Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/eLQ3GQINMmghC3rOXBDi22mculU.roa
File: eLQ3GQINMmghC3rOXBDi22mculU.roa (raw, json)
Hash identifier: QMg6X+fK7NtUPm/nbewRR53AOzVldaFAkfc+EauAyL8=
Subject key identifier: 78:B4:37:19:02:0D:32:68:21:0B:7A:CE:5C:10:E2:DB:69:9C:BA:55
Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Certificate serial: 018CC2DACF97DFE3532BB43FFA62BB70F4C7
Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/eLQ3GQINMmghC3rOXBDi22mculU.roa
Signing time: Mon 01 Jan 2024 02:29:28 +0000
ROA not before: Mon 01 Jan 2024 02:29:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205499
IP address blocks: 185.188.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 04:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:cf:97:df:e3:53:2b:b4:3f:fa:62:bb:70:f4:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Validity
Not Before: Jan 1 02:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=78b43719020d3268210b7ace5c10e2db699cba55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:4e:95:62:03:5c:9c:8a:83:57:c6:ae:51:52:
b2:6a:95:f2:92:d4:c0:eb:ac:76:36:d6:70:86:98:
c5:c6:c4:53:ab:67:6d:77:ac:ad:a6:bf:b4:3f:70:
d8:ef:43:f7:06:10:c7:82:bc:04:f0:8c:d6:79:1c:
59:49:a7:35:24:51:0d:a4:71:59:47:3d:2b:5f:6f:
36:93:0e:86:3a:cc:e9:a9:4b:82:d4:40:5d:90:1e:
40:c5:6e:fb:fe:a7:28:01:c5:13:e0:9d:9c:89:9b:
03:86:22:ad:92:35:bc:29:48:9b:18:7d:a0:6d:2b:
71:a0:a6:41:14:f7:94:ad:be:83:a5:6d:62:15:fd:
e6:89:4b:36:a4:ce:71:9e:0a:1f:3b:a4:b7:bc:3b:
77:cb:eb:0e:09:55:2c:00:60:d8:8a:d4:11:3e:6f:
55:d8:27:62:5c:35:6e:63:cc:9d:3f:70:2f:c5:65:
c3:56:4c:96:64:47:18:c4:3e:dd:6b:a5:a3:aa:8c:
c6:b2:33:93:da:dc:4a:b8:48:6d:a3:f5:cd:b0:a7:
9e:05:7f:90:b3:25:a8:bd:43:20:d1:c5:bf:56:5b:
42:dd:7c:58:72:11:4f:b9:59:99:b1:21:b1:7f:25:
6f:87:8d:0f:e0:49:4d:63:fa:3e:95:4e:cf:af:33:
28:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:B4:37:19:02:0D:32:68:21:0B:7A:CE:5C:10:E2:DB:69:9C:BA:55
X509v3 Authority Key Identifier:
keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/eLQ3GQINMmghC3rOXBDi22mculU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.188.9.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:30:41:a7:69:88:88:0a:28:73:8c:66:a2:da:08:0a:10:79:
c2:a6:f7:9c:81:a8:88:f9:9c:66:59:6b:26:61:dc:f3:16:1c:
63:61:4f:6a:a9:51:58:69:4a:88:22:b1:6b:f7:5c:d9:28:3d:
f4:c1:19:c5:89:f6:9a:a3:51:eb:20:b0:3e:22:66:f9:1d:b5:
83:7a:39:b3:a7:75:7a:07:9e:ce:14:57:1e:32:b5:a5:c5:df:
71:1f:c7:07:a8:5c:ea:a8:b0:68:01:6f:cd:f4:29:69:0d:24:
2b:ac:5f:4a:ef:ee:12:c8:f4:83:bb:06:65:37:64:c9:6a:72:
a9:3d:97:a3:45:41:c2:34:3f:b5:14:ec:67:02:51:1e:2b:46:
52:00:0e:ed:f0:e4:f9:5f:d0:6d:ed:8a:5a:0d:fb:c0:7e:e5:
2d:34:53:92:8a:7a:26:76:9a:93:a8:cd:f4:20:4e:e1:eb:c8:
ac:a4:23:ca:fb:85:7f:a9:1c:dd:10:42:73:c5:f4:de:ce:71:
ed:83:2d:91:9d:21:40:d0:24:85:9f:22:45:9d:0e:28:30:31:
e2:13:2a:34:5a:1e:50:47:81:35:cd:83:e1:88:d1:bb:6e:50:
eb:6b:bb:9e:10:4a:20:06:1b:4c:0c:63:5b:44:3f:4d:bf:e4:
cb:0e:c2:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 11:22:54 2024 by rpki-client on console-ams.rpki-client.org