Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/eVRnMk_zP8xnXsXz6mfuwyzqKd0.roa
File: eVRnMk_zP8xnXsXz6mfuwyzqKd0.roa (raw, json)
Hash identifier: fuTrwRFmElJu75EHQ4WpsSpOduIeZqG8CF/wKQR2awU=
Subject key identifier: 79:54:67:32:4F:F3:3F:CC:67:5E:C5:F3:EA:67:EE:C3:2C:EA:29:DD
Certificate issuer: /CN=2d43689a7638ff737591ff3b251918862349695c
Certificate serial: 018CC42548AC4EAC88BDDC783760515E52CC
Authority key identifier: 2D:43:68:9A:76:38:FF:73:75:91:FF:3B:25:19:18:86:23:49:69:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LUNomnY4_3N1kf87JRkYhiNJaVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/eVRnMk_zP8xnXsXz6mfuwyzqKd0.roa
Signing time: Mon 01 Jan 2024 08:30:26 +0000
ROA not before: Mon 01 Jan 2024 08:30:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60526
IP address blocks: 185.152.212.0/24 maxlen: 24
185.152.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/LUNomnY4_3N1kf87JRkYhiNJaVw.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/LUNomnY4_3N1kf87JRkYhiNJaVw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LUNomnY4_3N1kf87JRkYhiNJaVw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Jun 2024 01:03:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:48:ac:4e:ac:88:bd:dc:78:37:60:51:5e:52:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d43689a7638ff737591ff3b251918862349695c
Validity
Not Before: Jan 1 08:30:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=795467324ff33fcc675ec5f3ea67eec32cea29dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:9c:5a:e5:ce:d4:91:78:59:18:8a:f8:bd:53:
43:a5:66:eb:70:af:33:b0:4c:10:1f:68:56:71:79:
b9:12:2b:dd:ca:9d:c8:4c:a4:01:d3:a5:51:9f:82:
ff:6b:6e:fa:6f:46:0f:d0:49:f8:7e:16:d0:64:4d:
50:7f:ab:b3:b4:41:1e:90:a0:b6:64:49:08:d7:1e:
b6:cb:68:c5:6e:0c:5b:89:09:bc:94:57:91:01:4b:
6d:f1:d4:ad:0d:a6:51:c3:b7:12:3e:51:c0:e7:17:
b9:a6:f8:20:cd:aa:1a:9f:c8:d1:11:c7:16:35:99:
68:4d:ac:76:9b:7c:84:b6:d2:4d:34:48:de:5c:e2:
f3:1b:52:5d:3f:d0:5d:8c:ad:d9:72:73:b5:bd:f3:
bd:e9:53:0f:48:1a:1f:c6:1f:88:66:1c:4f:9b:c5:
35:d4:2c:46:9a:36:0d:68:11:2e:6c:ab:ae:9a:99:
a6:f8:e6:64:87:5e:aa:18:13:e3:8e:55:e7:97:42:
59:13:9f:1f:73:36:d6:55:b6:8a:85:bd:b9:26:41:
85:00:2e:77:69:41:a2:95:73:b0:e9:47:8a:c7:e6:
ed:9b:45:08:b0:8d:75:1c:59:56:2b:3c:82:59:97:
d3:49:43:18:b7:da:a6:c8:03:e0:5f:d8:11:ca:72:
61:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:54:67:32:4F:F3:3F:CC:67:5E:C5:F3:EA:67:EE:C3:2C:EA:29:DD
X509v3 Authority Key Identifier:
keyid:2D:43:68:9A:76:38:FF:73:75:91:FF:3B:25:19:18:86:23:49:69:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LUNomnY4_3N1kf87JRkYhiNJaVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/eVRnMk_zP8xnXsXz6mfuwyzqKd0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/LUNomnY4_3N1kf87JRkYhiNJaVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.152.212.0/24
185.152.214.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:74:88:9b:0a:1d:69:2c:1d:4f:4f:63:44:c7:a9:70:25:2b:
9d:b1:40:12:8b:1a:23:2c:8d:35:75:c1:ed:0f:c1:48:04:5b:
54:3e:65:c8:ef:e5:1d:ae:00:7a:23:94:6b:e0:f9:f3:4e:d7:
d8:ed:5a:b3:d3:dc:3e:7a:d9:fc:bc:b4:52:a4:d9:2a:be:c6:
41:58:be:ed:da:63:44:82:70:16:94:0d:6b:78:6a:3a:cf:05:
60:f0:af:fd:f8:95:6f:2a:44:80:87:1f:74:79:62:9a:af:dd:
0a:a1:2e:45:72:b6:a8:10:23:21:1d:77:2f:23:ba:fd:c8:df:
d7:40:fd:62:e3:9a:52:69:e5:47:6d:6a:20:d4:7f:9f:26:83:
a7:59:b6:df:6c:f6:61:57:7d:d5:1a:4c:2a:08:05:0c:a8:c3:
d4:db:25:8f:2c:70:c3:e8:04:6c:df:18:ce:1d:81:28:59:b0:
b5:80:e1:17:0c:33:2a:16:22:f0:4b:47:f2:0e:c4:84:5e:77:
70:9b:1f:22:85:9e:9a:ef:28:63:fc:60:a4:8b:03:f8:70:e1:
0e:2d:b3:df:00:1d:b7:d3:6c:26:1d:4d:69:a3:d8:5b:f4:17:
6b:5f:7b:a9:b9:97:14:1d:cd:83:40:f6:ff:08:74:4f:fd:31:
80:78:4b:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 09:26:39 2024 by rpki-client on console-fra.rpki-client.org