Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/617715-9484-40f9-896c-724b1a0212d4/1/A2Rv7ClIshkFuB3bNo4Gd9TWKHs.roa
File: A2Rv7ClIshkFuB3bNo4Gd9TWKHs.roa (raw, json)
Hash identifier: 0+/3pHZMw0x8iQLxvECxzJJcUrsJdaEuKv6JgtjQUds=
Subject key identifier: 03:64:6F:EC:29:48:B2:19:05:B8:1D:DB:36:8E:06:77:D4:D6:28:7B
Certificate issuer: /CN=ea1c951d61b87da19439784d23667a89cb3290a4
Certificate serial: 018CC5002718CF9D5DDE4D483577681F808F
Authority key identifier: EA:1C:95:1D:61:B8:7D:A1:94:39:78:4D:23:66:7A:89:CB:32:90:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6hyVHWG4faGUOXhNI2Z6icsykKQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/617715-9484-40f9-896c-724b1a0212d4/1/A2Rv7ClIshkFuB3bNo4Gd9TWKHs.roa
Signing time: Mon 01 Jan 2024 12:29:30 +0000
ROA not before: Mon 01 Jan 2024 12:29:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204463
IP address blocks: 185.113.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/617715-9484-40f9-896c-724b1a0212d4/1/6hyVHWG4faGUOXhNI2Z6icsykKQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/617715-9484-40f9-896c-724b1a0212d4/1/6hyVHWG4faGUOXhNI2Z6icsykKQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/6hyVHWG4faGUOXhNI2Z6icsykKQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 May 2024 14:34:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:27:18:cf:9d:5d:de:4d:48:35:77:68:1f:80:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea1c951d61b87da19439784d23667a89cb3290a4
Validity
Not Before: Jan 1 12:29:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=03646fec2948b21905b81ddb368e0677d4d6287b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:9e:1d:2e:cf:1f:fb:3c:a6:84:33:63:19:f6:
3a:e1:7b:53:13:e7:04:b9:10:8e:8d:b1:66:83:9b:
c6:1a:b6:0b:69:31:6c:be:30:68:46:6a:42:01:c9:
25:3b:00:37:d1:8c:15:15:cc:8e:e4:8f:0d:f9:7a:
36:55:8b:d9:02:4a:8e:8c:c6:9a:8a:2f:fb:17:78:
5a:a5:11:a4:58:a9:34:fe:21:e8:ca:76:ba:01:41:
d9:05:61:3c:be:20:e8:09:2d:16:b7:2c:00:e4:a5:
1e:ae:8b:c6:c5:bc:0e:63:b6:cd:3e:1c:38:99:8f:
03:be:77:8b:91:6c:b6:60:50:36:0d:bf:fd:ce:01:
a7:40:80:02:ad:f9:ad:0a:e1:78:4b:bf:9a:44:66:
d6:59:91:7c:13:1c:78:1d:86:f5:6f:e1:7b:5c:27:
60:2c:ed:b7:7f:69:96:82:08:76:14:39:e9:93:5b:
b7:33:e9:da:5a:11:a7:06:72:df:5f:a5:c1:1b:2d:
cd:41:7c:61:a7:41:09:2b:ff:b3:c5:26:f8:08:dd:
c0:0c:81:2c:c8:36:ea:3e:1b:7a:27:f6:c2:a6:83:
0b:b4:0e:d8:5a:12:30:94:94:ce:50:bf:50:70:8e:
65:1c:37:5a:46:d4:66:2c:6f:58:95:3f:36:68:1e:
c8:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:64:6F:EC:29:48:B2:19:05:B8:1D:DB:36:8E:06:77:D4:D6:28:7B
X509v3 Authority Key Identifier:
keyid:EA:1C:95:1D:61:B8:7D:A1:94:39:78:4D:23:66:7A:89:CB:32:90:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6hyVHWG4faGUOXhNI2Z6icsykKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/617715-9484-40f9-896c-724b1a0212d4/1/A2Rv7ClIshkFuB3bNo4Gd9TWKHs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/617715-9484-40f9-896c-724b1a0212d4/1/6hyVHWG4faGUOXhNI2Z6icsykKQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.113.239.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:74:37:b8:0f:ad:27:85:7b:c3:31:d6:25:d7:e0:85:31:c2:
43:87:14:f6:ac:1e:91:2b:17:c9:0f:25:aa:a9:ca:66:26:15:
d9:61:d9:12:7f:8a:50:c5:2d:7f:63:e7:23:e7:43:6a:f0:94:
bc:94:00:33:d3:42:e8:4c:64:c8:04:77:57:6a:6d:84:7e:28:
7e:66:e5:2b:2e:cf:25:a0:de:d5:49:65:d9:d3:13:ab:88:bb:
81:22:e9:40:e6:d8:0c:62:d8:4e:07:7b:7b:f7:12:c6:0d:b4:
7d:d2:54:30:d0:47:18:ed:97:52:c2:c8:79:27:83:f9:6d:f7:
06:b3:6c:15:23:21:7e:3f:a0:83:04:bc:7b:b1:27:e4:d0:d8:
31:88:4c:30:6f:15:b6:58:04:c5:a6:e3:0f:a8:b2:25:4a:a0:
f4:02:62:43:bb:c6:e4:0d:75:23:c6:aa:9d:62:78:14:df:27:
c2:d5:11:34:93:d3:60:c3:13:e4:ca:7c:72:01:f2:7a:25:7f:
69:79:20:40:7f:a6:d3:04:d1:4e:cd:ef:b5:ef:e6:66:04:2f:
19:42:db:46:ff:6d:ef:34:b1:7c:d4:2a:c0:cd:d7:b3:48:1a:
97:34:7a:35:0f:da:21:f3:b4:c8:8b:86:a5:41:89:40:b7:19:
7c:2c:4e:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 21:53:39 2024 by rpki-client on console-fra.rpki-client.org