Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/0e0c90-717f-40ea-b17e-e6f9db74139d/1/EcCbyv6F86Py9PP9C5RspZsolrE.roa
File: EcCbyv6F86Py9PP9C5RspZsolrE.roa (raw, json)
Hash identifier: YS2Cs3q7FnSTKblADfw+zOrbamxy7kjIi3sCMReJuOk=
Subject key identifier: 11:C0:9B:CA:FE:85:F3:A3:F2:F4:F3:FD:0B:94:6C:A5:9B:28:96:B1
Certificate issuer: /CN=1627573c68929ab2a4590e92a51abc40ea9e5817
Certificate serial: 018F76E84A19736E52319C337E14FD0BACD1
Authority key identifier: 16:27:57:3C:68:92:9A:B2:A4:59:0E:92:A5:1A:BC:40:EA:9E:58:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FidXPGiSmrKkWQ6SpRq8QOqeWBc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/0e0c90-717f-40ea-b17e-e6f9db74139d/1/EcCbyv6F86Py9PP9C5RspZsolrE.roa
Signing time: Tue 14 May 2024 11:41:25 +0000
ROA not before: Tue 14 May 2024 11:41:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50033
IP address blocks: 185.60.162.0/24 maxlen: 24
185.161.124.0/22 maxlen: 22
185.211.52.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/0e0c90-717f-40ea-b17e-e6f9db74139d/1/FidXPGiSmrKkWQ6SpRq8QOqeWBc.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/0e0c90-717f-40ea-b17e-e6f9db74139d/1/FidXPGiSmrKkWQ6SpRq8QOqeWBc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FidXPGiSmrKkWQ6SpRq8QOqeWBc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 05:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:76:e8:4a:19:73:6e:52:31:9c:33:7e:14:fd:0b:ac:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1627573c68929ab2a4590e92a51abc40ea9e5817
Validity
Not Before: May 14 11:41:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=11c09bcafe85f3a3f2f4f3fd0b946ca59b2896b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:52:52:6a:97:91:f9:29:2b:57:66:bf:bc:01:
6a:2b:2d:a8:4e:79:e3:89:73:c8:cd:9d:d7:99:f0:
04:32:29:8c:45:21:d9:43:bd:d7:d6:00:5e:84:0c:
ab:bd:1e:df:6d:0d:ef:c8:54:1a:c3:55:e1:1f:f8:
3d:89:17:05:99:e0:cc:6b:94:a0:70:28:bc:61:4f:
df:69:5b:65:1c:89:94:0b:83:e4:0a:9b:a7:bb:7b:
42:b6:30:08:5d:60:ca:b3:14:35:61:f0:ec:50:0c:
ff:52:f0:36:f2:ff:fb:55:b4:39:48:e9:b2:ee:fe:
5a:4f:04:ab:b2:c9:a9:a8:d5:10:d2:12:70:e3:db:
e5:70:67:97:9a:d6:dc:6c:b9:b1:ea:81:64:fc:77:
c4:e4:5e:19:41:8a:02:2e:0d:03:4a:36:c5:c2:5a:
ac:ce:dc:b0:d3:5b:1d:c4:ee:fe:78:5b:f3:33:a1:
61:6a:b7:d7:e1:fb:7f:e2:09:a9:a5:5c:62:89:d2:
9f:6f:74:f8:22:bf:ee:5a:e8:da:25:15:a9:ec:ac:
6d:86:eb:53:d1:b5:bc:8f:3a:e4:df:ad:f9:ff:a4:
c0:9d:cd:fe:8a:fe:27:79:bc:8c:68:5d:2b:16:1c:
dd:10:3b:db:a2:b4:49:dc:49:f6:f6:cd:6d:23:09:
85:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:C0:9B:CA:FE:85:F3:A3:F2:F4:F3:FD:0B:94:6C:A5:9B:28:96:B1
X509v3 Authority Key Identifier:
keyid:16:27:57:3C:68:92:9A:B2:A4:59:0E:92:A5:1A:BC:40:EA:9E:58:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FidXPGiSmrKkWQ6SpRq8QOqeWBc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0e0c90-717f-40ea-b17e-e6f9db74139d/1/EcCbyv6F86Py9PP9C5RspZsolrE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0e0c90-717f-40ea-b17e-e6f9db74139d/1/FidXPGiSmrKkWQ6SpRq8QOqeWBc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.60.162.0/24
185.161.124.0/22
185.211.52.0/22
Signature Algorithm: sha256WithRSAEncryption
bb:7a:bd:7c:01:67:2d:1f:08:00:00:c3:63:03:4d:5e:6e:7f:
85:31:ac:63:48:f3:fb:ac:c2:22:8a:63:da:dc:c5:14:53:94:
4f:33:a3:2b:3d:62:e5:27:63:fd:6f:f5:17:3d:87:d0:74:0f:
33:41:a3:a8:4c:35:e5:f6:e7:53:62:71:b8:08:2b:19:3e:37:
4c:ce:43:6d:9f:d5:fe:f7:d8:c5:ea:3f:8e:13:40:30:26:2f:
27:6c:89:40:21:a2:1f:7e:ad:de:b7:19:57:ef:85:d5:32:35:
bd:4a:99:7b:c2:b4:39:3d:2d:47:62:c8:6e:6a:08:c3:4b:ed:
d4:55:e5:f3:f4:c3:ea:aa:aa:d9:89:aa:5e:d8:9e:69:87:5c:
32:a7:4d:df:ef:ef:8d:2b:1b:df:db:8c:d2:34:ff:dd:c9:f3:
a9:b7:4e:07:b9:52:12:44:c3:d2:75:1d:f9:43:fd:e5:7f:80:
b4:a1:c3:3a:47:49:c5:e2:ff:40:76:e5:b8:98:62:b7:fa:ae:
0d:89:37:69:7c:bf:f1:28:11:18:fc:61:8b:d1:bc:46:16:c9:
a6:2f:86:9d:2f:c9:ab:32:eb:22:d4:d5:05:19:c7:03:c3:c6:
eb:79:9b:9a:d0:07:5c:c2:92:0f:67:0f:b4:4d:60:34:5d:9e:
4d:05:6c:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:37:49 2024 by rpki-client on console-ams.rpki-client.org