Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/666dd5-cfa3-40e7-aa30-98f940e4d7c1/1/rEWCkMB3rXxrZBkWTLsZtBapGfc.roa
File: rEWCkMB3rXxrZBkWTLsZtBapGfc.roa (raw, json)
Hash identifier: RY+L+Mmxw+KkG2hlJ+aGk0OhsxAsLxH4vhh+dSX307o=
Subject key identifier: AC:45:82:90:C0:77:AD:7C:6B:64:19:16:4C:BB:19:B4:16:A9:19:F7
Certificate issuer: /CN=184c7c0364f1093cfc584c93037024104fb4854a
Certificate serial: 018CC49391B0E80B8714B38FE7EA7425BB61
Authority key identifier: 18:4C:7C:03:64:F1:09:3C:FC:58:4C:93:03:70:24:10:4F:B4:85:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GEx8A2TxCTz8WEyTA3AkEE-0hUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/666dd5-cfa3-40e7-aa30-98f940e4d7c1/1/rEWCkMB3rXxrZBkWTLsZtBapGfc.roa
Signing time: Mon 01 Jan 2024 10:30:54 +0000
ROA not before: Mon 01 Jan 2024 10:30:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61094
IP address blocks: 185.143.192.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/666dd5-cfa3-40e7-aa30-98f940e4d7c1/1/GEx8A2TxCTz8WEyTA3AkEE-0hUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/666dd5-cfa3-40e7-aa30-98f940e4d7c1/1/GEx8A2TxCTz8WEyTA3AkEE-0hUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/GEx8A2TxCTz8WEyTA3AkEE-0hUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:91:b0:e8:0b:87:14:b3:8f:e7:ea:74:25:bb:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=184c7c0364f1093cfc584c93037024104fb4854a
Validity
Not Before: Jan 1 10:30:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ac458290c077ad7c6b6419164cbb19b416a919f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ce:a4:81:e7:ef:32:c5:b4:5e:c0:ec:45:32:
78:fa:a1:a0:12:e8:82:4d:13:48:07:62:d4:13:db:
66:b9:36:99:3e:e4:86:5d:b3:00:8a:52:a0:c4:bf:
28:f3:d3:40:0d:6e:23:b7:1a:23:f4:b2:1f:02:23:
48:6c:a3:a8:8c:b3:5d:53:1c:c4:dd:77:a5:e7:d5:
da:56:4d:65:0b:ea:f1:15:34:c1:29:c8:83:40:d2:
80:bd:34:92:8d:25:b5:81:ce:1c:90:83:43:fe:9f:
06:78:b0:19:b4:20:b1:e3:83:72:49:0b:1f:1c:85:
8a:8c:08:20:fa:e5:44:4d:4e:6f:3b:45:99:cd:b2:
8b:f3:bf:c5:92:dc:57:79:fa:b4:4a:73:92:d9:f3:
9e:2e:53:db:90:38:b3:1b:17:fe:fc:d9:25:50:da:
30:c4:21:cf:fb:11:68:2a:b8:ef:fc:e0:d0:02:ee:
14:d6:b6:ed:91:a3:de:78:b6:93:d6:2c:e9:39:0c:
0f:ef:1f:1f:f0:a9:65:50:6a:ee:d6:d6:79:ae:64:
87:ba:39:35:f0:67:da:ef:0e:b7:28:b8:9f:91:9d:
30:c0:fe:f6:89:e0:00:87:7c:65:fe:a4:c4:af:be:
09:43:77:9d:f0:da:55:99:62:5a:97:fe:be:a2:c7:
bc:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:45:82:90:C0:77:AD:7C:6B:64:19:16:4C:BB:19:B4:16:A9:19:F7
X509v3 Authority Key Identifier:
keyid:18:4C:7C:03:64:F1:09:3C:FC:58:4C:93:03:70:24:10:4F:B4:85:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GEx8A2TxCTz8WEyTA3AkEE-0hUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/666dd5-cfa3-40e7-aa30-98f940e4d7c1/1/rEWCkMB3rXxrZBkWTLsZtBapGfc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/666dd5-cfa3-40e7-aa30-98f940e4d7c1/1/GEx8A2TxCTz8WEyTA3AkEE-0hUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.143.192.0/22
Signature Algorithm: sha256WithRSAEncryption
39:58:f4:74:1b:16:22:43:ba:03:27:2b:29:49:ef:aa:1f:03:
e3:82:49:d1:53:05:3f:1c:16:f7:28:96:30:92:5e:9e:69:5b:
30:9d:3d:fc:48:f6:bf:ca:e0:1f:d3:a4:f2:4a:3b:1e:11:e8:
02:17:1a:29:25:b7:97:84:37:1b:12:e5:33:10:46:dd:83:a1:
81:99:a9:90:85:81:27:97:0b:87:83:12:a5:99:2c:49:20:96:
d4:91:35:b7:f8:a1:c4:fc:a2:8c:f9:e5:40:15:78:a4:de:e0:
0c:9a:0a:4b:ae:e9:b1:ec:64:e1:99:44:c4:85:e0:50:29:6b:
d1:54:a9:c5:d7:d2:36:94:9e:ab:8f:56:5b:05:84:b0:cf:2c:
2a:44:ef:2d:6e:60:da:2a:21:b4:a5:db:ec:dd:2a:c4:81:c1:
8e:08:fe:29:db:4f:a3:86:f0:e2:8a:45:c9:68:2f:70:d4:47:
9b:8d:e6:31:ee:71:cb:7a:6c:38:a5:ed:64:80:59:9b:3d:4e:
65:67:99:95:fe:c8:e7:a4:e4:5a:ef:f6:3b:e3:c0:01:4a:19:
be:11:cc:bb:f3:37:b3:0a:ef:11:d2:56:d9:cb:0f:96:0d:2e:
b6:bb:ce:48:a7:c1:c6:a1:12:eb:ab:92:89:1c:48:55:f1:0d:
c0:66:99:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:11:05 2024 by rpki-client on console-fra.rpki-client.org