Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/SjhaXeqLcu_x2G7MSW-ZvEFjMM8.roa
File: SjhaXeqLcu_x2G7MSW-ZvEFjMM8.roa (raw, json)
Hash identifier: cCBkmLc00ViYLEJExy7b1UPZwNMx0w2RXhtC/gjxid0=
Subject key identifier: 4A:38:5A:5D:EA:8B:72:EF:F1:D8:6E:CC:49:6F:99:BC:41:63:30:CF
Certificate issuer: /CN=ee1cce901e5fb7c92f09a915cf6e656f693ba100
Certificate serial: 018CC9BC30B1B1301CB5890FCE06DA57622F
Authority key identifier: EE:1C:CE:90:1E:5F:B7:C9:2F:09:A9:15:CF:6E:65:6F:69:3B:A1:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hzOkB5ft8kvCakVz25lb2k7oQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/SjhaXeqLcu_x2G7MSW-ZvEFjMM8.roa
Signing time: Tue 02 Jan 2024 10:33:22 +0000
ROA not before: Tue 02 Jan 2024 10:33:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212879
IP address blocks: 185.155.136.0/24 maxlen: 24
185.155.139.0/24 maxlen: 24
185.155.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hzOkB5ft8kvCakVz25lb2k7oQA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 20:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:30:b1:b1:30:1c:b5:89:0f:ce:06:da:57:62:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1cce901e5fb7c92f09a915cf6e656f693ba100
Validity
Not Before: Jan 2 10:33:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4a385a5dea8b72eff1d86ecc496f99bc416330cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:fc:33:88:bc:20:9d:5d:4b:82:a3:f1:32:82:
15:f1:1a:6b:61:69:79:47:37:f5:73:c2:13:91:35:
de:04:25:36:eb:7a:93:f0:a5:56:48:6c:c0:34:7b:
7b:a6:9e:ec:9c:7d:81:de:c1:e4:5c:67:a6:50:48:
9d:fa:8a:66:66:eb:59:6b:4a:a7:c1:58:0b:bd:ae:
dd:04:72:09:0c:ed:ac:f6:8a:de:4d:ed:55:e3:4b:
52:c4:90:70:b7:0c:cf:fa:ec:f0:35:44:45:f6:d0:
14:4b:a3:86:91:a1:03:f3:73:24:65:2d:50:44:15:
6c:ac:9c:72:27:86:dd:17:ae:53:2b:20:bd:a1:b4:
b7:76:3b:06:0e:4c:9e:b8:95:75:34:a5:b0:65:f4:
2e:a3:46:81:6a:6d:16:5e:b4:06:51:5f:9e:82:79:
1f:f3:98:7c:5c:eb:8e:12:cc:27:ee:29:75:48:4f:
3e:bb:ba:65:a3:2b:33:c2:f9:8a:f5:9f:b3:56:a5:
8a:47:15:f3:80:fe:ec:e8:f3:eb:1d:a8:d5:8e:69:
62:93:93:57:9c:2b:ac:30:5a:6b:f1:89:29:e1:a2:
5b:b0:5c:9b:34:70:c4:9b:2e:e5:2b:3d:e7:de:e2:
ee:a0:8e:9c:de:96:87:64:c4:af:b9:06:c7:75:a6:
db:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:38:5A:5D:EA:8B:72:EF:F1:D8:6E:CC:49:6F:99:BC:41:63:30:CF
X509v3 Authority Key Identifier:
keyid:EE:1C:CE:90:1E:5F:B7:C9:2F:09:A9:15:CF:6E:65:6F:69:3B:A1:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hzOkB5ft8kvCakVz25lb2k7oQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/SjhaXeqLcu_x2G7MSW-ZvEFjMM8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.155.136.0/24
185.155.138.0/23
Signature Algorithm: sha256WithRSAEncryption
19:36:0a:f5:02:70:70:e6:96:bc:50:28:82:59:55:7c:4d:a8:
1e:49:1b:20:32:e3:0e:17:a5:31:23:9d:43:07:e6:3d:25:01:
4a:a2:07:8d:2e:cb:65:f6:36:12:20:00:d4:75:bf:9f:95:d6:
e0:00:24:b5:14:db:04:60:b0:82:6b:85:91:4d:88:80:a2:67:
e8:47:fa:a6:b5:b5:8c:28:fa:c9:2d:93:90:2d:95:14:07:a7:
26:f2:63:91:f1:ff:f6:5f:fc:45:16:1c:66:87:a9:46:a4:a2:
a5:3b:6f:f2:86:43:7c:82:b8:4c:62:33:27:60:89:7f:3e:7a:
10:27:4e:86:66:42:25:40:72:94:28:0b:46:c8:51:e2:f9:71:
5d:43:8f:72:ce:13:5e:2f:28:55:b0:c7:eb:5d:f2:38:1f:38:
8e:b8:ab:08:b0:e6:7b:bd:6d:e5:a8:fb:08:2c:e2:ce:bd:08:
e1:64:b0:3f:fe:8f:59:e0:60:f8:60:cd:97:88:5a:e2:8b:1b:
5e:86:af:67:ce:b9:8b:6c:24:91:bb:ab:63:a2:bc:0b:93:66:
7e:12:14:ca:78:3b:96:4d:4c:51:5a:b3:68:d5:5a:23:d7:eb:
8f:03:59:74:ef:8f:48:49:87:83:c9:de:b6:94:5f:02:0a:63:
01:51:e1:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 02:04:01 2024 by rpki-client on console-ams.rpki-client.org