Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/EStMkQNsaAUNugMHWcUUmUGRd5Y.roa
File: EStMkQNsaAUNugMHWcUUmUGRd5Y.roa (raw, json)
Hash identifier: BmfnQVJUbzTVrPnURQaE2FANFrkJ40gg3mpiKwSBcpY=
Subject key identifier: 11:2B:4C:91:03:6C:68:05:0D:BA:03:07:59:C5:14:99:41:91:77:96
Certificate issuer: /CN=34f1726ea4bd6d3c8091ae0c8ad1a03e91e359a2
Certificate serial: 018CC725F84F12A1017A30310EAB455E531F
Authority key identifier: 34:F1:72:6E:A4:BD:6D:3C:80:91:AE:0C:8A:D1:A0:3E:91:E3:59:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NPFybqS9bTyAka4MitGgPpHjWaI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/EStMkQNsaAUNugMHWcUUmUGRd5Y.roa
Signing time: Mon 01 Jan 2024 22:30:03 +0000
ROA not before: Mon 01 Jan 2024 22:30:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60558
IP address blocks: 185.52.52.0/22 maxlen: 22
185.52.55.0/24 maxlen: 24
2a01:b960:2301::/48 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NPFybqS9bTyAka4MitGgPpHjWaI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 01:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:25:f8:4f:12:a1:01:7a:30:31:0e:ab:45:5e:53:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34f1726ea4bd6d3c8091ae0c8ad1a03e91e359a2
Validity
Not Before: Jan 1 22:30:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=112b4c91036c68050dba030759c5149941917796
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:11:01:38:45:f3:92:33:11:e2:6a:ae:56:47:
fc:d6:aa:c5:20:93:9a:76:e5:2f:67:fc:38:e7:8a:
ed:7b:8d:f5:1d:bc:26:5e:3e:0e:b7:b6:fa:c7:fb:
23:4e:aa:f5:94:48:ee:d2:ad:82:ef:c2:c5:d5:a8:
96:18:49:2a:82:93:f7:48:62:cf:f1:56:18:78:d7:
4f:25:66:77:b3:3e:ef:53:48:08:e8:fc:0e:bb:6a:
cb:41:30:ed:b8:6c:7a:05:c3:a1:3d:55:cb:0f:c7:
79:93:0e:52:fe:0c:3f:47:94:ef:b4:18:de:61:0f:
c7:6a:ef:58:81:78:5c:99:ec:e3:c7:dc:a8:cc:9e:
ca:60:f5:33:a5:9e:8b:8f:c0:22:52:79:96:a2:32:
23:9c:9b:b1:4a:3d:c4:2f:05:11:c7:e3:14:52:a1:
7a:fb:76:9b:4f:a4:2d:b3:b9:49:a0:70:c0:ab:65:
70:e0:64:7e:b7:6f:0c:51:d7:fc:f0:1f:df:79:31:
1f:55:98:f6:76:e3:f7:cf:e6:ce:2c:63:06:3d:4d:
71:82:86:4d:f6:9d:47:ff:10:e5:37:5c:8a:ae:ce:
f9:19:8f:4e:f6:b8:24:78:0d:47:f1:7b:cb:a7:a6:
12:7a:8d:68:32:b3:6f:66:e3:15:2b:6d:a3:13:a4:
5f:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:2B:4C:91:03:6C:68:05:0D:BA:03:07:59:C5:14:99:41:91:77:96
X509v3 Authority Key Identifier:
keyid:34:F1:72:6E:A4:BD:6D:3C:80:91:AE:0C:8A:D1:A0:3E:91:E3:59:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPFybqS9bTyAka4MitGgPpHjWaI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/EStMkQNsaAUNugMHWcUUmUGRd5Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.52.52.0/22
IPv6:
2a01:b960:2301::/48
Signature Algorithm: sha256WithRSAEncryption
45:5e:66:eb:f3:02:cc:04:2d:20:ab:73:47:49:a5:76:05:bc:
4f:73:0d:13:8b:39:d6:99:23:41:e6:77:f0:e8:ff:f0:76:07:
04:91:a9:27:8d:df:ae:bd:29:0d:94:72:d2:b1:0b:9f:b1:e4:
10:69:45:75:43:df:58:b3:0f:53:89:90:cc:86:a6:ea:a5:40:
63:32:6a:cc:9a:90:28:66:69:c1:4b:88:4a:0d:6d:12:7d:ce:
c7:da:34:ea:f1:60:5c:d6:c3:27:02:58:a8:30:85:fb:5d:df:
9f:97:16:5c:7f:95:29:90:2d:e8:77:e4:2f:7c:02:15:48:f7:
fc:5a:e0:b4:46:58:60:df:99:2e:0f:06:af:7b:8d:35:f2:98:
f6:17:fb:fb:7e:43:06:b4:85:e2:45:69:fb:a1:9d:9c:e3:9f:
2a:d7:b6:cf:44:73:cd:1b:ec:b1:f8:73:52:45:32:b0:51:cf:
a9:75:d6:f5:1f:91:46:b0:bb:5c:e3:49:f9:59:51:90:54:86:
5a:9e:8c:3c:fe:38:04:ab:58:79:6b:19:b6:aa:7a:f1:d6:d1:
91:c2:21:e2:2a:b6:3e:0f:ff:0b:97:19:d6:fc:03:76:2d:88:
13:4d:f9:4d:82:c4:fb:d9:6d:10:3f:a8:c8:de:54:14:e8:9e:
8a:3c:05:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:37:44 2024 by rpki-client on console-fra.rpki-client.org