Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/6db46d-bc2d-45d7-a279-820325f53ccb/1/el8A8O8JZzcKQZD5JSUMRZChcMY.roa
File: el8A8O8JZzcKQZD5JSUMRZChcMY.roa (raw, json)
Hash identifier: iLzM17a2whw1x9W2WBpa6REfF5XuUGECVKvZWuaM7lA=
Subject key identifier: 7A:5F:00:F0:EF:09:67:37:0A:41:90:F9:25:25:0C:45:90:A1:70:C6
Certificate issuer: /CN=656cc25012e3a4c8b1626dd757c7b0510e457341
Certificate serial: 018CC3B72B4B7395A04505E0C1A4F65CC6A6
Authority key identifier: 65:6C:C2:50:12:E3:A4:C8:B1:62:6D:D7:57:C7:B0:51:0E:45:73:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/6db46d-bc2d-45d7-a279-820325f53ccb/1/el8A8O8JZzcKQZD5JSUMRZChcMY.roa
Signing time: Mon 01 Jan 2024 06:30:10 +0000
ROA not before: Mon 01 Jan 2024 06:30:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 185.170.189.0/24 maxlen: 24
185.170.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/6db46d-bc2d-45d7-a279-820325f53ccb/1/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/6db46d-bc2d-45d7-a279-820325f53ccb/1/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 23:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:2b:4b:73:95:a0:45:05:e0:c1:a4:f6:5c:c6:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=656cc25012e3a4c8b1626dd757c7b0510e457341
Validity
Not Before: Jan 1 06:30:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7a5f00f0ef0967370a4190f925250c4590a170c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:65:e9:fb:19:32:97:62:a2:e2:6f:86:a6:d8:
75:f7:6b:c8:1f:54:c0:01:3a:b9:91:00:1d:f0:06:
78:a0:74:50:e7:98:bf:88:75:fb:70:fd:42:45:90:
10:f2:cd:6b:1d:cc:f9:71:b1:ac:13:92:f5:7b:02:
2a:7c:39:c7:22:de:9d:f4:be:67:80:32:45:2a:8c:
90:c4:7b:57:ed:d0:f6:30:1b:4b:81:cd:5e:e1:36:
32:f0:74:30:1a:d0:c7:54:5d:c2:fb:59:66:d7:e9:
5b:db:32:17:f0:ff:40:ae:91:9e:aa:ff:ac:3a:d5:
c5:00:3d:ea:6e:b2:1b:30:58:cd:c5:5d:ac:09:73:
e4:4c:ce:f0:e1:02:06:b7:ff:ec:b4:0f:55:8e:a7:
c1:95:56:53:b5:fe:b3:1c:ac:e5:45:05:6b:6b:58:
07:77:8c:24:be:7b:a6:65:56:28:36:52:44:61:5f:
7c:fd:e0:75:eb:e9:ce:0f:4d:70:5b:8e:02:bd:97:
35:05:5b:ad:fd:e8:8d:03:b7:d4:d0:be:fa:0f:d7:
9f:72:fe:c5:f9:89:0d:5b:67:5b:40:62:c9:70:9e:
af:fa:6d:da:dd:92:32:0a:98:d4:ff:d4:94:8f:ea:
1f:04:38:55:3b:25:5b:74:e3:b8:12:6d:e5:e6:e9:
41:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:5F:00:F0:EF:09:67:37:0A:41:90:F9:25:25:0C:45:90:A1:70:C6
X509v3 Authority Key Identifier:
keyid:65:6C:C2:50:12:E3:A4:C8:B1:62:6D:D7:57:C7:B0:51:0E:45:73:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6db46d-bc2d-45d7-a279-820325f53ccb/1/el8A8O8JZzcKQZD5JSUMRZChcMY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6db46d-bc2d-45d7-a279-820325f53ccb/1/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.170.188.0/23
Signature Algorithm: sha256WithRSAEncryption
c5:c0:5c:ee:ae:51:85:36:57:b5:68:06:46:12:dd:a2:ff:bc:
7f:af:6f:10:c3:06:e1:11:10:e3:36:9b:1b:c0:1c:e7:88:79:
af:2d:fc:05:74:c4:b1:05:be:8e:59:9b:b4:23:49:1f:83:4d:
99:29:4e:5a:71:7e:d3:74:34:0c:b4:0e:77:98:8b:bb:73:ab:
cf:0e:84:19:2f:2c:24:08:17:3f:3d:7d:38:d3:b4:b7:8b:33:
41:24:a3:f0:b3:7e:9f:81:c5:60:81:e4:6b:b3:cd:91:d0:d8:
02:ca:1f:cf:5f:71:7b:1f:42:48:78:96:2a:2e:7d:2f:9d:4b:
16:5f:fb:43:3e:bb:5b:56:e3:18:de:29:e8:d7:e2:45:a6:b5:
5f:77:bb:38:33:42:04:d0:7b:fc:fd:98:70:d2:f1:96:1a:6f:
ec:32:31:a8:cb:12:1e:90:88:60:35:03:12:29:7d:27:b4:9e:
bc:d6:6c:2a:12:cb:71:dc:7e:a3:62:84:9e:ff:9d:78:6f:85:
e3:de:8d:de:4e:d6:e1:98:7a:15:6e:6b:59:34:f3:2f:78:d7:
8a:74:82:12:3a:d5:72:14:36:59:29:07:da:a2:4f:ba:b1:05:
6a:1a:81:28:b8:ee:9b:f5:34:14:b2:1f:6c:a0:26:f7:30:9c:
5b:7b:7c:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 04:41:45 2024 by rpki-client on console-fra.rpki-client.org