Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/871c28-66f3-406d-bb54-8e40435f4ba3/1/80euDxJVwURPUovJocN8C0jx-JA.roa
File: 80euDxJVwURPUovJocN8C0jx-JA.roa (raw, json)
Hash identifier: U4NIu22v+doUSHdIfCU5l2wHpdwv2etgN/eJG7JKuQE=
Subject key identifier: F3:47:AE:0F:12:55:C1:44:4F:52:8B:C9:A1:C3:7C:0B:48:F1:F8:90
Certificate issuer: /CN=c2e1dda1df73f3ff6ae4f5e7c7b24cab35e6849d
Certificate serial: 018CC2DAC5E130F735A21DA39688A15BDAFE
Authority key identifier: C2:E1:DD:A1:DF:73:F3:FF:6A:E4:F5:E7:C7:B2:4C:AB:35:E6:84:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wuHdod9z8_9q5PXnx7JMqzXmhJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/871c28-66f3-406d-bb54-8e40435f4ba3/1/80euDxJVwURPUovJocN8C0jx-JA.roa
Signing time: Mon 01 Jan 2024 02:29:26 +0000
ROA not before: Mon 01 Jan 2024 02:29:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205757
IP address blocks: 185.198.53.0/24 maxlen: 24
185.198.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/871c28-66f3-406d-bb54-8e40435f4ba3/1/wuHdod9z8_9q5PXnx7JMqzXmhJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/871c28-66f3-406d-bb54-8e40435f4ba3/1/wuHdod9z8_9q5PXnx7JMqzXmhJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/wuHdod9z8_9q5PXnx7JMqzXmhJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Jun 2024 01:02:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:c5:e1:30:f7:35:a2:1d:a3:96:88:a1:5b:da:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2e1dda1df73f3ff6ae4f5e7c7b24cab35e6849d
Validity
Not Before: Jan 1 02:29:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f347ae0f1255c1444f528bc9a1c37c0b48f1f890
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9c:c8:47:5c:53:67:ee:3b:e5:8d:8a:26:57:
b6:c3:98:bd:ff:f0:18:29:b4:8c:52:62:33:61:82:
f5:7c:45:a9:5f:16:a3:17:36:d1:e8:46:76:d1:37:
00:ed:33:f5:b7:e1:08:c9:e0:39:ea:30:8c:2f:b7:
7b:be:36:4a:68:8a:57:57:e9:46:72:4c:38:ef:85:
4d:7b:9b:15:52:64:39:58:24:f6:2e:9e:e9:ee:80:
04:79:f7:8f:eb:2f:8e:57:fb:b4:85:7a:13:e4:1a:
d4:5a:ff:7f:6b:aa:81:5e:7a:73:90:f7:6e:2b:28:
a5:f2:2c:53:02:a7:19:f2:15:96:32:14:64:6b:2d:
e2:d7:40:ee:96:20:ae:b5:65:19:57:cc:77:1a:ba:
8a:c2:40:a2:b6:06:3e:50:56:cd:4e:17:37:7c:3e:
22:05:18:00:4a:e8:a7:3f:fb:c8:1f:9a:ff:38:06:
7e:d2:79:4d:db:7c:52:d5:f3:43:9b:6d:91:6b:bd:
c6:0d:c1:da:02:7b:34:a4:e5:9c:2e:5e:d1:17:3e:
fb:7a:e9:ae:33:8e:0f:1b:39:3c:33:d5:fd:83:f4:
48:0a:e0:b1:05:8b:2c:fb:14:25:79:69:3d:8f:45:
84:b6:59:b9:a6:21:e6:a9:2b:c6:66:e0:c3:88:12:
ac:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:47:AE:0F:12:55:C1:44:4F:52:8B:C9:A1:C3:7C:0B:48:F1:F8:90
X509v3 Authority Key Identifier:
keyid:C2:E1:DD:A1:DF:73:F3:FF:6A:E4:F5:E7:C7:B2:4C:AB:35:E6:84:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wuHdod9z8_9q5PXnx7JMqzXmhJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/871c28-66f3-406d-bb54-8e40435f4ba3/1/80euDxJVwURPUovJocN8C0jx-JA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/871c28-66f3-406d-bb54-8e40435f4ba3/1/wuHdod9z8_9q5PXnx7JMqzXmhJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.198.52.0/23
Signature Algorithm: sha256WithRSAEncryption
88:2f:b1:ff:dd:b3:08:b8:40:5b:75:3e:42:92:78:ed:90:78:
37:d0:94:1e:fe:58:c2:10:b9:d2:f0:40:b9:b9:f8:c2:83:be:
a9:c4:5a:b8:1c:5b:a6:e5:1a:98:13:24:94:ff:5c:67:c0:dd:
4b:63:74:e7:12:e7:94:11:82:5b:7c:c5:69:81:d9:b8:fb:4c:
af:b3:75:1d:79:23:38:8f:c6:cc:ad:18:e6:46:9f:bc:46:68:
9f:51:e5:b0:0c:69:75:64:6d:45:72:89:90:da:81:ee:43:5a:
15:85:d9:f4:7d:3f:fd:be:c3:13:e9:37:bc:f3:95:a2:9c:a9:
04:d5:6c:4a:a6:63:a6:26:4a:9c:71:eb:16:b6:a7:f1:25:ab:
4d:51:1c:6a:67:aa:dd:3c:03:32:ef:70:c5:19:a0:41:57:83:
1c:90:ce:9a:37:64:d6:b2:3f:8f:af:c7:d4:0d:33:26:4a:f9:
02:1e:0f:84:36:32:eb:a7:a9:05:8d:5c:74:2d:5b:67:b8:11:
73:95:93:ec:fd:24:a8:a3:27:b6:f6:6f:eb:81:1a:6b:4e:21:
62:ec:9f:6d:c3:24:55:1a:0d:b6:45:e3:ad:62:dd:17:66:0b:
a2:2f:3b:a0:9d:71:21:38:a3:5d:3c:61:a9:d7:73:c5:7e:d8:
7b:5a:5b:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 09:57:46 2024 by rpki-client on console-fra.rpki-client.org