Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/e6656b-80c8-435e-bc1d-d6e715523f39/1/ezpf81mVA8Mo_HZd5p_y-ACnwiI.roa
File: ezpf81mVA8Mo_HZd5p_y-ACnwiI.roa (raw, json)
Hash identifier: 1orCjUx7Ph7+5zaHZUemCVHHGpabpE+hgxYJxFIsd4Q=
Subject key identifier: 7B:3A:5F:F3:59:95:03:C3:28:FC:76:5D:E6:9F:F2:F8:00:A7:C2:22
Certificate issuer: /CN=fad7e14a262560191c66576998e9c69b89c3c136
Certificate serial: 018CC7273F2347756F77918019E6AB672540
Authority key identifier: FA:D7:E1:4A:26:25:60:19:1C:66:57:69:98:E9:C6:9B:89:C3:C1:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-tfhSiYlYBkcZldpmOnGm4nDwTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/e6656b-80c8-435e-bc1d-d6e715523f39/1/ezpf81mVA8Mo_HZd5p_y-ACnwiI.roa
Signing time: Mon 01 Jan 2024 22:31:27 +0000
ROA not before: Mon 01 Jan 2024 22:31:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200735
IP address blocks: 145.255.48.0/24 maxlen: 24
145.255.51.0/24 maxlen: 24
145.255.50.0/24 maxlen: 24
145.255.49.0/24 maxlen: 24
145.255.55.0/24 maxlen: 24
145.255.54.0/24 maxlen: 24
145.255.53.0/24 maxlen: 24
145.255.52.0/24 maxlen: 24
185.55.72.0/24 maxlen: 24
185.55.75.0/24 maxlen: 24
185.55.74.0/24 maxlen: 24
185.55.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/e6656b-80c8-435e-bc1d-d6e715523f39/1/1-tfhSiYlYBkcZldpmOnGm4nDwTY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/e6656b-80c8-435e-bc1d-d6e715523f39/1/1-tfhSiYlYBkcZldpmOnGm4nDwTY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-tfhSiYlYBkcZldpmOnGm4nDwTY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 10:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:3f:23:47:75:6f:77:91:80:19:e6:ab:67:25:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fad7e14a262560191c66576998e9c69b89c3c136
Validity
Not Before: Jan 1 22:31:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7b3a5ff3599503c328fc765de69ff2f800a7c222
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:66:81:69:6a:0a:5f:e8:92:db:7a:63:b8:da:
fa:52:05:5b:a6:0f:db:0e:ab:80:e8:5b:4a:f4:8d:
56:fc:2f:34:d5:a5:ad:09:74:c4:b4:be:7c:61:cd:
2d:7e:3b:53:b6:2c:af:e7:36:86:51:82:e4:72:9a:
29:c7:61:0a:f1:37:4c:ac:3d:5c:96:9f:54:01:a1:
15:b7:bc:81:d4:5f:8a:07:eb:cc:28:df:e8:d9:1f:
e0:82:6f:e6:d5:2f:8e:26:4d:fe:b2:9c:c3:90:b4:
94:a5:d3:fa:31:9d:ac:30:28:7f:26:56:c4:c2:22:
ce:56:f3:3f:19:f1:c3:4b:f6:fd:2e:1e:8d:5a:f6:
33:af:06:42:d6:75:ba:29:cb:73:c4:cb:88:20:35:
43:59:2d:a0:2a:7f:1d:d1:c0:8c:3e:2b:5a:9b:fe:
f3:93:1c:ea:5f:29:23:d7:0a:b8:29:d8:f5:42:6c:
1c:8d:f8:c6:aa:d6:2b:db:7e:83:16:c9:84:81:76:
08:d5:4a:99:0a:ed:dd:8c:8a:aa:bf:f3:eb:1e:b8:
1f:4d:51:03:ff:81:3b:9f:87:b5:4a:60:63:74:3a:
b9:09:71:57:b2:0c:67:15:39:db:05:db:22:3e:78:
41:08:b1:dc:a6:26:a8:91:d3:8e:ba:e5:3e:12:c7:
70:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:3A:5F:F3:59:95:03:C3:28:FC:76:5D:E6:9F:F2:F8:00:A7:C2:22
X509v3 Authority Key Identifier:
keyid:FA:D7:E1:4A:26:25:60:19:1C:66:57:69:98:E9:C6:9B:89:C3:C1:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tfhSiYlYBkcZldpmOnGm4nDwTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/e6656b-80c8-435e-bc1d-d6e715523f39/1/ezpf81mVA8Mo_HZd5p_y-ACnwiI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/e6656b-80c8-435e-bc1d-d6e715523f39/1/1-tfhSiYlYBkcZldpmOnGm4nDwTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.255.48.0/21
185.55.72.0/22
Signature Algorithm: sha256WithRSAEncryption
b1:2b:c3:88:64:a1:f2:bb:cb:ad:d2:82:29:97:58:74:4b:58:
da:6f:d4:b5:9b:5b:b8:5a:75:2a:74:ec:2f:27:0a:ad:2b:d3:
9e:3c:07:c8:8c:80:e7:a4:db:f6:ed:0e:e8:6f:92:77:42:64:
00:13:c1:ce:a1:5d:ad:45:9a:9a:40:9f:3b:bd:20:89:ed:b0:
33:58:b3:ba:bd:71:bb:cb:90:07:ca:e4:0f:37:a1:52:4b:9b:
24:ff:ce:55:3e:c2:bd:2b:ef:fb:2e:b0:c3:21:63:24:bb:22:
98:77:68:41:75:c1:dc:11:89:bd:ee:ac:8d:11:61:18:6d:d6:
c8:65:77:18:2e:7c:1f:d0:ae:ad:54:0b:71:a7:cd:dc:38:2e:
18:22:8e:19:7f:f0:60:d5:bf:22:2d:fc:d3:91:32:12:e8:37:
52:6d:25:d9:1e:98:ee:dc:a7:c0:0b:31:8b:d4:05:9f:ce:a0:
11:23:0a:3d:31:ab:13:a0:56:ed:e3:f0:58:ca:6b:2e:7e:9e:
8a:46:4f:c1:b7:db:48:95:31:67:39:e4:82:eb:3a:c2:df:bc:
f4:f4:b9:e8:1c:45:c8:ab:3a:d4:5e:a6:54:3d:8e:ac:d6:09:
be:f2:65:ce:ae:f5:df:da:5a:e8:00:22:17:c2:69:80:53:91:
41:dd:0b:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:46:16 2024 by rpki-client on console-fra.rpki-client.org