Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/3f5e8c-d377-4f43-8f24-de97e9141fed/1/e_Cy_FEBdhWAyy5ZEgjDJ3GVdvI.roa
File: e_Cy_FEBdhWAyy5ZEgjDJ3GVdvI.roa (raw, json)
Hash identifier: CZDixfsjEs8LFh+CIfMnDEgDovOnDJGMJYterzkNBio=
Subject key identifier: 7B:F0:B2:FC:51:01:76:15:80:CB:2E:59:12:08:C3:27:71:95:76:F2
Certificate issuer: /CN=8d983a07e6db8bc494c88dfbd1317ba810d2d27a
Certificate serial: 018CC2DB0C95275EE852F1C172AC392DF260
Authority key identifier: 8D:98:3A:07:E6:DB:8B:C4:94:C8:8D:FB:D1:31:7B:A8:10:D2:D2:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jZg6B-bbi8SUyI370TF7qBDS0no.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/3f5e8c-d377-4f43-8f24-de97e9141fed/1/e_Cy_FEBdhWAyy5ZEgjDJ3GVdvI.roa
Signing time: Mon 01 Jan 2024 02:29:44 +0000
ROA not before: Mon 01 Jan 2024 02:29:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212606
IP address blocks: 185.178.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/3f5e8c-d377-4f43-8f24-de97e9141fed/1/jZg6B-bbi8SUyI370TF7qBDS0no.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/3f5e8c-d377-4f43-8f24-de97e9141fed/1/jZg6B-bbi8SUyI370TF7qBDS0no.mft
rsync://rpki.ripe.net/repository/DEFAULT/jZg6B-bbi8SUyI370TF7qBDS0no.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:0c:95:27:5e:e8:52:f1:c1:72:ac:39:2d:f2:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d983a07e6db8bc494c88dfbd1317ba810d2d27a
Validity
Not Before: Jan 1 02:29:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7bf0b2fc5101761580cb2e591208c327719576f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:df:a4:23:ef:3f:c0:48:dd:cb:63:12:08:cf:
18:24:b2:9e:21:4d:ec:0f:1a:43:ab:59:39:7a:2b:
d5:b4:1a:aa:3f:43:89:ff:9a:d9:e8:d2:f6:38:8c:
dd:d6:36:43:7d:50:5a:28:f5:2f:b2:23:b8:42:12:
9c:c9:12:66:16:a2:f0:da:9e:54:94:7a:60:2a:53:
64:74:d8:87:6e:8d:76:8d:52:d3:bf:56:e6:15:e8:
8b:35:20:f2:8e:8d:06:b0:11:c6:d8:88:90:09:92:
26:43:ad:95:fa:36:70:61:5e:21:09:55:19:35:35:
42:e8:27:91:3e:41:2e:fe:80:9e:2d:c0:cc:3a:bd:
c1:0b:e0:30:d3:25:37:53:ae:4b:27:a2:b2:ef:bc:
cb:03:af:21:47:3e:07:c3:f0:43:76:aa:54:1c:63:
71:44:cd:98:2a:e6:7d:46:7c:15:1e:5b:ca:8a:35:
76:59:4a:7f:54:7a:3d:0f:a5:c8:68:40:f6:4f:1f:
e7:b6:a5:61:24:d7:04:3c:66:e2:b7:7b:2e:ff:88:
b5:74:d6:ac:06:89:17:03:cd:f5:62:45:33:e6:82:
6f:22:8b:0e:ab:d1:8c:93:68:96:f5:e2:8c:03:a8:
21:62:55:b8:aa:fd:05:21:5c:a6:f1:ea:ec:d1:75:
7d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:F0:B2:FC:51:01:76:15:80:CB:2E:59:12:08:C3:27:71:95:76:F2
X509v3 Authority Key Identifier:
keyid:8D:98:3A:07:E6:DB:8B:C4:94:C8:8D:FB:D1:31:7B:A8:10:D2:D2:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jZg6B-bbi8SUyI370TF7qBDS0no.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/3f5e8c-d377-4f43-8f24-de97e9141fed/1/e_Cy_FEBdhWAyy5ZEgjDJ3GVdvI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/3f5e8c-d377-4f43-8f24-de97e9141fed/1/jZg6B-bbi8SUyI370TF7qBDS0no.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.178.49.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:88:ec:4b:4a:5c:0e:55:15:3c:bf:fe:ec:8a:b3:8a:1f:57:
d5:64:d3:37:7d:18:33:3a:b9:39:4d:57:5e:6c:b6:7e:bc:b0:
63:91:1e:dd:39:36:85:fc:ef:a7:da:de:6c:cc:ce:df:ba:a6:
6b:9e:c2:c9:a6:e8:66:5d:ac:6a:53:83:13:23:f1:c8:39:f3:
c5:80:de:87:e6:c9:73:a2:98:62:7f:1f:05:85:44:f6:46:01:
0b:84:af:66:0c:e5:a3:40:8a:64:25:fc:6e:11:88:cd:44:46:
81:05:7b:0a:01:4a:bf:97:7b:bd:d3:2f:1a:b9:13:9b:c7:c6:
7b:cf:63:9a:a4:01:a0:df:08:15:17:cd:38:64:6b:e9:c5:2b:
c0:b1:2c:c3:c0:61:aa:b2:34:4d:18:39:09:8f:15:34:50:d9:
bb:4c:dd:67:89:b0:aa:9e:34:55:e2:58:22:d3:21:38:9a:cd:
11:6b:70:ae:c7:fb:8d:e3:50:82:96:64:86:c1:05:63:bb:9d:
82:fe:a7:89:34:3f:d9:49:28:55:d4:28:46:13:73:94:a7:fc:
b0:b3:f7:84:88:97:6c:5f:12:2e:5d:9a:18:45:72:3e:28:30:
93:79:79:e6:35:c0:47:69:be:85:70:23:49:01:54:fa:f0:43:
f3:fd:72:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 04:42:11 2024 by rpki-client on console-ams.rpki-client.org