Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/e6-nmfSxRyrIL_jT-ZY1blFVqhs.roa
File: e6-nmfSxRyrIL_jT-ZY1blFVqhs.roa (raw, json)
Hash identifier: cuInoOYuRGwnKdQ+pk1txyCf8m/Naz8Duwwm8NRK+KU=
Subject key identifier: 7B:AF:A7:99:F4:B1:47:2A:C8:2F:F8:D3:F9:96:35:6E:51:55:AA:1B
Certificate issuer: /CN=85f4ee14f6d38a7cf071279dff7b391702e37135
Certificate serial: 018CC2DB3098C9778572A6C5922D1987A890
Authority key identifier: 85:F4:EE:14:F6:D3:8A:7C:F0:71:27:9D:FF:7B:39:17:02:E3:71:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hfTuFPbTinzwcSed_3s5FwLjcTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/e6-nmfSxRyrIL_jT-ZY1blFVqhs.roa
Signing time: Mon 01 Jan 2024 02:29:53 +0000
ROA not before: Mon 01 Jan 2024 02:29:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48659
IP address blocks: 185.146.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/hfTuFPbTinzwcSed_3s5FwLjcTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/hfTuFPbTinzwcSed_3s5FwLjcTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hfTuFPbTinzwcSed_3s5FwLjcTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 02 Jul 2024 13:50:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:30:98:c9:77:85:72:a6:c5:92:2d:19:87:a8:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85f4ee14f6d38a7cf071279dff7b391702e37135
Validity
Not Before: Jan 1 02:29:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7bafa799f4b1472ac82ff8d3f996356e5155aa1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:cb:a3:49:25:80:52:11:73:30:43:fb:93:da:
33:9a:0a:71:05:60:d3:31:77:1f:41:d0:e5:ad:f3:
e1:55:64:ac:5f:0e:2d:1d:e6:38:dd:d8:ae:b1:7d:
0d:bd:aa:8f:5d:cc:91:8b:bb:96:2b:d0:73:64:ba:
3d:2a:24:3c:28:b3:1a:a7:67:05:7c:83:69:92:91:
a7:61:b1:57:46:44:23:6e:b6:9b:74:60:ad:a8:c7:
d3:bd:6f:b1:2f:b7:97:62:c6:f5:ac:ec:56:16:2d:
ad:37:44:16:85:ff:98:fc:be:d8:e2:b3:20:9d:d6:
18:9d:49:44:71:98:11:42:41:23:d3:7d:d6:07:f8:
60:8f:2a:98:71:dd:18:54:34:c7:45:ad:d6:8b:92:
b9:7b:05:81:c1:e0:e0:05:fe:89:ce:a3:74:e8:d4:
7e:8a:3a:d7:00:fe:09:cc:81:1f:bf:0e:e2:ec:18:
a7:7b:12:bc:ca:ca:8a:da:26:6b:40:55:08:4c:f9:
de:c0:5a:4f:61:5f:b5:c8:80:f9:90:34:c9:d9:50:
b8:4b:2f:d2:c0:5f:d7:51:ee:97:d8:d7:6d:8c:29:
5d:4f:93:78:c7:4a:06:0d:54:d5:38:07:11:75:b2:
72:ef:f4:ab:f6:5d:5a:26:2e:ea:13:01:f2:48:66:
0e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:AF:A7:99:F4:B1:47:2A:C8:2F:F8:D3:F9:96:35:6E:51:55:AA:1B
X509v3 Authority Key Identifier:
keyid:85:F4:EE:14:F6:D3:8A:7C:F0:71:27:9D:FF:7B:39:17:02:E3:71:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hfTuFPbTinzwcSed_3s5FwLjcTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/e6-nmfSxRyrIL_jT-ZY1blFVqhs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/hfTuFPbTinzwcSed_3s5FwLjcTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.146.226.0/24
Signature Algorithm: sha256WithRSAEncryption
06:ca:40:bd:e5:ab:eb:87:d4:5c:08:90:cb:00:bc:da:1a:27:
9e:89:1d:27:e8:d1:ba:67:19:ef:0f:14:f3:a4:64:50:9e:1e:
45:c8:71:4c:36:7d:08:91:80:3e:4d:8f:9e:34:a1:67:a1:f6:
27:e4:e0:f6:ca:97:29:11:47:c3:9e:57:fd:64:0d:73:2a:ab:
93:b1:40:0e:85:38:eb:fd:65:e2:d9:62:a8:d7:e2:40:3a:00:
30:ea:d7:a1:f8:04:7f:dc:41:77:07:a9:a3:b3:00:c3:7e:40:
83:51:1a:c9:1d:ff:32:64:3c:72:b9:9a:b2:40:69:a6:91:ce:
58:0f:c5:ce:da:73:48:c1:d3:9d:a9:9a:d3:9f:2a:db:0a:91:
f4:61:35:79:9e:f9:e4:7c:92:c9:1e:9c:ab:ef:7f:95:fb:90:
5e:71:0f:d2:1d:6d:3d:f2:a4:50:e5:40:ab:e4:a2:9f:f9:87:
7f:81:31:11:2c:84:a3:e4:ca:6d:86:98:12:57:a5:54:4e:bb:
a0:32:02:36:fe:ef:00:60:15:6b:9e:f3:5e:bc:b0:36:e1:eb:
ce:11:b3:79:61:37:8f:91:29:66:ba:ad:60:4b:00:9f:4e:39:
83:ba:0b:ba:cd:02:cb:e2:c0:67:cb:66:a1:d3:be:f8:55:6d:
04:5a:76:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 17:27:23 2024 by rpki-client on console-fra.rpki-client.org