Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/b4daf6-448d-4f3e-944a-573ca5a609c0/1/0EREekvKhgjgipDOxHh2QukBUv4.roa
File: 0EREekvKhgjgipDOxHh2QukBUv4.roa (raw, json)
Hash identifier: E78+OuE4CWZT/6X9Jldgj0SgHmtOYNrRgMw2OB/4+Xs=
Subject key identifier: D0:44:44:7A:4B:CA:86:08:E0:8A:90:CE:C4:78:76:42:E9:01:52:FE
Certificate issuer: /CN=72098efaae8063cacecc4f1c1a0b64483bb69503
Certificate serial: 018CC56DE05B8248BD31485177AF40A3C699
Authority key identifier: 72:09:8E:FA:AE:80:63:CA:CE:CC:4F:1C:1A:0B:64:48:3B:B6:95:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgmO-q6AY8rOzE8cGgtkSDu2lQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/b4daf6-448d-4f3e-944a-573ca5a609c0/1/0EREekvKhgjgipDOxHh2QukBUv4.roa
Signing time: Mon 01 Jan 2024 14:29:21 +0000
ROA not before: Mon 01 Jan 2024 14:29:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204546
IP address blocks: 185.213.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/b4daf6-448d-4f3e-944a-573ca5a609c0/1/cgmO-q6AY8rOzE8cGgtkSDu2lQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/b4daf6-448d-4f3e-944a-573ca5a609c0/1/cgmO-q6AY8rOzE8cGgtkSDu2lQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/cgmO-q6AY8rOzE8cGgtkSDu2lQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 15:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6d:e0:5b:82:48:bd:31:48:51:77:af:40:a3:c6:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72098efaae8063cacecc4f1c1a0b64483bb69503
Validity
Not Before: Jan 1 14:29:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d044447a4bca8608e08a90cec4787642e90152fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:5e:a8:8a:b2:24:44:d7:23:4d:d8:ee:07:bd:
6d:c4:72:b0:68:b6:e2:26:52:7a:e9:8f:14:98:29:
4e:ce:fb:e2:87:d5:74:0b:6d:71:86:37:9e:0e:c1:
82:f0:5b:b9:53:87:8c:c1:6a:ca:65:76:63:bf:cb:
75:e9:3e:2f:9e:76:9c:51:d3:b7:09:1f:49:46:8a:
5b:34:e1:2a:e4:bc:78:97:41:eb:b8:26:b8:ad:c3:
11:08:8d:47:e5:30:cb:d6:36:36:27:c5:eb:68:5a:
64:4a:94:e6:d8:e4:c9:17:f5:24:a2:95:dd:86:2a:
90:59:55:99:46:b1:e2:63:3f:e1:b5:ed:cc:3a:db:
10:83:a7:f3:f3:34:ae:59:e6:90:82:88:1e:32:a7:
b6:a4:b4:62:27:ec:a7:60:b9:cb:70:0e:fb:ee:ad:
fa:de:2c:88:16:58:3a:e8:54:f4:0f:a9:00:98:61:
7e:42:5a:aa:0d:54:91:fe:56:b2:ae:c3:4d:81:0d:
49:ae:53:be:8d:0d:a5:3f:eb:42:46:4b:64:c5:34:
1b:fe:5b:5b:13:51:1f:63:8a:b5:36:41:c2:65:61:
13:47:fd:27:01:5b:04:59:8c:ce:eb:be:9b:e8:a3:
42:13:43:89:81:ef:81:02:a1:b5:86:7f:49:7b:be:
7c:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:44:44:7A:4B:CA:86:08:E0:8A:90:CE:C4:78:76:42:E9:01:52:FE
X509v3 Authority Key Identifier:
keyid:72:09:8E:FA:AE:80:63:CA:CE:CC:4F:1C:1A:0B:64:48:3B:B6:95:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgmO-q6AY8rOzE8cGgtkSDu2lQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4daf6-448d-4f3e-944a-573ca5a609c0/1/0EREekvKhgjgipDOxHh2QukBUv4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4daf6-448d-4f3e-944a-573ca5a609c0/1/cgmO-q6AY8rOzE8cGgtkSDu2lQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.213.115.0/24
Signature Algorithm: sha256WithRSAEncryption
57:db:2c:72:e9:fb:79:22:04:26:1f:86:1f:c2:63:ce:2f:db:
cc:03:39:6e:e8:f4:0f:33:5c:df:3e:3a:e4:45:05:83:94:b4:
e5:a3:83:5b:a4:1e:b3:ff:e7:c1:6c:51:17:26:32:d1:8d:65:
c3:1d:b7:ae:5b:d4:f5:02:f8:d3:fd:bc:14:5c:e4:91:46:52:
48:b9:2c:e4:51:c1:2b:7b:a5:97:56:46:3d:1f:44:ec:85:01:
23:86:e2:84:86:9c:d3:97:57:28:a6:b4:cb:20:74:4c:8f:35:
0c:da:73:12:07:37:89:69:eb:9f:67:2c:37:62:18:d4:dc:72:
7f:fa:df:64:63:c3:67:bb:5f:d7:7f:e0:71:c5:bf:39:b3:85:
c5:e4:3f:ad:12:0d:12:5c:97:a8:bc:29:66:f5:90:a7:95:8a:
c2:5f:33:52:38:07:fe:9c:23:f1:2e:c6:a8:1b:56:cf:3a:1e:
85:54:07:ae:4d:52:47:48:00:e0:19:63:ea:97:4e:09:87:2d:
c2:eb:a1:df:a8:9b:b0:76:d4:9d:25:00:df:01:24:ac:91:e1:
94:7b:4c:5a:a6:dc:ab:c8:5e:69:15:7f:0e:0c:5b:4f:ea:cf:
b1:b0:cb:e1:61:f2:b4:83:ca:e5:ca:7e:91:69:1f:24:31:2f:
c7:4c:a5:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:58:05 2024 by rpki-client on console-fra.rpki-client.org