Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/5cfd38-5e37-43af-a1b0-ad012aff5172/1/fF7gjJfryX9t3WhI9PVv9fWB1gs.roa
File: fF7gjJfryX9t3WhI9PVv9fWB1gs.roa (raw, json)
Hash identifier: UXAsnxOMzJR3B3NvYNhS7BvXDghj8ctTIq9g8OOOYwk=
Subject key identifier: 7C:5E:E0:8C:97:EB:C9:7F:6D:DD:68:48:F4:F5:6F:F5:F5:81:D6:0B
Certificate issuer: /CN=65c5dad544df49716085ebe80dbe82eb68a209c9
Certificate serial: 018CC64B473E44C070285A35A7FB2EF36D16
Authority key identifier: 65:C5:DA:D5:44:DF:49:71:60:85:EB:E8:0D:BE:82:EB:68:A2:09:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZcXa1UTfSXFghevoDb6C62iiCck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/5cfd38-5e37-43af-a1b0-ad012aff5172/1/fF7gjJfryX9t3WhI9PVv9fWB1gs.roa
Signing time: Mon 01 Jan 2024 18:31:11 +0000
ROA not before: Mon 01 Jan 2024 18:31:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39537
IP address blocks: 185.202.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/5cfd38-5e37-43af-a1b0-ad012aff5172/1/ZcXa1UTfSXFghevoDb6C62iiCck.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/5cfd38-5e37-43af-a1b0-ad012aff5172/1/ZcXa1UTfSXFghevoDb6C62iiCck.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZcXa1UTfSXFghevoDb6C62iiCck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:47:3e:44:c0:70:28:5a:35:a7:fb:2e:f3:6d:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65c5dad544df49716085ebe80dbe82eb68a209c9
Validity
Not Before: Jan 1 18:31:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7c5ee08c97ebc97f6ddd6848f4f56ff5f581d60b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:63:ec:af:25:23:ee:64:07:75:0e:35:4e:84:
0b:57:c3:8d:a0:1f:8a:7f:ac:7d:a9:81:9a:2a:9a:
e8:97:94:0a:a7:06:48:fb:c4:93:a3:5f:3b:cd:65:
d1:af:eb:75:dc:01:0d:0b:90:9a:ab:e9:f3:bc:b2:
e7:06:9d:e4:19:87:b9:a6:d6:1d:de:23:19:0e:39:
a2:1b:eb:50:77:0b:0f:6b:b2:75:c3:87:7d:38:27:
d7:42:3f:2f:93:22:be:1e:84:50:a3:2b:25:46:92:
72:b4:a7:76:52:6b:3b:49:90:06:40:b7:ce:5b:b4:
32:24:8b:4d:83:f2:72:52:7c:5e:a5:13:ef:15:ad:
66:2e:6f:3b:98:66:14:21:2a:51:2e:08:7a:c5:4f:
ef:63:29:9e:a3:be:ca:6f:4c:bc:3b:b9:c6:4b:27:
d8:a2:ee:2b:b5:2d:cb:a3:ba:77:d6:a9:18:8f:df:
bf:69:89:af:08:04:16:2b:9c:fe:57:d5:21:86:30:
c7:44:25:6b:6e:09:bf:c9:6a:20:44:ce:24:d8:99:
78:04:ea:a9:86:a9:ab:b6:5f:7f:8b:f9:1b:08:3a:
00:ba:de:32:bf:73:54:44:71:24:8e:f6:be:02:f9:
e0:8c:60:74:f9:9a:ee:a7:47:03:3c:aa:ae:ff:29:
45:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:5E:E0:8C:97:EB:C9:7F:6D:DD:68:48:F4:F5:6F:F5:F5:81:D6:0B
X509v3 Authority Key Identifier:
keyid:65:C5:DA:D5:44:DF:49:71:60:85:EB:E8:0D:BE:82:EB:68:A2:09:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZcXa1UTfSXFghevoDb6C62iiCck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/5cfd38-5e37-43af-a1b0-ad012aff5172/1/fF7gjJfryX9t3WhI9PVv9fWB1gs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/5cfd38-5e37-43af-a1b0-ad012aff5172/1/ZcXa1UTfSXFghevoDb6C62iiCck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.202.115.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:9b:5f:65:d6:29:f2:89:0d:14:95:e8:71:cd:64:c5:9d:e0:
3b:be:63:6f:77:27:e3:07:c3:b2:8f:eb:ed:a8:2e:39:96:1e:
76:a3:4b:b1:d0:b4:fd:b0:b5:8b:7a:98:be:70:b1:45:ed:36:
5c:91:9e:46:b9:e4:8b:e9:25:88:94:74:d4:b7:a0:bd:cb:a6:
82:e2:0f:e7:8f:37:b7:42:c9:e4:96:b2:e4:6e:5d:19:17:d5:
71:5b:8a:95:e3:c2:3f:23:4c:4c:7f:e3:3e:d6:41:36:ad:d0:
6b:32:5d:0c:6d:74:8e:26:46:28:14:7d:94:e4:45:b1:56:a0:
1f:2f:55:8c:45:ff:9c:d0:c8:e8:c9:16:4e:b2:21:55:f1:69:
18:c4:69:a0:9d:33:4a:68:eb:e6:cb:e8:27:c2:0a:00:dd:65:
1f:9f:68:a5:39:f3:fa:0e:a0:4b:9e:1a:b7:a7:a6:64:cf:16:
ac:55:2e:60:cb:d3:9c:61:cd:04:1b:56:92:7a:b4:0b:1c:e4:
60:6b:9e:a6:5d:bc:46:f0:c9:9c:7e:79:82:af:75:e7:aa:03:
8d:ba:bc:27:82:ab:ef:4a:d0:df:8c:93:6b:d5:4d:ad:ec:7b:
4d:c1:70:b3:6c:ec:c1:11:0f:f4:64:90:4c:b4:21:66:c7:a5:
f2:51:ae:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:23:28 2024 by rpki-client on console-fra.rpki-client.org