Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/EAIUCSeSUoeQoiQm6fJk1rBF2CQ.roa
File: EAIUCSeSUoeQoiQm6fJk1rBF2CQ.roa (raw, json)
Hash identifier: DlLjo0IhocbvDgVzlAWB9xX0tyfxfAsnLr+M8CNsyvA=
Subject key identifier: 10:02:14:09:27:92:52:87:90:A2:24:26:E9:F2:64:D6:B0:45:D8:24
Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Certificate serial: 018CC2DAD148AFC34D873A49CFD5CBFEF09C
Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/EAIUCSeSUoeQoiQm6fJk1rBF2CQ.roa
Signing time: Mon 01 Jan 2024 02:29:29 +0000
ROA not before: Mon 01 Jan 2024 02:29:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205775
IP address blocks: 185.36.0.0/22 maxlen: 22
45.93.56.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 04:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:d1:48:af:c3:4d:87:3a:49:cf:d5:cb:fe:f0:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Validity
Not Before: Jan 1 02:29:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=100214092792528790a22426e9f264d6b045d824
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:4e:b6:da:9f:8d:55:ae:f7:c9:57:5a:0f:90:
76:23:f4:65:b3:cf:98:a4:fc:48:9c:cb:b6:5f:f0:
b9:99:7e:cb:24:c9:55:26:77:90:2e:db:fd:72:98:
6e:b3:3d:1a:d0:29:fa:ef:e5:25:d0:ec:77:33:de:
a7:a5:69:37:1c:bb:7e:3d:14:8f:06:5b:17:f3:74:
70:86:b5:1d:44:55:1c:83:e6:90:a1:6d:9c:ff:66:
e1:97:42:88:74:c9:d9:8e:a9:0d:f7:25:5e:1b:86:
40:40:0b:72:a7:b5:84:68:1e:49:7f:24:1a:83:0c:
41:ae:3a:83:fe:f4:1b:69:e2:49:7e:01:f8:6c:58:
60:9c:6c:1d:b8:8b:62:8c:e5:c0:f6:15:2c:6b:b0:
4b:54:1a:2a:00:55:0d:f2:ef:f8:92:b1:2d:99:82:
57:bf:cc:65:ce:65:51:15:9f:ce:d1:89:7a:52:1c:
11:5d:b5:e7:07:73:2b:ff:5b:d2:7b:79:ee:83:8c:
d8:41:ca:a5:af:fb:e8:68:7a:2f:21:d9:56:de:c4:
28:ef:f6:72:0d:b5:d5:35:2f:b9:ac:cb:94:d8:b5:
fc:9d:51:d0:a4:e2:a8:5b:28:f3:32:fc:26:1a:be:
aa:84:24:60:ae:40:4c:e6:5e:3a:22:45:1c:b0:a5:
4d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:02:14:09:27:92:52:87:90:A2:24:26:E9:F2:64:D6:B0:45:D8:24
X509v3 Authority Key Identifier:
keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/EAIUCSeSUoeQoiQm6fJk1rBF2CQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.56.0/22
185.36.0.0/22
Signature Algorithm: sha256WithRSAEncryption
0e:3b:d1:85:bc:49:17:f3:47:5f:0a:78:81:f2:18:2a:41:0a:
e1:2b:de:63:d6:d3:ac:ae:14:d2:be:9f:75:c6:01:a2:6b:3a:
43:c0:81:4c:ad:99:43:c0:10:60:54:e6:ca:34:a6:8e:02:73:
80:8e:8d:2c:f3:8d:99:fd:33:a6:b3:62:11:30:69:eb:e1:9d:
fc:27:d0:4a:1e:ea:02:f0:6a:72:a2:5b:9c:d7:2f:84:7f:4c:
87:37:e7:d4:3a:92:db:d0:5e:36:4b:73:73:83:26:4a:76:fc:
fa:8d:5e:c2:b2:85:35:b4:23:c8:31:7b:ec:0e:24:2b:d3:bf:
a3:cc:76:f4:bb:f0:98:56:fa:41:49:14:c6:5f:33:5a:9d:b6:
d2:09:55:17:c3:06:41:dd:20:bc:b4:bd:59:60:a4:ef:45:25:
98:d4:a8:ab:24:3a:68:ab:d8:c8:b4:d3:c1:01:66:05:a7:99:
23:e4:c0:e2:43:c8:96:b8:8f:48:4a:7c:29:0f:99:c0:9b:16:
34:ed:1c:16:14:a8:3f:ad:05:84:f7:40:57:f7:7d:fa:b5:09:
fc:4e:07:a6:67:9d:ec:80:33:cb:66:e3:d3:be:56:41:4e:25:
66:2e:cf:94:8e:08:45:87:1e:a6:c6:b3:3e:13:60:ec:80:2c:
3b:c2:4a:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 09:55:09 2024 by rpki-client on console-fra.rpki-client.org