Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/25b7b8-c302-4dda-898a-4825e18d7301/1/4P4-Fi6IpM8nfFh2ocUjMln9RTQ.roa
File: 4P4-Fi6IpM8nfFh2ocUjMln9RTQ.roa (raw, json)
Hash identifier: w85HyE+B0I+NAzacXmD+BoVT4gE8RGqjL2SeTrzfq3w=
Subject key identifier: E0:FE:3E:16:2E:88:A4:CF:27:7C:58:76:A1:C5:23:32:59:FD:45:34
Certificate issuer: /CN=79bb7749abde6f5da4eb1c6ed1c57681617846b0
Certificate serial: 018CC348E9FEF546CACBF7927E4576B45E0E
Authority key identifier: 79:BB:77:49:AB:DE:6F:5D:A4:EB:1C:6E:D1:C5:76:81:61:78:46:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ebt3Saveb12k6xxu0cV2gWF4RrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/25b7b8-c302-4dda-898a-4825e18d7301/1/4P4-Fi6IpM8nfFh2ocUjMln9RTQ.roa
Signing time: Mon 01 Jan 2024 04:29:44 +0000
ROA not before: Mon 01 Jan 2024 04:29:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15623
IP address blocks: 185.157.0.0/23 maxlen: 23
185.157.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/25b7b8-c302-4dda-898a-4825e18d7301/1/ebt3Saveb12k6xxu0cV2gWF4RrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/25b7b8-c302-4dda-898a-4825e18d7301/1/ebt3Saveb12k6xxu0cV2gWF4RrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ebt3Saveb12k6xxu0cV2gWF4RrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 04:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:e9:fe:f5:46:ca:cb:f7:92:7e:45:76:b4:5e:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79bb7749abde6f5da4eb1c6ed1c57681617846b0
Validity
Not Before: Jan 1 04:29:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e0fe3e162e88a4cf277c5876a1c5233259fd4534
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:40:17:72:aa:10:9b:a5:dc:8b:c7:13:bf:93:
8a:b7:e8:08:ef:a0:3b:9a:69:fe:0a:86:72:3b:15:
f7:9f:d7:b4:36:70:1f:8b:7a:7e:85:fe:fe:9d:75:
ce:8b:8b:bd:1d:10:ef:d3:65:d6:61:74:56:7a:27:
af:2c:5f:46:15:f8:34:5e:da:aa:a9:2c:13:b5:e9:
97:7c:77:03:69:c7:b5:30:87:ce:f4:cf:15:ff:60:
c9:65:09:13:c4:a8:74:c7:5b:ca:a9:03:10:ef:0e:
9c:4a:a9:cc:3c:05:af:1a:d3:91:e9:71:e9:8c:47:
38:dc:dc:d1:c5:37:f1:4f:23:fd:47:7f:24:3e:3b:
b6:e2:68:bd:e1:95:88:d2:11:64:95:bc:2e:18:31:
2b:0e:ce:c4:a9:73:d3:a7:64:bc:ba:7e:0f:f0:a6:
ed:80:e6:f1:9f:e0:54:fc:e5:59:3b:de:0b:22:c8:
aa:73:12:d1:9a:ff:c7:df:59:d2:5d:7e:38:93:95:
d8:76:29:d8:78:87:d2:2b:64:29:3d:61:42:5e:0f:
2e:c8:57:85:f0:29:62:35:de:5a:ce:7d:4f:ed:29:
e5:8f:a1:54:ad:f4:ec:ae:08:9e:81:a1:f7:87:6e:
83:62:2c:33:63:d2:d9:4b:2c:05:e9:e9:83:a7:1c:
62:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:FE:3E:16:2E:88:A4:CF:27:7C:58:76:A1:C5:23:32:59:FD:45:34
X509v3 Authority Key Identifier:
keyid:79:BB:77:49:AB:DE:6F:5D:A4:EB:1C:6E:D1:C5:76:81:61:78:46:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ebt3Saveb12k6xxu0cV2gWF4RrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/25b7b8-c302-4dda-898a-4825e18d7301/1/4P4-Fi6IpM8nfFh2ocUjMln9RTQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/25b7b8-c302-4dda-898a-4825e18d7301/1/ebt3Saveb12k6xxu0cV2gWF4RrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.157.0.0-185.157.2.255
Signature Algorithm: sha256WithRSAEncryption
33:b6:ea:ed:02:56:13:27:b0:2d:8f:df:20:5d:42:64:ee:3a:
c5:4f:fb:e8:bd:ce:f4:87:99:2c:bb:d5:6f:5d:77:17:21:ed:
23:77:7d:09:8b:6d:4c:2a:88:ab:fb:89:11:4e:a0:a6:f8:0a:
d4:af:6e:1b:7d:de:00:a0:48:0a:4b:e3:02:ce:d1:01:a1:3a:
24:3a:db:d0:93:87:74:01:40:4d:a4:03:df:5b:89:0e:85:25:
f6:33:4b:c7:b6:a3:02:44:ff:18:52:5c:29:62:69:ce:9e:75:
91:24:c4:10:d7:56:57:cc:b8:25:ac:1a:cd:97:ba:e3:d6:a1:
fb:e8:3c:da:1d:bc:b2:1f:ad:99:20:56:4e:d4:c0:cb:ac:a0:
b7:90:6f:f0:55:72:96:77:23:9b:6c:c7:6a:4a:f4:46:cb:48:
6b:ae:56:0e:9c:88:2c:6b:bb:cb:16:05:4f:95:05:db:d2:b9:
53:f3:0e:bb:6d:ef:88:da:5e:d5:00:bf:7a:35:6f:ec:22:a5:
7f:40:02:8f:1b:16:82:b5:44:8a:02:48:f3:fd:09:44:fe:bc:
a8:9f:11:46:f4:cf:b9:a3:78:c6:e4:1b:37:f1:95:da:68:cd:
8f:0c:59:89:1c:02:61:38:82:62:46:da:f4:f7:a8:e8:46:75:
16:0f:d1:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:59:43 2024 by rpki-client on console-fra.rpki-client.org