Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/ElUp1_3oesvlgasuwl3uVArrFIU.roa
File: ElUp1_3oesvlgasuwl3uVArrFIU.roa (raw, json)
Hash identifier: SLBQnQIVVi+6xEvJO7QUAa2ajxCpQLEtgD2ZDGytor4=
Subject key identifier: 12:55:29:D7:FD:E8:7A:CB:E5:81:AB:2E:C2:5D:EE:54:0A:EB:14:85
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 018F8C2F5AADF76513961D7BA4F336B8901A
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/ElUp1_3oesvlgasuwl3uVArrFIU.roa
Signing time: Sat 18 May 2024 14:51:04 +0000
ROA not before: Sat 18 May 2024 14:51:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 24875
IP address blocks: 103.240.148.0/22 maxlen: 24
160.238.64.0/24 maxlen: 24
160.238.65.0/24 maxlen: 24
160.238.67.0/24 maxlen: 24
185.245.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 17:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:8c:2f:5a:ad:f7:65:13:96:1d:7b:a4:f3:36:b8:90:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: May 18 14:51:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=125529d7fde87acbe581ab2ec25dee540aeb1485
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f6:86:1a:60:d4:bc:da:0f:56:c9:0a:0e:1b:
0d:19:38:b0:0d:db:bb:82:67:63:fa:fa:f0:9b:6e:
23:ea:58:1d:0f:3b:45:8d:a3:6d:16:ed:1f:7c:cd:
9a:72:be:17:18:5f:1b:f4:1f:e2:b0:75:47:4c:5b:
17:95:5b:cd:72:b4:ec:cf:da:2b:e1:d2:d6:90:4c:
43:5e:04:89:9e:c4:d9:4c:a8:fd:e2:78:2d:6a:4e:
d9:b8:fd:24:a8:09:9f:9b:ed:85:aa:f9:3a:ae:e8:
12:d9:c2:f0:21:c0:39:bd:5b:05:6b:c0:9b:26:4c:
8b:06:47:33:dd:88:61:8c:12:b2:97:6d:ef:03:64:
39:98:3e:cf:97:5f:f1:31:27:c9:c6:63:d9:af:75:
8b:4c:6a:2b:87:f3:67:1c:9d:b5:be:b0:1b:b5:6c:
f0:72:24:9f:f2:1f:c4:cc:2d:c0:d0:fc:a9:0c:09:
5a:91:cf:22:b7:b0:e1:cd:cb:e8:25:3e:68:e7:96:
c4:dd:06:fa:35:ee:cf:74:18:34:bc:d5:08:7a:ba:
08:34:7a:cf:87:35:ff:ee:e3:5b:71:ea:73:59:5e:
65:34:23:22:80:8f:a6:39:5f:d3:28:7a:f0:4b:c8:
a8:9b:02:eb:78:6b:dc:f4:31:d4:1a:0f:11:34:e2:
2f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:55:29:D7:FD:E8:7A:CB:E5:81:AB:2E:C2:5D:EE:54:0A:EB:14:85
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/ElUp1_3oesvlgasuwl3uVArrFIU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.240.148.0/22
160.238.64.0/23
160.238.67.0/24
185.245.3.0/24
Signature Algorithm: sha256WithRSAEncryption
89:a1:05:e3:b8:55:3c:d4:05:67:03:62:04:0f:c1:08:66:69:
f3:96:eb:f1:a7:aa:bc:cf:df:43:07:ae:21:be:2b:3f:c6:5c:
f3:f7:17:ce:ae:5a:93:7a:bd:f9:b0:8a:77:85:f0:8d:df:84:
c7:7a:cb:51:ea:d4:7a:d7:8e:82:01:f1:06:d4:ad:5a:b1:f1:
16:de:bc:27:57:76:78:4a:68:37:95:2f:68:73:de:0a:9e:85:
be:fc:cc:78:be:df:ee:ac:ad:d3:cd:03:a5:22:16:b6:ae:b5:
51:bf:0e:d8:65:93:c1:4e:31:2c:28:15:f9:bb:60:11:e5:b0:
56:29:af:f3:73:76:ab:6f:75:21:5b:24:32:e3:6a:53:87:d8:
7d:f7:ef:b1:dd:e6:61:a4:77:41:49:6d:e8:ee:07:51:1d:51:
da:13:8b:e5:a0:72:2b:19:c1:8b:1a:da:01:10:3e:52:b4:bb:
e6:9b:71:7f:6a:e8:27:13:21:b5:14:45:37:6c:74:ca:7a:2c:
43:ba:8b:25:9e:2a:48:d8:4b:6a:2f:cc:3c:78:51:cd:e1:af:
b2:76:f2:3c:96:68:47:13:f2:c4:8c:45:88:e2:83:fa:a0:3b:
c0:14:2f:bf:f2:88:17:12:d5:c5:c1:e7:d5:9b:b0:3a:11:bf:
27:3d:9f:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:31:16 2024 by rpki-client on console-fra.rpki-client.org