Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/ecdd93-1aa0-4b9a-b6aa-ecb3126fc8ed/1/draUA7cJWxml56_41HFEOeWgKwo.roa
File: draUA7cJWxml56_41HFEOeWgKwo.roa (raw, json)
Hash identifier: hH3qjGPGdpe639DGMC06i4ooFRBVGXV/5BfstTFrbj8=
Subject key identifier: 76:B6:94:03:B7:09:5B:19:A5:E7:AF:F8:D4:71:44:39:E5:A0:2B:0A
Certificate issuer: /CN=e0cde2c1fce3d6fe2185347dd89dcfd13ebbb151
Certificate serial: 018CC9BC884DBA88A28A065BC80C800CC8D9
Authority key identifier: E0:CD:E2:C1:FC:E3:D6:FE:21:85:34:7D:D8:9D:CF:D1:3E:BB:B1:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4M3iwfzj1v4hhTR92J3P0T67sVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/ecdd93-1aa0-4b9a-b6aa-ecb3126fc8ed/1/draUA7cJWxml56_41HFEOeWgKwo.roa
Signing time: Tue 02 Jan 2024 10:33:45 +0000
ROA not before: Tue 02 Jan 2024 10:33:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47123
IP address blocks: 185.141.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/ecdd93-1aa0-4b9a-b6aa-ecb3126fc8ed/1/4M3iwfzj1v4hhTR92J3P0T67sVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/ecdd93-1aa0-4b9a-b6aa-ecb3126fc8ed/1/4M3iwfzj1v4hhTR92J3P0T67sVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4M3iwfzj1v4hhTR92J3P0T67sVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:88:4d:ba:88:a2:8a:06:5b:c8:0c:80:0c:c8:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0cde2c1fce3d6fe2185347dd89dcfd13ebbb151
Validity
Not Before: Jan 2 10:33:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=76b69403b7095b19a5e7aff8d4714439e5a02b0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:a1:8d:0d:ce:4f:b0:09:e6:14:c2:16:5c:5b:
48:2d:6e:88:72:ec:fc:6d:02:0a:38:f5:c3:cf:f7:
af:fb:93:6f:74:60:40:d9:3a:e5:9c:5b:de:34:63:
43:11:99:6d:24:9e:83:95:23:6d:bf:ce:68:a0:76:
d3:4d:68:3d:46:65:e8:d0:00:3b:4a:c5:c3:2f:52:
14:cf:f9:a0:a8:97:4f:e1:b6:12:4a:43:8e:5c:1f:
df:4c:06:9e:d1:13:44:10:03:e7:a6:6c:bd:05:de:
6c:d0:6c:b4:83:b0:07:b1:8b:10:b4:93:e4:9f:c7:
46:9f:a0:dd:d4:44:5a:56:7c:de:c6:b1:be:a3:31:
81:0b:83:43:63:b0:b8:20:1f:79:99:da:c3:8c:f3:
a6:e6:b4:c3:aa:2c:01:8a:27:dc:88:06:d2:c0:05:
2d:f3:95:3f:b8:74:da:b7:0b:62:b6:90:2e:d1:5e:
a2:91:c7:4c:83:09:2b:d3:23:56:d4:c6:e1:cb:81:
72:6f:1b:9f:71:75:3a:54:be:f6:8d:23:9d:4a:87:
84:19:7c:13:75:ad:eb:e0:e8:73:a6:6a:f3:21:1b:
a8:d4:9c:5a:5a:f2:dd:e3:66:b7:8c:77:96:03:eb:
5a:56:40:3a:61:09:ab:b2:7a:72:5f:f6:07:68:bb:
48:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:B6:94:03:B7:09:5B:19:A5:E7:AF:F8:D4:71:44:39:E5:A0:2B:0A
X509v3 Authority Key Identifier:
keyid:E0:CD:E2:C1:FC:E3:D6:FE:21:85:34:7D:D8:9D:CF:D1:3E:BB:B1:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4M3iwfzj1v4hhTR92J3P0T67sVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/ecdd93-1aa0-4b9a-b6aa-ecb3126fc8ed/1/draUA7cJWxml56_41HFEOeWgKwo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/ecdd93-1aa0-4b9a-b6aa-ecb3126fc8ed/1/4M3iwfzj1v4hhTR92J3P0T67sVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.141.111.0/24
Signature Algorithm: sha256WithRSAEncryption
17:2e:a1:0e:a8:2a:06:5d:62:ea:de:05:d9:cc:20:62:7b:34:
4d:27:83:e1:78:c3:7d:43:a4:f8:08:93:8e:cb:89:16:28:50:
33:ca:78:44:1b:70:0b:44:7f:dd:9f:3f:53:3d:2b:e5:fc:96:
e7:a0:74:e5:89:20:9c:40:b2:4e:f9:05:cd:b8:f8:50:e2:32:
41:3a:7c:82:60:4c:37:e5:07:7a:9f:5a:b5:31:a9:05:96:e5:
e7:54:6f:63:10:79:1e:f5:44:c6:5f:58:8c:79:35:16:a2:91:
87:27:9b:d1:2e:11:11:80:71:39:f2:a3:c6:1c:42:62:34:db:
a1:56:04:dd:c9:1b:16:e8:fb:fe:79:4a:2f:f9:18:81:33:39:
bd:d1:bb:96:a6:d8:a3:03:24:59:3b:2c:a8:95:7d:a2:59:6b:
79:52:5e:eb:d4:cb:b0:2d:e9:e5:00:24:a1:3b:6b:32:0b:74:
95:43:85:06:f4:15:cb:48:94:09:1e:0a:e7:4a:ce:75:48:94:
fd:46:00:14:5d:60:61:14:07:a2:3d:47:46:da:1c:c0:28:fa:
56:35:7f:47:83:7e:ce:1d:b8:8d:df:83:fc:97:93:e0:25:eb:
75:d9:63:b4:2c:a6:f1:aa:a2:f1:a3:41:84:9f:b4:ff:82:a8:
c4:e3:32:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 21:20:44 2024 by rpki-client on console-ams.rpki-client.org