Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/d608b8-501f-491f-a2f2-10e57f56a17a/1/fiSR26SnWhHRj9J5wnOnqHr2quM.roa
File: fiSR26SnWhHRj9J5wnOnqHr2quM.roa (raw, json)
Hash identifier: K+FoLJF2DwxQbxdWxVr1Jm/8lLHl+uMnsQCOfPR4usg=
Subject key identifier: 7E:24:91:DB:A4:A7:5A:11:D1:8F:D2:79:C2:73:A7:A8:7A:F6:AA:E3
Certificate issuer: /CN=4d77ccd7a94415dfc68ccca874e94c2e8c22202d
Certificate serial: 018CC4253C0EE58A14EECE9DE51C8BADA743
Authority key identifier: 4D:77:CC:D7:A9:44:15:DF:C6:8C:CC:A8:74:E9:4C:2E:8C:22:20:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TXfM16lEFd_GjMyodOlMLowiIC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/d608b8-501f-491f-a2f2-10e57f56a17a/1/fiSR26SnWhHRj9J5wnOnqHr2quM.roa
Signing time: Mon 01 Jan 2024 08:30:23 +0000
ROA not before: Mon 01 Jan 2024 08:30:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 136557
IP address blocks: 185.184.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/d608b8-501f-491f-a2f2-10e57f56a17a/1/TXfM16lEFd_GjMyodOlMLowiIC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/d608b8-501f-491f-a2f2-10e57f56a17a/1/TXfM16lEFd_GjMyodOlMLowiIC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/TXfM16lEFd_GjMyodOlMLowiIC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 May 2024 13:02:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:3c:0e:e5:8a:14:ee:ce:9d:e5:1c:8b:ad:a7:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d77ccd7a94415dfc68ccca874e94c2e8c22202d
Validity
Not Before: Jan 1 08:30:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7e2491dba4a75a11d18fd279c273a7a87af6aae3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:99:66:d0:c4:20:a5:36:f1:77:f9:39:60:25:
18:4d:ea:18:f1:b6:80:ef:f7:50:35:cc:33:d9:7f:
a5:b3:29:91:dc:0c:d6:42:33:ef:f7:00:cf:78:bc:
05:a5:ac:39:9a:4e:68:c8:20:17:f9:58:4c:df:7c:
dd:62:cd:3e:13:fb:da:05:7e:ee:07:28:48:ea:89:
d4:c0:67:0d:ed:3a:e8:b0:9d:45:6d:cd:1b:2e:4b:
a4:04:1e:54:cd:fd:39:5f:af:8f:09:f4:1b:f1:45:
71:52:3b:fa:9b:2e:4f:2c:e0:20:71:9c:0e:76:6f:
73:42:d1:7f:e0:d2:85:ee:f0:7b:6d:de:25:84:26:
9b:17:b8:1f:75:15:4e:00:19:66:d8:24:e6:a3:0e:
ad:a6:d1:02:60:da:74:3d:47:2b:ed:8b:66:cb:10:
ec:7d:6c:fe:20:60:b8:28:75:4f:aa:71:4a:00:0c:
51:5a:01:9c:a3:fd:44:ff:05:70:1d:f2:e4:18:22:
ef:1f:ce:7d:1c:67:64:9e:2c:ac:2b:5a:d5:ab:e8:
1b:00:4f:44:13:c5:3e:a6:2c:13:33:b8:e3:2c:5c:
3e:e3:45:cb:d7:da:f4:c6:ae:bf:09:4c:42:da:e6:
2c:33:26:f4:0b:e8:5a:a7:63:2f:19:89:15:84:28:
db:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:24:91:DB:A4:A7:5A:11:D1:8F:D2:79:C2:73:A7:A8:7A:F6:AA:E3
X509v3 Authority Key Identifier:
keyid:4D:77:CC:D7:A9:44:15:DF:C6:8C:CC:A8:74:E9:4C:2E:8C:22:20:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TXfM16lEFd_GjMyodOlMLowiIC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d608b8-501f-491f-a2f2-10e57f56a17a/1/fiSR26SnWhHRj9J5wnOnqHr2quM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d608b8-501f-491f-a2f2-10e57f56a17a/1/TXfM16lEFd_GjMyodOlMLowiIC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.184.152.0/24
Signature Algorithm: sha256WithRSAEncryption
e9:3e:ff:32:cc:79:85:b5:49:a7:8f:c2:4a:49:e0:6c:ee:16:
02:39:3e:b8:d2:1b:ba:e7:74:e3:6b:11:8b:61:bc:c1:4a:72:
92:38:76:ae:b7:b0:ae:cc:76:6d:d1:c5:c5:8a:e0:f8:ac:8c:
ec:9b:83:af:0d:d3:a0:0f:12:1d:3c:00:a7:57:29:62:1d:01:
48:ca:ee:2f:76:15:32:08:49:cd:78:89:0b:29:50:0f:c2:a9:
57:8b:b7:f0:ff:fe:78:40:f0:75:d5:4f:e8:11:a3:8b:53:83:
a2:05:7d:c1:f8:50:d9:a5:0a:10:fe:68:cf:93:60:93:16:87:
e6:8f:83:0e:51:e6:e5:48:a9:fe:bd:5b:38:e2:2d:d0:df:ff:
a5:bc:5d:04:fa:83:44:5f:65:91:5f:ba:d8:86:88:14:32:be:
6d:f0:d3:fd:6d:4b:31:60:b5:d6:b6:ef:8a:92:31:51:c1:65:
95:06:88:71:97:de:e5:73:2c:b2:0b:48:93:64:16:96:bd:de:
b4:d1:bf:21:19:20:6b:3f:41:c1:7d:47:4c:02:d6:b4:bd:be:
04:1e:66:2d:9c:9d:68:55:d6:b4:0e:65:a8:99:f9:9b:15:ec:
30:1e:a8:24:5e:83:fe:c1:ff:07:ff:38:0a:91:e7:66:67:a3:
88:66:71:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 28 20:21:25 2024 by rpki-client on console-fra.rpki-client.org