Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/61l3ljgmVgW7JZ5yPV9H9T0j_fU.roa
File: 61l3ljgmVgW7JZ5yPV9H9T0j_fU.roa (raw, json)
Hash identifier: 83ZkWMz6xoiBVwcBoUGZRAYb+RKRqXMXPt5o2VzoO8U=
Subject key identifier: EB:59:77:96:38:26:56:05:BB:25:9E:72:3D:5F:47:F5:3D:23:FD:F5
Certificate issuer: /CN=eac2c1afd4bdec980506fa07df7c8662d554fa46
Certificate serial: 018D59BD488E5FB43AFF2483578A436CC4E6
Authority key identifier: EA:C2:C1:AF:D4:BD:EC:98:05:06:FA:07:DF:7C:86:62:D5:54:FA:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/61l3ljgmVgW7JZ5yPV9H9T0j_fU.roa
Signing time: Tue 30 Jan 2024 09:39:53 +0000
ROA not before: Tue 30 Jan 2024 09:39:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44092
IP address blocks: 147.185.162.0/23 maxlen: 23
147.185.162.0/24 maxlen: 24
147.185.163.0/24 maxlen: 24
185.22.56.0/22 maxlen: 22
185.22.56.0/24 maxlen: 24
185.22.57.0/24 maxlen: 24
185.22.58.0/24 maxlen: 24
185.22.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 29 Apr 2024 02:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:59:bd:48:8e:5f:b4:3a:ff:24:83:57:8a:43:6c:c4:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eac2c1afd4bdec980506fa07df7c8662d554fa46
Validity
Not Before: Jan 30 09:39:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eb59779638265605bb259e723d5f47f53d23fdf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f3:0b:94:ad:2c:26:ec:18:c9:15:2f:8f:99:
dc:5c:3f:2c:b5:ce:e6:11:bf:56:c0:a1:f6:5a:22:
9b:33:53:5d:eb:62:f8:cb:99:a9:24:1b:d0:89:e7:
d9:f3:d8:59:5b:84:f5:bd:22:49:a3:7f:22:ba:a5:
dd:e0:09:83:4d:4a:8a:dd:aa:bb:bf:47:64:c4:b5:
9a:fd:d4:85:48:b9:e8:d0:a7:cc:21:1d:cf:2f:01:
e8:53:ff:71:3e:e7:a0:d4:05:4d:90:89:d6:c8:02:
36:99:53:a6:82:45:8c:d4:06:fb:88:e2:35:29:ba:
2f:1a:67:45:96:13:3e:91:26:b2:86:62:17:63:88:
c3:62:f2:14:8e:e2:25:65:1f:2b:ee:d6:e5:8a:ba:
e8:e6:85:f4:87:ad:2d:46:4f:63:bd:db:fe:b2:74:
c6:79:69:dd:5b:b2:2b:81:0b:85:d9:3b:3b:11:e6:
aa:40:4c:c9:d6:9d:c3:9c:8b:47:11:08:4f:93:51:
e1:c5:79:f6:ce:82:2e:a4:48:1f:d7:9a:06:10:6e:
6d:2c:f2:36:1f:92:d0:82:6e:f8:58:40:14:43:63:
b7:c9:3e:8e:2a:1a:60:ad:ab:0d:37:40:3e:06:73:
78:5d:37:fc:4f:52:d8:8b:6b:74:9f:4b:f2:50:90:
2d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:59:77:96:38:26:56:05:BB:25:9E:72:3D:5F:47:F5:3D:23:FD:F5
X509v3 Authority Key Identifier:
keyid:EA:C2:C1:AF:D4:BD:EC:98:05:06:FA:07:DF:7C:86:62:D5:54:FA:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/61l3ljgmVgW7JZ5yPV9H9T0j_fU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.185.162.0/23
185.22.56.0/22
Signature Algorithm: sha256WithRSAEncryption
40:7d:a3:b8:63:1c:ca:f5:91:29:1e:cf:2d:0a:52:7b:3e:09:
51:c7:b4:b7:35:55:6f:b4:af:95:c2:27:1a:9e:1e:5a:9f:c0:
62:1d:3e:c2:97:b3:06:98:f7:47:52:29:5f:02:d5:d5:fd:90:
44:9b:d5:5d:03:fc:3b:eb:96:6a:22:77:d6:e7:7b:f4:1e:9f:
1b:af:7d:60:53:5c:7c:77:d2:f5:c8:c1:b5:f2:46:39:84:72:
9e:cf:6d:76:7b:00:7a:83:e3:52:d1:6f:dd:45:f4:3d:d7:b3:
65:8b:f8:74:47:56:ed:d4:eb:6b:fc:fd:15:5c:d4:9e:c7:d1:
86:fd:78:5b:aa:c2:71:f1:c4:b1:5f:82:62:bf:70:91:38:fd:
31:96:4e:36:57:d4:4e:85:56:2b:d5:ac:e9:9a:af:d9:51:ea:
14:c8:06:be:17:43:23:ce:89:72:70:9a:3c:80:f3:5b:f3:09:
1d:82:9b:20:e2:c8:90:bd:b7:bf:85:a9:7b:82:35:f4:c4:0a:
81:1c:70:8c:f1:26:ac:15:ab:af:47:c0:85:9a:de:84:ea:44:
98:eb:b7:02:cf:3f:2e:c6:ce:54:d2:8a:07:86:12:ed:2d:67:
07:fe:31:8f:1c:ea:a5:7a:51:a3:9f:2f:09:9c:98:42:2d:5d:
08:bb:51:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 10:56:00 2024 by rpki-client on console-ams.rpki-client.org