Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/42d821-74af-4ced-94ea-027b58e6fdc5/1/EiF_LcD6UwlqbXqGBrPbMG-Hy7U.roa
File: EiF_LcD6UwlqbXqGBrPbMG-Hy7U.roa (raw, json)
Hash identifier: JPeN+zG34aaCfchih5gIZuPInW+StwnlVQMW8e4yOC4=
Subject key identifier: 12:21:7F:2D:C0:FA:53:09:6A:6D:7A:86:06:B3:DB:30:6F:87:CB:B5
Certificate issuer: /CN=bef2158a0f2a42617a821a0b4fcc9c9a93f4246d
Certificate serial: 018CC3493564E5F04FE46138AC9A56C0D42F
Authority key identifier: BE:F2:15:8A:0F:2A:42:61:7A:82:1A:0B:4F:CC:9C:9A:93:F4:24:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vvIVig8qQmF6ghoLT8ycmpP0JG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/42d821-74af-4ced-94ea-027b58e6fdc5/1/EiF_LcD6UwlqbXqGBrPbMG-Hy7U.roa
Signing time: Mon 01 Jan 2024 04:30:04 +0000
ROA not before: Mon 01 Jan 2024 04:30:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 185.255.32.0/23 maxlen: 24
185.255.34.0/23 maxlen: 24
185.68.58.0/24 maxlen: 24
185.68.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/42d821-74af-4ced-94ea-027b58e6fdc5/1/vvIVig8qQmF6ghoLT8ycmpP0JG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/42d821-74af-4ced-94ea-027b58e6fdc5/1/vvIVig8qQmF6ghoLT8ycmpP0JG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/vvIVig8qQmF6ghoLT8ycmpP0JG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:35:64:e5:f0:4f:e4:61:38:ac:9a:56:c0:d4:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bef2158a0f2a42617a821a0b4fcc9c9a93f4246d
Validity
Not Before: Jan 1 04:30:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=12217f2dc0fa53096a6d7a8606b3db306f87cbb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b2:b4:be:a1:98:9f:84:b1:69:5c:5d:80:1e:
1b:84:71:0a:10:ec:b6:97:60:32:3c:72:c8:fa:ed:
9d:14:fb:7e:82:88:9e:6b:59:60:d8:0d:3d:c9:10:
34:ea:af:d8:7e:3b:e0:76:de:12:0e:58:3b:e9:54:
82:94:32:4a:89:41:7e:ee:92:71:18:81:4e:a9:17:
dc:26:4c:75:01:03:80:3a:2c:37:9e:96:2c:bd:e8:
87:0e:69:cc:d0:dd:45:ab:e6:13:12:f8:3b:c1:d1:
03:6e:6f:cd:bb:b1:f9:98:0a:d8:9a:be:4a:22:af:
34:e0:41:29:bb:b2:65:b4:5a:ec:48:bb:5e:c2:e0:
28:c3:2e:97:f2:c9:1f:52:12:9c:38:ff:68:01:2c:
96:0c:04:33:c2:ad:b6:07:18:ea:66:bc:6f:3e:fc:
17:78:91:8c:f5:e3:6c:c5:4e:72:05:6f:89:63:38:
0b:bb:db:e5:9a:94:a6:53:00:e3:41:1e:2c:a7:1d:
50:f5:64:bd:b3:de:a7:55:4a:3a:6d:d9:67:30:c0:
a9:da:81:84:78:72:a4:d6:f0:d2:b6:6b:d2:f9:29:
24:8b:2e:bd:ec:1f:fd:a0:b0:f0:51:3f:0b:52:e3:
27:c6:3e:53:3a:18:10:ae:93:f1:73:e8:50:64:17:
92:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:21:7F:2D:C0:FA:53:09:6A:6D:7A:86:06:B3:DB:30:6F:87:CB:B5
X509v3 Authority Key Identifier:
keyid:BE:F2:15:8A:0F:2A:42:61:7A:82:1A:0B:4F:CC:9C:9A:93:F4:24:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vvIVig8qQmF6ghoLT8ycmpP0JG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/42d821-74af-4ced-94ea-027b58e6fdc5/1/EiF_LcD6UwlqbXqGBrPbMG-Hy7U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/42d821-74af-4ced-94ea-027b58e6fdc5/1/vvIVig8qQmF6ghoLT8ycmpP0JG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.68.58.0/23
185.255.32.0/22
Signature Algorithm: sha256WithRSAEncryption
2e:98:7c:f5:e8:cb:88:81:69:28:11:ff:d1:b5:f2:76:57:27:
35:cb:9f:6c:5c:cf:60:8d:f1:22:f1:70:c5:61:bc:b4:da:a1:
7e:01:90:80:1d:30:29:65:31:64:8d:a2:73:dc:1e:76:1f:95:
f1:9c:72:4b:2c:43:9b:4f:e1:d6:ad:6a:bb:24:f9:a6:c0:cc:
5f:f3:94:34:c9:49:ef:c8:45:1c:04:bc:c2:e9:de:de:25:f7:
2e:c9:c4:8d:be:cb:a1:cc:1e:91:85:db:17:db:dc:7f:e7:a2:
a4:e1:d6:1a:3c:3a:fd:4d:6d:32:17:27:5b:2a:69:41:2f:6d:
ed:d3:1a:95:2b:15:3e:6d:71:51:74:67:eb:47:43:07:b3:27:
5b:a3:a8:31:a1:03:b0:a6:c4:30:1d:d5:a4:b1:4d:cd:16:65:
bf:2e:11:91:43:ab:84:77:6e:0d:11:f4:06:f0:a9:22:88:4f:
d4:93:2e:07:6a:0a:36:c5:60:b3:1d:db:10:f0:50:72:43:9f:
c9:2a:4c:ac:bc:03:c1:32:b3:a5:52:8d:f2:d7:f8:86:9c:67:
5d:54:49:1b:68:f8:37:c5:f6:29:43:59:60:55:45:6c:b5:a1:
67:f3:94:be:51:8d:60:23:4c:c2:ac:0a:59:22:6c:c9:64:35:
82:13:45:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:18:09 2024 by rpki-client on console-ams.rpki-client.org