Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/ehX_FzwyPyV_VrqaOsuIT6XbuUQ.roa
File: ehX_FzwyPyV_VrqaOsuIT6XbuUQ.roa (raw, json)
Hash identifier: 5zF4iSUlvLefN5X1xcizcdv/ZVrx8VoGJD3UFrklqmg=
Subject key identifier: 7A:15:FF:17:3C:32:3F:25:7F:56:BA:9A:3A:CB:88:4F:A5:DB:B9:44
Certificate issuer: /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Certificate serial: 018CC26D52B2738FD24CE62911BA885F30AF
Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/ehX_FzwyPyV_VrqaOsuIT6XbuUQ.roa
Signing time: Mon 01 Jan 2024 00:29:53 +0000
ROA not before: Mon 01 Jan 2024 00:29:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49755
IP address blocks: 185.177.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:52:b2:73:8f:d2:4c:e6:29:11:ba:88:5f:30:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Validity
Not Before: Jan 1 00:29:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7a15ff173c323f257f56ba9a3acb884fa5dbb944
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:8d:16:94:10:6e:e1:06:65:7a:dc:ff:f2:79:
64:a8:19:c1:ec:7b:e2:af:21:1c:ce:be:f1:33:e4:
10:f2:42:44:25:41:8b:d7:54:b6:bb:b9:23:89:57:
85:31:ef:9d:75:e0:b5:e3:1f:09:0f:94:f8:32:04:
88:01:ba:d7:46:dd:78:d1:66:f9:e0:a7:fe:46:69:
13:c1:0b:5d:1a:4b:da:79:39:d4:c9:f4:2d:2e:ca:
b1:8a:3a:b0:26:ca:4d:d1:8b:0c:a6:d8:97:22:aa:
38:60:98:a9:02:f4:c8:97:39:14:55:40:bb:d2:54:
85:39:e7:dd:a5:48:2a:69:ee:ae:b4:cb:5f:47:59:
c6:40:6b:a9:93:c5:0c:7a:75:2d:47:a8:80:d5:ea:
07:f5:d3:3a:4b:a6:8a:d2:72:af:90:0b:84:bf:16:
68:6a:21:20:9d:f9:82:c6:14:15:d6:ac:16:40:67:
59:6c:0b:34:81:a0:c0:21:82:25:9f:dd:cb:d9:b0:
e4:3a:f0:c7:5c:95:c4:6d:b4:e3:6e:29:26:f4:d6:
a1:3d:41:e8:3b:aa:b2:01:05:ab:c7:79:33:c2:d8:
c0:5d:97:5e:80:9e:24:95:41:ca:d9:15:8a:82:1f:
40:c7:c3:e6:9a:ac:3a:14:fd:73:5b:28:89:75:9c:
28:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:15:FF:17:3C:32:3F:25:7F:56:BA:9A:3A:CB:88:4F:A5:DB:B9:44
X509v3 Authority Key Identifier:
keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/ehX_FzwyPyV_VrqaOsuIT6XbuUQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.177.112.0/24
Signature Algorithm: sha256WithRSAEncryption
af:2b:43:32:eb:90:11:bf:21:c0:eb:56:87:d8:68:58:c7:f4:
f5:d6:7e:37:bc:e2:45:99:38:41:e3:8d:8a:e6:cb:f5:72:00:
eb:05:b6:34:ee:d4:cc:fb:45:7c:b3:97:dc:61:3f:d4:d5:bf:
89:73:82:09:0e:c6:4f:ee:d5:88:10:de:26:42:d5:62:68:7a:
3c:68:60:aa:cd:f9:5d:b3:97:62:d0:33:bd:72:62:0c:54:c2:
5a:64:7d:69:01:4f:38:96:08:dd:6c:60:e2:d7:45:5d:5d:77:
e5:2f:3a:8c:6e:3f:d4:51:ff:f0:d0:f1:7f:68:d0:02:71:76:
fd:77:5b:d8:36:73:cf:05:e3:7e:19:b7:a2:c6:4f:df:da:b1:
11:59:cc:00:df:86:ec:3c:ba:9b:55:d2:88:44:80:00:63:d3:
fe:43:cd:dc:b2:34:5d:1c:cd:35:89:9d:d7:78:d2:a4:41:5f:
62:35:83:09:3e:c9:e7:a3:93:19:ab:c2:5c:66:d7:7a:1e:c5:
2d:be:9d:c0:9d:7e:b1:b5:74:ac:3a:c6:e7:85:c4:d0:d5:79:
95:70:55:e4:8a:c7:59:ae:64:41:c0:a1:90:ce:84:34:4c:c0:
53:0f:63:35:18:b8:7c:d6:bc:06:ee:8d:06:d6:e8:67:ba:08:
c4:2c:4e:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 22:53:07 2024 by rpki-client on console-ams.rpki-client.org