Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/ceiv-yK55ZBJpENanL2We7fh9_M.roa
File: ceiv-yK55ZBJpENanL2We7fh9_M.roa (raw, json)
Hash identifier: nVK/YlSOgIbuKJOXQFhzscgKoFi9ctEllt27LahjPn4=
Subject key identifier: 71:E8:AF:FB:22:B9:E5:90:49:A4:43:5A:9C:BD:96:7B:B7:E1:F7:F3
Certificate issuer: /CN=ef54d9e41ea5e2d161b7c4cdb2e4702c4f248e14
Certificate serial: 018CC492E7778E77230CF2EC97C8B42A7142
Authority key identifier: EF:54:D9:E4:1E:A5:E2:D1:61:B7:C4:CD:B2:E4:70:2C:4F:24:8E:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71TZ5B6l4tFht8TNsuRwLE8kjhQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/ceiv-yK55ZBJpENanL2We7fh9_M.roa
Signing time: Mon 01 Jan 2024 10:30:10 +0000
ROA not before: Mon 01 Jan 2024 10:30:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59588
IP address blocks: 185.254.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/71TZ5B6l4tFht8TNsuRwLE8kjhQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/71TZ5B6l4tFht8TNsuRwLE8kjhQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/71TZ5B6l4tFht8TNsuRwLE8kjhQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:e7:77:8e:77:23:0c:f2:ec:97:c8:b4:2a:71:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef54d9e41ea5e2d161b7c4cdb2e4702c4f248e14
Validity
Not Before: Jan 1 10:30:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=71e8affb22b9e59049a4435a9cbd967bb7e1f7f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:a8:34:40:34:56:63:66:80:1e:76:6e:8b:fe:
4e:65:b0:7f:04:be:01:4d:d8:92:19:d5:6d:ea:7b:
46:66:a2:cb:55:c0:f1:be:61:c4:c9:fc:25:a4:61:
a1:9f:9f:9c:af:ae:c3:2a:1b:81:2c:52:c2:e7:7a:
c8:e6:c7:22:f6:df:1e:ee:01:93:e6:5b:02:92:e9:
7d:36:c7:bf:1f:4e:b2:d7:83:85:25:88:f5:a8:46:
e2:69:53:a5:d3:22:ad:b6:cf:a4:ec:60:d4:1f:3f:
44:0f:cd:81:8d:38:79:a3:c4:44:2e:0d:f9:62:30:
09:6f:f5:50:4a:e3:d1:43:e7:59:c5:f2:b6:8e:8c:
a3:18:8a:a2:5b:14:d9:7d:8e:33:b9:7b:d2:8b:1f:
71:80:9e:b5:6b:d1:2b:32:1f:7c:6d:74:6f:1b:5f:
0a:ea:22:51:e1:f1:b4:61:16:77:2c:0a:28:4f:97:
06:6e:69:3e:c4:71:4c:dd:53:2f:d3:db:2c:6c:4f:
8a:21:4a:91:65:14:79:2e:de:71:dc:83:73:bb:27:
10:ee:c7:77:bd:a7:cf:ff:21:45:40:01:39:96:21:
e1:f5:31:35:4a:f6:0b:06:89:f6:9b:c1:9b:d9:a7:
8c:8e:86:c0:7a:e8:2a:4f:f4:3b:ad:7b:f7:13:f8:
8e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:E8:AF:FB:22:B9:E5:90:49:A4:43:5A:9C:BD:96:7B:B7:E1:F7:F3
X509v3 Authority Key Identifier:
keyid:EF:54:D9:E4:1E:A5:E2:D1:61:B7:C4:CD:B2:E4:70:2C:4F:24:8E:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71TZ5B6l4tFht8TNsuRwLE8kjhQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/ceiv-yK55ZBJpENanL2We7fh9_M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/71TZ5B6l4tFht8TNsuRwLE8kjhQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.254.12.0/24
Signature Algorithm: sha256WithRSAEncryption
56:a1:51:89:6a:d0:0a:a2:b3:fa:af:f3:00:5d:40:ac:0a:29:
31:59:cd:b8:26:3c:d7:27:10:b0:81:9c:da:84:cf:be:ac:61:
bd:90:c2:20:26:07:c0:a6:27:57:93:7a:2f:aa:d4:89:41:cd:
34:ad:c9:52:c7:8f:33:67:8d:61:33:06:8a:12:6a:1e:49:4d:
64:ff:db:56:36:ff:78:cc:cc:16:05:08:37:b6:a4:e9:e3:8e:
f5:78:50:ae:8e:fb:7a:6c:ac:16:d7:17:cd:ca:aa:30:54:d9:
24:28:f5:4b:cb:0b:e3:27:ce:21:35:24:cf:13:e8:e6:32:7a:
73:e2:4f:f3:56:d8:15:2e:87:85:9c:d5:cb:93:29:35:49:89:
48:4b:8b:76:4b:c4:f6:89:70:f5:01:20:29:72:82:fe:f9:58:
62:a2:bc:34:39:4e:2f:c7:79:9f:a5:2a:3d:70:92:d9:2f:2e:
b2:80:30:27:44:72:25:53:9d:60:b1:7f:35:11:a0:79:65:bc:
df:9d:bc:72:d8:d7:9c:44:92:c1:3d:f9:d1:4b:9d:1b:62:fe:
78:cc:54:90:ca:50:3a:a3:53:d3:77:6e:85:46:1e:02:86:46:
bd:01:45:e3:36:87:1a:83:02:9b:d8:aa:fe:a1:48:e4:a8:48:
32:2c:3f:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 22:26:19 2024 by rpki-client on console-fra.rpki-client.org