Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/4459b4-1838-4231-bd2c-40c0a652450a/1/EkOow4BEz2zoiLLlALbfH_h3iLQ.roa
File: EkOow4BEz2zoiLLlALbfH_h3iLQ.roa (raw, json)
Hash identifier: Duq/WjCi3udeT3MmKNEsoo8qzekJDCpoRwzlXQ3yXNI=
Subject key identifier: 12:43:A8:C3:80:44:CF:6C:E8:88:B2:E5:00:B6:DF:1F:F8:77:88:B4
Certificate issuer: /CN=734fa61b08651038faf81ebf125ec845b1961883
Certificate serial: 0192BDA6C8090EBF0D5B42456A9DC8DFB05C
Authority key identifier: 73:4F:A6:1B:08:65:10:38:FA:F8:1E:BF:12:5E:C8:45:B1:96:18:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c0-mGwhlEDj6-B6_El7IRbGWGIM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/4459b4-1838-4231-bd2c-40c0a652450a/1/EkOow4BEz2zoiLLlALbfH_h3iLQ.roa
Signing time: Thu 24 Oct 2024 08:31:16 +0000
ROA not before: Thu 24 Oct 2024 08:31:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8685
IP address blocks: 185.135.40.0/24 maxlen: 24
185.135.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/4459b4-1838-4231-bd2c-40c0a652450a/1/c0-mGwhlEDj6-B6_El7IRbGWGIM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/4459b4-1838-4231-bd2c-40c0a652450a/1/c0-mGwhlEDj6-B6_El7IRbGWGIM.mft
rsync://rpki.ripe.net/repository/DEFAULT/c0-mGwhlEDj6-B6_El7IRbGWGIM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 17:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:bd:a6:c8:09:0e:bf:0d:5b:42:45:6a:9d:c8:df:b0:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=734fa61b08651038faf81ebf125ec845b1961883
Validity
Not Before: Oct 24 08:31:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1243a8c38044cf6ce888b2e500b6df1ff87788b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ed:be:e5:2d:5d:39:e8:7a:d7:1a:13:db:84:
9d:cf:0e:22:ba:4c:69:17:f5:6a:f9:7f:ac:08:64:
8c:7f:a1:33:e3:34:70:1a:53:00:02:1f:c6:34:b1:
a4:33:8e:2d:6a:6c:cb:ad:66:4f:3c:23:b3:e0:40:
12:46:df:b5:ee:01:7c:7a:62:cf:0c:46:da:fb:c1:
b2:0b:a4:cd:79:3e:9d:28:08:5a:dc:3a:04:a0:11:
9e:6a:26:5a:74:30:21:ba:9e:49:28:a2:9e:4b:9a:
64:7c:f3:29:c8:9a:e8:34:50:a6:67:1f:30:86:fe:
5b:83:fb:9e:25:4f:7c:d1:66:9b:94:24:d1:4e:01:
21:26:5b:c6:63:c0:95:0e:f3:bf:d4:e6:64:c9:70:
2e:c8:d1:86:3a:3c:20:b5:49:2d:f4:4f:8f:8b:14:
58:55:83:9b:1e:2c:55:43:36:95:49:44:78:d3:f0:
47:fa:4f:8c:82:1b:79:ea:a0:93:05:1c:59:2b:68:
2a:1f:11:12:5f:06:7b:3c:c7:b0:85:40:ec:d9:8a:
00:53:61:ac:fc:13:13:7d:f9:44:a9:e2:27:6a:42:
fd:16:1e:35:c9:7b:a9:c7:52:91:36:42:18:46:58:
b9:5f:f3:2a:91:83:72:2b:32:77:44:6c:70:92:a6:
40:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:43:A8:C3:80:44:CF:6C:E8:88:B2:E5:00:B6:DF:1F:F8:77:88:B4
X509v3 Authority Key Identifier:
keyid:73:4F:A6:1B:08:65:10:38:FA:F8:1E:BF:12:5E:C8:45:B1:96:18:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0-mGwhlEDj6-B6_El7IRbGWGIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4459b4-1838-4231-bd2c-40c0a652450a/1/EkOow4BEz2zoiLLlALbfH_h3iLQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4459b4-1838-4231-bd2c-40c0a652450a/1/c0-mGwhlEDj6-B6_El7IRbGWGIM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.135.40.0/24
185.135.42.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:ca:38:a6:2c:5c:f6:6b:f6:1b:c2:ad:1a:e4:d9:89:a0:51:
3b:8f:b7:cd:e8:9f:af:17:f1:5a:2a:ce:32:e5:81:22:11:2b:
29:da:e5:c9:c9:5c:1e:0f:f2:2b:ea:9a:23:b6:ed:ca:db:3a:
bc:d7:db:c2:7b:4b:e4:ca:b7:8e:75:71:bc:b0:18:e4:c1:14:
47:2b:10:bf:94:e8:a5:aa:63:ee:3a:6c:55:48:bb:6c:89:c6:
e6:9d:32:74:1b:7b:84:ba:19:8b:3b:8c:50:7e:21:ac:64:c7:
c7:9d:b2:d9:3d:0b:d3:c2:15:5d:59:46:0c:6e:71:5e:3d:6b:
ba:40:0e:2d:0b:d3:92:c6:cc:70:80:66:eb:9a:e5:45:58:f8:
b1:04:aa:0c:4f:8c:33:c3:88:f5:d0:17:41:be:c4:5d:df:bc:
1a:b1:42:31:aa:95:ba:93:dd:57:18:a8:cc:5a:2d:94:6b:f2:
9f:7d:e8:f8:64:d2:56:27:63:2b:49:ab:d8:85:8e:5d:af:0d:
0f:4e:87:1c:78:cb:c9:bd:8e:64:40:33:fd:98:29:62:7a:4a:
e8:15:e9:fa:77:10:c0:e2:3e:61:a3:6f:21:b0:73:8a:19:9f:
41:cd:54:8a:69:02:af:80:33:55:9f:7f:34:d6:a9:85:a2:94:
45:c6:45:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:10:46 2024 by rpki-client on console-ams.rpki-client.org