Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/ba459f-846f-47a9-a625-671158a63c23/1/ke78RR6BPFslDbDRzHUzRwPxjXc.roa
File: ke78RR6BPFslDbDRzHUzRwPxjXc.roa (raw, json)
Hash identifier: Ux0mOJCZDyy3xjCZ2b+SyV8aMeYV3qqhBzUvT9/7txU=
Subject key identifier: 91:EE:FC:45:1E:81:3C:5B:25:0D:B0:D1:CC:75:33:47:03:F1:8D:77
Certificate issuer: /CN=0edda2c6074c56241f5c7e060caccb657f64e91c
Certificate serial: 018CC5DC116FF7096618B99C55B9FB8E2256
Authority key identifier: 0E:DD:A2:C6:07:4C:56:24:1F:5C:7E:06:0C:AC:CB:65:7F:64:E9:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dt2ixgdMViQfXH4GDKzLZX9k6Rw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/ba459f-846f-47a9-a625-671158a63c23/1/ke78RR6BPFslDbDRzHUzRwPxjXc.roa
Signing time: Mon 01 Jan 2024 16:29:43 +0000
ROA not before: Mon 01 Jan 2024 16:29:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204737
IP address blocks: 185.242.52.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/ba459f-846f-47a9-a625-671158a63c23/1/Dt2ixgdMViQfXH4GDKzLZX9k6Rw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/ba459f-846f-47a9-a625-671158a63c23/1/Dt2ixgdMViQfXH4GDKzLZX9k6Rw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dt2ixgdMViQfXH4GDKzLZX9k6Rw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Sep 2024 13:50:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:11:6f:f7:09:66:18:b9:9c:55:b9:fb:8e:22:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0edda2c6074c56241f5c7e060caccb657f64e91c
Validity
Not Before: Jan 1 16:29:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=91eefc451e813c5b250db0d1cc75334703f18d77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:77:d1:5a:bf:09:a8:2b:d3:fb:02:be:d5:e9:
40:c2:d3:56:38:6a:b4:27:8f:38:de:b2:db:78:bf:
8c:fd:1e:34:9b:84:cb:c1:c4:8b:51:c1:64:f0:6e:
a1:90:aa:97:29:90:c1:56:0f:57:21:da:fd:f1:a0:
10:42:0d:91:4f:16:e4:5b:36:74:0e:2e:16:f4:b3:
7f:45:87:7e:88:07:5e:a0:a7:08:04:21:ea:e3:04:
f8:f2:b3:94:83:4d:a6:4f:1e:d4:5b:e6:9a:91:61:
74:ee:ac:b9:3f:8a:4a:18:61:ac:3e:d2:1e:9d:70:
94:5b:a9:12:eb:24:8b:cc:4c:92:1a:dd:4b:a6:12:
b4:a7:cd:cb:21:c2:4b:dd:5c:8e:b6:f7:c7:62:ca:
f1:5a:83:b0:6c:48:58:89:11:99:9c:0a:c1:a4:bd:
2f:b4:d1:db:13:3a:43:db:7b:08:0e:20:0a:16:1c:
94:bc:c5:7a:0f:32:6d:c1:2d:92:e2:b6:25:ce:1f:
f7:86:b5:8d:db:fd:08:b7:b6:2a:b6:5b:a7:1f:4d:
c6:c4:9b:d3:b5:de:24:ec:2c:c8:b1:f7:cb:5e:79:
03:56:bb:f3:d3:f4:86:0f:eb:f2:31:97:d7:51:95:
94:f5:37:a7:18:07:40:56:38:61:74:37:d6:38:01:
8e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:EE:FC:45:1E:81:3C:5B:25:0D:B0:D1:CC:75:33:47:03:F1:8D:77
X509v3 Authority Key Identifier:
keyid:0E:DD:A2:C6:07:4C:56:24:1F:5C:7E:06:0C:AC:CB:65:7F:64:E9:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dt2ixgdMViQfXH4GDKzLZX9k6Rw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ba459f-846f-47a9-a625-671158a63c23/1/ke78RR6BPFslDbDRzHUzRwPxjXc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ba459f-846f-47a9-a625-671158a63c23/1/Dt2ixgdMViQfXH4GDKzLZX9k6Rw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.242.52.0/22
Signature Algorithm: sha256WithRSAEncryption
4c:7b:3c:5a:bc:1a:88:7a:9a:cd:aa:16:36:71:2c:b0:8e:51:
d4:87:16:13:81:7b:d9:1f:7b:96:1b:06:99:3f:35:4f:99:fa:
9d:31:7d:97:bf:ef:69:34:c4:bf:a4:a6:b1:8c:ec:e4:ca:3f:
3a:1e:b2:a9:a1:d6:32:6b:05:89:85:65:0f:cd:16:a6:1b:7a:
5c:41:14:51:c9:f5:9f:08:1f:83:b2:77:84:91:b4:1e:f8:05:
89:9d:9a:3d:46:76:a4:bc:78:2e:e4:2c:83:bd:82:60:91:2c:
86:12:0b:5b:41:ee:b6:64:8e:1a:e9:2d:d0:b9:b5:be:c1:f7:
f4:fa:ec:9c:de:93:66:47:0e:60:6e:f3:cc:b8:56:e8:77:e9:
f2:86:a5:62:61:cf:9e:89:00:a9:9e:98:70:da:e9:e2:2a:7c:
53:9d:82:e4:83:c1:c4:d5:ec:7f:45:1d:1d:74:88:26:5a:a9:
60:d3:5c:22:ba:17:bf:ee:53:a5:ee:90:a2:2b:80:70:ba:65:
b9:09:ce:67:74:0a:0a:7a:3d:b4:65:d9:d9:0c:9f:fd:ae:ed:
48:d3:30:02:ac:d3:b1:e4:d3:e5:11:96:5f:24:b1:c6:e2:ca:
81:0c:f3:e4:dd:4a:64:f9:1c:2d:3e:e3:7a:b8:3b:cb:24:f5:
57:4f:93:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 23:42:12 2024 by rpki-client on console-ams.rpki-client.org