Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/3e5c96-7e95-4797-aa6a-a8978e3aae98/1/Eofdxn_tQk0pqXJbWzxT82dq0uI.roa
File: Eofdxn_tQk0pqXJbWzxT82dq0uI.roa (raw, json)
Hash identifier: vtfLagwl88uWE5Rg7ryI+eLrQ80osECT8EhEeIwrzR4=
Subject key identifier: 12:87:DD:C6:7F:ED:42:4D:29:A9:72:5B:5B:3C:53:F3:67:6A:D2:E2
Certificate issuer: /CN=4eeb86abd5374e553098209075b9afecabef333a
Certificate serial: 018CC349447F71F89C4D93DECBC02BD1C94F
Authority key identifier: 4E:EB:86:AB:D5:37:4E:55:30:98:20:90:75:B9:AF:EC:AB:EF:33:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TuuGq9U3TlUwmCCQdbmv7KvvMzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/3e5c96-7e95-4797-aa6a-a8978e3aae98/1/Eofdxn_tQk0pqXJbWzxT82dq0uI.roa
Signing time: Mon 01 Jan 2024 04:30:07 +0000
ROA not before: Mon 01 Jan 2024 04:30:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 46562
IP address blocks: 185.230.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/3e5c96-7e95-4797-aa6a-a8978e3aae98/1/TuuGq9U3TlUwmCCQdbmv7KvvMzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/3e5c96-7e95-4797-aa6a-a8978e3aae98/1/TuuGq9U3TlUwmCCQdbmv7KvvMzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/TuuGq9U3TlUwmCCQdbmv7KvvMzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 20:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:44:7f:71:f8:9c:4d:93:de:cb:c0:2b:d1:c9:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4eeb86abd5374e553098209075b9afecabef333a
Validity
Not Before: Jan 1 04:30:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1287ddc67fed424d29a9725b5b3c53f3676ad2e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ea:9f:9b:1a:5b:d4:01:35:1b:0d:16:fb:f1:
b2:6c:3e:69:a3:cb:6a:cf:0c:ab:ce:59:8c:f6:99:
b6:e9:68:f7:3c:95:f7:82:71:4d:d1:bd:a7:92:0b:
4a:1a:98:64:a4:be:d3:cd:b0:a7:f0:f4:bb:80:c9:
ab:ab:54:c2:2b:81:19:66:6e:97:d9:52:bf:b8:2c:
e3:90:f0:a7:c4:6a:71:20:df:09:78:b3:13:d7:85:
d8:1b:20:ef:41:90:68:29:6a:43:c1:01:39:ac:cc:
ff:b5:05:89:4a:0b:50:af:78:7f:80:a4:c3:9a:c0:
4e:41:58:08:f1:5f:8c:37:d8:72:b6:e9:0f:eb:08:
2e:ce:79:6f:de:b3:fe:90:2b:1f:7f:e0:8d:07:f0:
56:bb:4f:9d:c8:cf:37:af:72:34:c4:cd:59:76:c1:
6f:ba:6c:9a:4b:d4:8a:d3:b8:33:83:07:95:5e:7c:
bb:15:17:f4:70:26:23:22:0b:fa:db:9e:2c:9e:69:
aa:55:31:77:09:24:e2:df:92:c4:1d:8d:ba:dc:e8:
13:b6:35:be:06:47:9b:c2:73:5d:e4:90:bb:c8:57:
e4:a2:ac:15:bd:f3:f2:75:32:36:fa:c6:5d:19:43:
b7:27:bb:30:a3:17:80:80:3f:94:59:37:97:ea:7b:
39:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:87:DD:C6:7F:ED:42:4D:29:A9:72:5B:5B:3C:53:F3:67:6A:D2:E2
X509v3 Authority Key Identifier:
keyid:4E:EB:86:AB:D5:37:4E:55:30:98:20:90:75:B9:AF:EC:AB:EF:33:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuuGq9U3TlUwmCCQdbmv7KvvMzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/3e5c96-7e95-4797-aa6a-a8978e3aae98/1/Eofdxn_tQk0pqXJbWzxT82dq0uI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/3e5c96-7e95-4797-aa6a-a8978e3aae98/1/TuuGq9U3TlUwmCCQdbmv7KvvMzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.230.222.0/24
Signature Algorithm: sha256WithRSAEncryption
83:f5:e0:9c:2a:56:2e:a8:92:1a:87:c4:4c:84:3e:13:91:0d:
12:bb:5b:23:f7:e1:32:7f:6a:f2:34:6b:3b:c5:56:f8:4b:e3:
a3:60:07:e9:c0:6c:e2:df:b8:06:7b:71:cc:e3:27:ab:2c:7c:
0f:02:45:45:3f:4e:31:02:bc:e7:2e:4c:25:bb:1c:ce:60:5d:
42:87:f1:f7:a2:0b:eb:e5:4b:83:25:24:b1:1c:77:9e:04:04:
82:5b:f2:e2:a4:55:c2:2b:a6:86:9d:a7:6e:cf:0d:c7:4b:5f:
b2:1a:65:7d:bd:b6:da:9e:5d:8a:d0:0a:7b:b4:d8:e5:35:f8:
de:ba:5a:44:4a:3a:89:95:c3:09:85:9f:a5:15:51:a0:95:19:
b3:a2:63:5e:6e:f1:01:23:42:df:cb:f1:7d:f7:61:40:6d:aa:
b3:d3:eb:88:24:22:80:12:b3:89:94:7c:e0:fe:3b:88:65:02:
7d:23:32:ab:ad:5e:6e:0c:0d:c1:70:5c:0e:64:f2:a9:24:41:
1f:11:35:07:ee:de:a6:56:4f:c7:75:c5:e3:60:0c:7e:de:af:
5d:b9:e9:96:33:80:58:37:6c:d7:96:df:4e:20:95:44:4e:93:
e4:14:1f:22:93:04:5f:7e:33:d0:4b:25:f7:ff:22:8e:82:6b:
76:93:e4:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 02:00:51 2024 by rpki-client on console-ams.rpki-client.org