Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/eODLjb9a8MmBU8laVZw3xtBrjh4.roa
File: eODLjb9a8MmBU8laVZw3xtBrjh4.roa (raw, json)
Hash identifier: eC9RLcuydPAwbH/HoNA/V+EVVGDWSG0/rsMLVF5Y9Dw=
Subject key identifier: 78:E0:CB:8D:BF:5A:F0:C9:81:53:C9:5A:55:9C:37:C6:D0:6B:8E:1E
Certificate issuer: /CN=15ddd4c9dc23fac35574fce2b4294398add8521c
Certificate serial: 018CC64A972224799A12632C9EA75B7FBFF4
Authority key identifier: 15:DD:D4:C9:DC:23:FA:C3:55:74:FC:E2:B4:29:43:98:AD:D8:52:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fd3Uydwj-sNVdPzitClDmK3YUhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/eODLjb9a8MmBU8laVZw3xtBrjh4.roa
Signing time: Mon 01 Jan 2024 18:30:26 +0000
ROA not before: Mon 01 Jan 2024 18:30:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3320
IP address blocks: 185.183.212.0/22 maxlen: 22
185.183.212.0/23 maxlen: 23
185.183.214.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/Fd3Uydwj-sNVdPzitClDmK3YUhw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/Fd3Uydwj-sNVdPzitClDmK3YUhw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fd3Uydwj-sNVdPzitClDmK3YUhw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:97:22:24:79:9a:12:63:2c:9e:a7:5b:7f:bf:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15ddd4c9dc23fac35574fce2b4294398add8521c
Validity
Not Before: Jan 1 18:30:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=78e0cb8dbf5af0c98153c95a559c37c6d06b8e1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:7a:b5:2e:71:68:6d:f2:f9:6a:69:ca:d9:67:
73:53:b8:35:ec:bc:22:b6:71:8f:ab:ae:c4:9d:a6:
00:94:1e:43:e9:48:17:e4:28:2e:7b:17:fd:34:56:
6c:16:94:8f:e8:37:33:23:db:06:42:ef:40:bf:b1:
ff:a1:ac:eb:ca:1d:d2:3a:2e:78:8e:ed:3f:01:d1:
1e:16:7f:66:9b:79:4b:3e:9c:66:61:bd:e7:17:e6:
92:ab:04:6f:f7:34:91:82:89:44:0b:15:35:ec:15:
21:53:ce:fe:cf:40:2b:b3:1b:04:82:53:d5:1e:91:
64:24:23:7b:4a:d7:d9:e4:cc:3f:3d:63:54:84:c2:
de:d1:73:63:4c:08:7a:3c:0f:fe:7a:12:22:9b:f6:
b1:1b:de:02:f7:8c:e6:b0:52:0f:2c:10:2a:dd:4e:
d9:a5:a3:ce:0a:c2:ef:fd:45:dc:08:e4:ea:db:28:
2b:f2:34:92:bb:ba:7b:ae:dc:6c:0b:dd:25:41:7c:
93:ba:8e:f9:2f:dd:3f:e8:e8:31:9c:b8:d0:02:47:
40:6a:1c:6d:6f:55:7d:12:ed:2b:0f:ce:b6:06:71:
ab:99:ef:98:93:a9:98:bb:51:a7:a3:13:6e:fb:94:
d5:22:46:27:70:03:49:4f:e1:16:a0:6c:4e:83:77:
b9:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:E0:CB:8D:BF:5A:F0:C9:81:53:C9:5A:55:9C:37:C6:D0:6B:8E:1E
X509v3 Authority Key Identifier:
keyid:15:DD:D4:C9:DC:23:FA:C3:55:74:FC:E2:B4:29:43:98:AD:D8:52:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fd3Uydwj-sNVdPzitClDmK3YUhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/eODLjb9a8MmBU8laVZw3xtBrjh4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/Fd3Uydwj-sNVdPzitClDmK3YUhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.183.212.0/22
Signature Algorithm: sha256WithRSAEncryption
05:e9:a2:a4:6c:6f:de:d0:a0:4b:c1:4a:c3:fe:2c:22:c6:9d:
3e:ed:65:22:97:46:9e:db:a2:3b:d9:ac:a0:63:19:ea:79:a5:
00:ae:01:49:84:a0:e1:ca:e9:1c:c2:be:b6:fc:4f:7f:fb:72:
88:3c:2d:01:06:5c:3c:a8:02:eb:08:a2:74:43:e7:8d:dd:57:
4b:0c:ae:87:91:1c:f0:2b:3b:90:13:9c:43:bc:ba:ad:c6:1a:
b1:fb:23:19:e4:18:f4:1f:4c:3d:81:d8:ca:94:c4:57:d6:27:
e7:39:d3:b1:fd:e3:7b:c6:24:47:35:77:04:79:9a:e1:e8:7f:
ec:b1:85:17:bd:74:3c:34:07:cd:1c:ca:e4:fd:52:87:66:f6:
2c:ce:e1:8f:87:51:4a:ce:a8:58:e6:a9:9a:67:11:33:09:ad:
da:57:11:da:ed:18:9e:4c:94:d2:0f:53:56:aa:dc:a7:69:1d:
09:6a:9f:c3:8e:76:44:f1:36:81:00:cd:ee:aa:83:e2:0f:fc:
a0:c7:76:42:90:1b:98:c8:12:88:eb:30:55:f1:2a:f7:26:06:
e9:91:ad:4a:69:93:0d:d2:31:64:a5:9a:bd:a3:35:56:62:8f:
3a:d3:14:5b:25:f0:95:b2:28:74:a9:7c:63:4a:01:6d:14:7c:
6e:55:e5:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 00:37:05 2024 by rpki-client on console-fra.rpki-client.org