Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/rewcffxErJJp_rJIKhpFmW-k7sI.roa
File: rewcffxErJJp_rJIKhpFmW-k7sI.roa (raw, json)
Hash identifier: DXOKrKn5iiewasnFY5saiia8zGT784rXxcGxAuP7z3Q=
Subject key identifier: AD:EC:1C:7D:FC:44:AC:92:69:FE:B2:48:2A:1A:45:99:6F:A4:EE:C2
Certificate issuer: /CN=d38cd9440552e7dab9cd5631d4ab872451535b7a
Certificate serial: 018F4E343A755D2BA318635CBD713C06593B
Authority key identifier: D3:8C:D9:44:05:52:E7:DA:B9:CD:56:31:D4:AB:87:24:51:53:5B:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/04zZRAVS59q5zVYx1KuHJFFTW3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/rewcffxErJJp_rJIKhpFmW-k7sI.roa
Signing time: Mon 06 May 2024 13:59:56 +0000
ROA not before: Mon 06 May 2024 13:59:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211440
IP address blocks: 185.180.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.mft
rsync://rpki.ripe.net/repository/DEFAULT/04zZRAVS59q5zVYx1KuHJFFTW3o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 13:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:4e:34:3a:75:5d:2b:a3:18:63:5c:bd:71:3c:06:59:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d38cd9440552e7dab9cd5631d4ab872451535b7a
Validity
Not Before: May 6 13:59:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=adec1c7dfc44ac9269feb2482a1a45996fa4eec2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5f:e1:24:14:65:c0:50:4c:f3:42:d5:94:7e:
93:9d:d3:f8:50:87:ce:dc:44:d0:0b:3e:0e:4e:2b:
b2:39:bf:98:d5:1e:a1:c4:a7:2e:00:9a:b4:20:0b:
9f:99:6c:cf:bb:1f:79:81:65:87:18:c8:fc:88:8b:
73:ee:9a:fe:d7:19:60:4d:61:95:59:4f:dd:76:e4:
c9:7e:f1:1d:ba:c9:74:62:00:cc:12:18:24:10:d1:
2a:3e:a6:aa:8b:5b:ac:ee:ba:28:1c:37:ad:23:aa:
13:82:8f:e8:67:41:46:67:7b:c9:6c:e8:e5:0b:68:
e6:21:8a:8c:77:24:b9:1f:74:ba:06:5f:24:35:64:
09:45:2a:49:0d:90:34:18:92:d3:ef:6b:a5:03:06:
b6:73:c1:09:f9:33:32:fc:21:4c:9d:bf:85:42:90:
ce:19:a5:c1:83:0b:0b:2c:50:ea:a8:fe:c7:13:06:
1a:ed:50:1e:b1:21:54:0f:9c:87:73:19:7b:87:37:
03:5e:05:79:97:b6:61:5c:51:47:b1:b9:90:d9:b1:
27:66:b8:f0:0e:d5:a7:eb:ab:58:1f:6c:ed:c9:07:
d4:1d:68:e0:30:52:6c:41:d5:55:4c:8c:d5:e7:67:
aa:2a:45:df:18:9a:b1:4d:7f:f9:e1:74:ef:3a:78:
f9:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:EC:1C:7D:FC:44:AC:92:69:FE:B2:48:2A:1A:45:99:6F:A4:EE:C2
X509v3 Authority Key Identifier:
keyid:D3:8C:D9:44:05:52:E7:DA:B9:CD:56:31:D4:AB:87:24:51:53:5B:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/04zZRAVS59q5zVYx1KuHJFFTW3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/rewcffxErJJp_rJIKhpFmW-k7sI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.180.144.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:8d:b9:e6:3a:2b:4f:c6:0c:dc:5a:c4:e5:30:74:eb:55:51:
54:61:1e:c1:0c:55:b2:aa:0a:a6:66:a5:65:10:82:a9:b5:61:
d5:56:9a:29:49:40:2f:eb:0c:58:8b:83:da:7e:96:5a:2c:c6:
9d:f8:b6:ff:3b:80:73:4c:0e:6d:09:e4:ec:a7:27:4c:66:15:
32:b0:e1:85:3c:8f:46:cb:45:45:55:b2:9b:68:a4:b2:17:6b:
5e:c7:78:8c:9d:3c:c7:08:ec:fc:bb:c8:f4:7b:73:10:e1:53:
c2:8e:c7:e5:3b:44:04:ab:c3:ab:e8:50:1c:df:7a:ae:5b:8f:
fc:01:fb:a2:54:9c:43:8b:af:8f:1b:0b:1e:01:25:3e:03:c1:
57:7c:cb:a6:45:a5:27:11:e9:cf:91:8c:2f:5e:c9:cb:57:6d:
f7:88:62:03:a4:90:23:40:0b:6b:77:31:0a:e8:a5:a0:e5:1c:
c7:49:21:26:51:82:f9:0b:cb:c3:df:88:c1:fa:a3:82:46:2d:
2e:0d:3f:29:4a:dc:00:14:a6:cc:40:de:ec:1e:3d:ba:01:35:
d6:d9:c8:b5:ba:3d:b4:7f:48:78:48:90:44:d2:80:9b:ed:97:
8b:85:af:97:cd:cd:e4:2c:9b:c9:43:cd:a1:a7:62:16:77:a3:
06:d4:5e:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 18:39:39 2024 by rpki-client on console-ams.rpki-client.org