38:7a:f3:70:c2:5f:04:97:e5:4a:6d:7d:39:
a2:a4:5c:d3:43:67:b1:ce:2d:0e:91:73:0a:dc:e4:
20:8b:21:d9:c2:be:24:19:a2:12:41:86:94:14:75:
bc:39:d0:56:9b:c4:ab:4a:77:3d:3f:9b:01:a7:68:
86:36:9c:a6:9e:0d:82:c1:83:4c:40:3d:64:7a:f1:
df:5e:2c:b3:11:ce:e4:a5:39:cb:e2:f8:9d:52:7c:
47:1b:39:cd:a0:a5:72:cc:d9:8e:e3:70:e1:27:c9:
10:26:24:03:71:4c:8d:1f:ae:98:fd:9e:b8:52:e8:
03:dc:8a:49:45:91:8b:b6:e8:a8:d0:e2:72:00:c5:
e9:59:08:1e:74:9b:b9:9a:b7:2a:e0:d4:6f:5a:f2:
91:3d:3f:bc:dc:62:0a:68:41:eb:d2:9b:17:1e:e4:
ae:f4:a4:ba:ba:19:16:7c:ff:34:ab:98:2e:b3:94:
05:25:de:29:ec:b7:89:df:52:a0:b7:a3:c8:e4:92:
93:0b:4a:e5:61:ac:c5:55:52:32:58:50:ef:82:d5:
36:6b:e4:94:65:fa:56:62:60:09:38:8c:b0:0e:ef:
33:f9:b9:4b:64:d3:af:26:2a:87:1b:ab:b0:00:a1:
f1:da:b5:24:70:57:2e:32:ec:fa:64:34:f7:18:10:
71:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:47:9A:EA:D2:F9:E2:34:5B:E9:60:9F:75:0B:E9:58:3D:C0:C7:23
X509v3 Authority Key Identifier:
keyid:F1:AA:A1:6D:DD:8D:8A:12:DF:D0:E5:32:11:70:3A:D9:52:E3:B2:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8aqhbd2NihLf0OUyEXA62VLjshQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/4eaca0-8db9-4d0a-ba22-8a9935da0588/1/sEea6tL54jRb6WCfdQvpWD3AxyM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/4eaca0-8db9-4d0a-ba22-8a9935da0588/1/8aqhbd2NihLf0OUyEXA62VLjshQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.201.220.0/24
Signature Algorithm: sha256WithRSAEncryption
45:83:eb:f5:45:86:f1:6c:5e:2b:41:05:2c:63:e7:e8:cc:1c:
c4:2c:ac:85:d1:21:bd:45:8a:99:93:66:14:86:a7:2e:ce:ce:
d0:5b:13:7f:88:87:71:db:4e:3e:b4:89:82:cb:19:31:f8:5a:
25:52:64:c7:44:9b:f5:48:04:eb:30:e8:73:0e:cd:35:fb:48:
25:d5:46:24:b1:3d:09:70:85:8b:b2:1f:b1:65:80:90:bb:c9:
3e:c5:d8:91:fc:b2:b0:8b:4e:f4:52:c5:87:26:ff:aa:16:fb:
a8:b4:dd:63:48:fc:ce:44:24:a1:fe:76:66:1c:44:25:1a:47:
7f:df:02:df:4d:f2:b9:8f:40:db:62:7a:c1:f3:54:b3:a9:02:
05:93:e6:28:bc:01:95:6c:c7:30:74:68:3f:54:9a:ae:0f:54:
a9:fc:f5:2b:41:2d:64:b8:84:2c:09:50:a3:56:ec:fe:52:02:
1f:9e:fa:73:81:19:74:ab:cf:58:fe:9f:be:f8:d4:4c:e5:e4:
5c:fe:dd:8d:4e:0c:ae:86:28:83:43:4b:ba:43:e5:e8:01:a7:
62:9a:f7:37:a3:34:b1:38:c8:0f:65:07:c1:c1:b9:95:e8:df:
8b:be:8e:6d:da:c8:31:ff:b4:92:7b:9f:16:5c:cd:4c:2c:76:
ca:81:fd:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 22:22:42 2024 by rpki-client on console-fra.rpki-client.org