Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/eKP131hUVAeM0I3R8CW0FAm_1oY.roa
File: eKP131hUVAeM0I3R8CW0FAm_1oY.roa (raw, json)
Hash identifier: JXOQFNb9wqMSAa25wQcnpksW/mskB7mfI0F467dNLcc=
Subject key identifier: 78:A3:F5:DF:58:54:54:07:8C:D0:8D:D1:F0:25:B4:14:09:BF:D6:86
Certificate issuer: /CN=ee1cce901e5fb7c92f09a915cf6e656f693ba100
Certificate serial: 0192B8776ECC172E907197A8E27B08ECE0A1
Authority key identifier: EE:1C:CE:90:1E:5F:B7:C9:2F:09:A9:15:CF:6E:65:6F:69:3B:A1:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hzOkB5ft8kvCakVz25lb2k7oQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/eKP131hUVAeM0I3R8CW0FAm_1oY.roa
Signing time: Wed 23 Oct 2024 08:21:27 +0000
ROA not before: Wed 23 Oct 2024 08:21:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212879
IP address blocks: 185.155.136.0/24 maxlen: 24
185.155.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hzOkB5ft8kvCakVz25lb2k7oQA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:b8:77:6e:cc:17:2e:90:71:97:a8:e2:7b:08:ec:e0:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1cce901e5fb7c92f09a915cf6e656f693ba100
Validity
Not Before: Oct 23 08:21:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=78a3f5df585454078cd08dd1f025b41409bfd686
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:3f:d6:cd:1a:c3:cb:f5:0c:18:5e:0b:01:52:
6f:70:87:b3:b1:f5:28:68:c0:24:fd:b6:36:c2:43:
a4:2c:ea:0d:1d:46:87:75:75:aa:11:8f:aa:0f:41:
00:b0:20:5d:ee:cb:1b:ff:5e:fb:91:91:75:d3:84:
92:5d:91:c7:45:ff:02:97:aa:11:ba:6d:a7:88:a5:
b7:c0:92:3b:8e:fb:bb:0c:1d:0f:9d:46:e9:ba:99:
71:de:8c:20:a9:e7:83:66:30:e3:7f:68:6e:ff:a0:
8d:96:05:cf:a3:e8:96:f3:11:21:c9:f5:3d:60:1b:
88:b0:92:85:3b:48:da:1c:41:97:90:cf:6a:60:68:
3e:8d:76:65:1a:b9:2d:9c:be:96:5d:60:a9:70:07:
d6:88:17:6f:9e:9e:4d:6b:4a:41:71:76:ae:e3:cb:
f0:3d:d7:2f:8d:2c:69:e9:c7:0d:cf:61:93:9c:63:
a9:67:0a:57:e8:6f:67:55:2f:5f:01:56:d0:58:43:
31:ed:a3:c1:07:aa:43:e6:8d:b5:68:a2:9c:40:38:
99:52:3c:fe:72:64:3c:92:66:b2:e4:e9:ad:2f:a3:
e9:31:2a:93:c1:c9:ff:74:e3:ee:05:95:ec:88:c6:
ad:36:d5:73:c3:04:97:08:f6:c7:7f:da:1d:9c:90:
e0:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:A3:F5:DF:58:54:54:07:8C:D0:8D:D1:F0:25:B4:14:09:BF:D6:86
X509v3 Authority Key Identifier:
keyid:EE:1C:CE:90:1E:5F:B7:C9:2F:09:A9:15:CF:6E:65:6F:69:3B:A1:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hzOkB5ft8kvCakVz25lb2k7oQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/eKP131hUVAeM0I3R8CW0FAm_1oY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.155.136.0/24
185.155.138.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:a8:64:3e:2a:8d:88:c1:77:0a:1e:e0:69:38:98:35:df:d9:
6f:4f:60:5a:2a:83:8e:24:7b:a1:15:9e:f5:d2:91:a3:c6:6d:
41:0f:cc:b0:49:b4:f4:fd:9e:87:7f:52:1c:56:20:fb:31:29:
dd:68:18:8c:4e:78:54:2c:05:45:ba:15:0d:f4:e9:e1:67:3a:
f4:dd:29:c3:b7:87:da:f3:5a:4f:45:5e:07:4c:69:4e:ca:99:
ef:b0:3e:a8:a6:dc:75:fe:70:6d:35:14:09:d2:7a:c8:67:da:
7a:f7:2a:fb:31:ea:3e:9d:9a:f9:48:1a:d2:ab:a6:68:b9:ac:
b1:e4:3d:e8:3e:06:8f:a9:08:ce:03:2f:1e:ee:85:91:52:4d:
d4:b9:5a:99:4e:3a:96:c8:fb:5b:b3:ed:6f:f3:7f:af:56:3f:
c8:4d:99:87:1b:c9:33:9f:d4:53:52:85:f2:9c:90:d5:10:5e:
bb:6f:16:76:65:90:1d:9a:f8:61:52:c5:25:df:2f:25:a2:c1:
46:b6:f2:ae:bc:3a:4d:14:47:19:70:54:62:97:58:ea:e3:5e:
8b:20:28:56:99:9d:86:7c:52:0f:11:8a:be:a6:33:c7:c3:f2:
bf:84:a6:ba:fe:b0:e5:a8:f3:f1:ba:a7:5c:f7:f4:81:bf:cd:
df:5a:23:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:05:56 2024 by rpki-client on console-fra.rpki-client.org