Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/e6fd0d-a02b-49c2-9a2c-4dc2dd56d57f/1/pThv59hLlU0K6ZHvoIz-wSyXvl8.roa
File: pThv59hLlU0K6ZHvoIz-wSyXvl8.roa (raw, json)
Hash identifier: 8jKnnE/Bv9VKeyyocBiGuuotY3b2ogZ8cTpxfbu2E3Q=
Subject key identifier: A5:38:6F:E7:D8:4B:95:4D:0A:E9:91:EF:A0:8C:FE:C1:2C:97:BE:5F
Certificate issuer: /CN=7b018d2a51fef2d76c62600556c66d57cb7e9270
Certificate serial: 018CC34923CC5671D02A53718DCBAD034357
Authority key identifier: 7B:01:8D:2A:51:FE:F2:D7:6C:62:60:05:56:C6:6D:57:CB:7E:92:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ewGNKlH-8tdsYmAFVsZtV8t-knA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/e6fd0d-a02b-49c2-9a2c-4dc2dd56d57f/1/pThv59hLlU0K6ZHvoIz-wSyXvl8.roa
Signing time: Mon 01 Jan 2024 04:29:59 +0000
ROA not before: Mon 01 Jan 2024 04:29:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201596
IP address blocks: 185.47.248.0/22 maxlen: 24
185.58.136.0/22 maxlen: 24
141.195.32.0/19 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/e6fd0d-a02b-49c2-9a2c-4dc2dd56d57f/1/ewGNKlH-8tdsYmAFVsZtV8t-knA.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/e6fd0d-a02b-49c2-9a2c-4dc2dd56d57f/1/ewGNKlH-8tdsYmAFVsZtV8t-knA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ewGNKlH-8tdsYmAFVsZtV8t-knA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 19:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:23:cc:56:71:d0:2a:53:71:8d:cb:ad:03:43:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b018d2a51fef2d76c62600556c66d57cb7e9270
Validity
Not Before: Jan 1 04:29:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a5386fe7d84b954d0ae991efa08cfec12c97be5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:83:9d:b4:82:dd:0e:1c:dc:1e:62:38:db:24:
78:58:2e:05:2d:b0:1a:d0:32:5e:b6:ee:d3:43:53:
42:c2:bf:85:2d:52:3c:da:e4:1e:52:7c:fc:e9:60:
94:0d:0a:cc:98:70:ca:7f:f7:c3:72:64:0f:ad:52:
d7:f9:34:d0:81:c4:30:a7:f4:a4:90:f2:12:cb:89:
93:58:1d:46:8a:f2:0a:67:c0:36:91:49:69:65:f2:
1a:4f:4d:1d:0d:bd:d4:76:37:27:85:b3:99:61:e2:
20:fa:f0:c4:3d:9e:7a:0d:d7:73:4b:c8:53:68:7f:
8c:30:f8:a5:3f:2f:45:c7:a5:78:f4:b7:95:a1:67:
de:4c:6c:09:e4:76:2a:14:b7:2e:c3:86:ce:35:48:
c3:4e:62:e0:70:20:3f:6e:19:0c:24:87:92:71:de:
12:e0:5b:69:26:d1:a6:0d:a0:81:ce:99:43:f1:c3:
74:5f:8c:20:ff:a0:53:34:75:ae:04:a1:89:ac:f2:
bb:de:e6:eb:a6:0a:ec:c3:1d:3f:cd:fa:f1:db:38:
5b:74:3d:df:dd:ef:44:c3:dc:05:26:01:32:10:60:
21:be:99:a3:19:59:ba:ea:1b:23:f6:f0:16:21:4e:
17:82:18:5b:7e:03:29:53:3e:92:d7:43:de:9d:d5:
c1:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:38:6F:E7:D8:4B:95:4D:0A:E9:91:EF:A0:8C:FE:C1:2C:97:BE:5F
X509v3 Authority Key Identifier:
keyid:7B:01:8D:2A:51:FE:F2:D7:6C:62:60:05:56:C6:6D:57:CB:7E:92:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ewGNKlH-8tdsYmAFVsZtV8t-knA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e6fd0d-a02b-49c2-9a2c-4dc2dd56d57f/1/pThv59hLlU0K6ZHvoIz-wSyXvl8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e6fd0d-a02b-49c2-9a2c-4dc2dd56d57f/1/ewGNKlH-8tdsYmAFVsZtV8t-knA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.195.32.0/19
185.47.248.0/22
185.58.136.0/22
Signature Algorithm: sha256WithRSAEncryption
93:bd:38:0d:64:39:46:90:65:f2:4c:66:2f:33:38:71:82:9e:
c3:9f:f1:bd:de:53:94:25:63:36:44:3f:2b:28:26:ce:2b:e5:
cc:58:02:36:ef:ae:1c:bc:8c:07:d3:fc:5e:80:7f:83:0d:dd:
fa:ed:a6:e7:1c:c7:05:ad:51:6d:90:e5:44:5c:6e:05:9c:a6:
9c:34:e5:f9:c2:1f:c4:e9:74:12:c8:56:cf:02:e8:ef:fb:0c:
1e:79:10:5d:f4:b1:ad:bd:82:67:0f:15:ca:25:d1:a7:b0:07:
02:90:a5:34:37:83:df:95:56:2a:90:5f:52:e5:c0:2a:24:f5:
e9:6d:4d:91:58:d4:d1:a0:ba:bb:ad:19:78:28:60:e3:e4:3c:
f9:9c:71:7f:48:bb:bb:e8:85:9f:77:48:18:38:55:a8:24:44:
29:99:4d:f3:dc:9c:ea:e1:38:5f:9a:86:3a:2b:85:1e:b4:1d:
eb:01:c6:94:33:12:3b:22:6b:57:3c:cb:b4:a1:50:94:99:d7:
b0:7a:2c:41:26:b0:d1:76:77:d9:47:e5:13:98:f5:48:9b:ab:
45:7d:e1:4d:47:ba:8a:09:a8:21:4a:df:5a:b0:15:35:87:73:
d3:c1:b7:4e:e4:e0:51:83:7f:ce:c8:7e:ff:bf:ec:0b:66:31:
2a:3d:c6:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 20:33:24 2024 by rpki-client on console-fra.rpki-client.org