Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/eXvbFfeswoZPr0xd43h0beCzY0s.roa
File: eXvbFfeswoZPr0xd43h0beCzY0s.roa (raw, json)
Hash identifier: mn04zF5p+ovdl0Ny6/NOYHtwTidpu+BjI9Nsrt//XSI=
Subject key identifier: 79:7B:DB:15:F7:AC:C2:86:4F:AF:4C:5D:E3:78:74:6D:E0:B3:63:4B
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 018F9C20C68A0DE25144762A7AB46894CE34
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/eXvbFfeswoZPr0xd43h0beCzY0s.roa
Signing time: Tue 21 May 2024 17:09:04 +0000
ROA not before: Tue 21 May 2024 17:09:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 135375
IP address blocks: 185.177.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:9c:20:c6:8a:0d:e2:51:44:76:2a:7a:b4:68:94:ce:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: May 21 17:09:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=797bdb15f7acc2864faf4c5de378746de0b3634b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:4e:fe:80:78:72:06:11:2f:1e:8a:5c:77:76:
58:21:71:4b:c2:d2:39:5c:ae:bb:f1:69:c8:1b:d2:
9d:f1:4f:26:35:03:49:75:2f:a1:e0:7c:a7:b4:56:
02:fb:6e:5f:eb:e8:57:19:18:05:3f:77:fd:a9:eb:
4d:29:5d:71:4b:7b:fd:9c:51:90:8b:43:b9:2b:42:
24:e3:b3:39:46:03:d1:39:92:e1:2d:03:14:e3:8d:
f7:52:3b:65:a3:3d:92:c2:8d:74:90:f7:b1:95:f2:
cb:68:da:d6:bc:80:5f:84:da:73:0e:53:cf:37:0a:
b1:f8:7c:ac:50:90:9a:49:81:0f:09:05:9b:9b:ef:
c0:1e:be:81:b4:35:32:e3:85:be:55:aa:91:53:a7:
a9:2c:15:8e:5b:20:54:fc:42:d2:9c:7d:88:0d:aa:
4d:49:21:14:46:fd:3b:f6:1f:56:61:44:fb:5d:6d:
1e:9d:1c:ee:97:c0:92:e2:5e:27:d0:47:8e:5e:08:
c8:d4:a7:0f:0b:2a:c4:c7:a5:38:f1:ce:07:b7:94:
b2:8f:fb:45:8e:6e:de:1b:d6:36:24:fb:0f:6a:45:
3f:3f:1b:16:f3:77:41:42:43:a9:f2:c8:74:f8:71:
bf:ca:f2:96:ee:22:45:82:36:54:24:1c:b7:c2:f1:
b0:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:7B:DB:15:F7:AC:C2:86:4F:AF:4C:5D:E3:78:74:6D:E0:B3:63:4B
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/eXvbFfeswoZPr0xd43h0beCzY0s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.177.24.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:60:f6:43:ec:48:b9:2d:e3:48:0c:50:1a:1f:6b:42:43:bf:
01:49:1c:f2:1f:06:49:3c:54:7d:11:70:fb:0f:18:52:83:5e:
16:dc:52:bb:68:98:01:c6:c9:9d:47:61:ec:9e:3f:64:e8:e8:
1a:f8:44:1d:5f:03:80:42:16:1a:c7:94:08:01:f4:ca:30:32:
12:67:96:0f:40:eb:0a:e4:21:8b:32:f8:e8:89:d8:d4:95:50:
ed:27:22:59:f2:fb:e5:93:a3:08:59:4a:e6:18:46:cc:a1:48:
e9:16:c9:d5:54:58:0f:bc:76:fd:25:28:f7:fc:0e:8f:0e:5b:
5f:67:41:45:ab:42:39:6d:69:0c:a1:81:14:94:c7:84:76:ad:
56:9e:7e:76:fb:c2:6b:b4:4e:71:9c:da:e9:8b:1a:76:20:71:
91:3e:4f:0b:0b:44:6e:c1:7a:91:da:b0:6d:4f:44:81:0e:c7:
dc:5d:17:84:4d:4d:54:52:df:0c:f4:13:cc:6a:ab:cd:c3:7f:
57:e8:f4:f1:e1:1b:dc:f3:c9:d6:47:52:8f:41:f9:c1:9a:a3:
e1:03:0b:e5:c7:ad:e2:83:f3:53:81:47:e6:dd:12:8c:23:65:
9f:db:56:92:ff:e3:2e:e9:db:35:a4:24:32:0a:83:83:24:2d:
bd:47:6f:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:47:26 2024 by rpki-client on console-fra.rpki-client.org