Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/a00c46-8031-411f-8503-a0f2591dd2bd/1/ESSqtK2wO7i2bUMK9L2wNaQe-eE.roa
File: ESSqtK2wO7i2bUMK9L2wNaQe-eE.roa (raw, json)
Hash identifier: w1T7eC5xYqPCUrRh0ms1cvMKA8DmkoPGGFP2qqm45z8=
Subject key identifier: 11:24:AA:B4:AD:B0:3B:B8:B6:6D:43:0A:F4:BD:B0:35:A4:1E:F9:E1
Certificate issuer: /CN=df62bbf15de344acdb5f7800450f2c82d797d798
Certificate serial: 018CC4247D3B595F4B019629B4865EB19E7D
Authority key identifier: DF:62:BB:F1:5D:E3:44:AC:DB:5F:78:00:45:0F:2C:82:D7:97:D7:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/32K78V3jRKzbX3gARQ8sgteX15g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/a00c46-8031-411f-8503-a0f2591dd2bd/1/ESSqtK2wO7i2bUMK9L2wNaQe-eE.roa
Signing time: Mon 01 Jan 2024 08:29:34 +0000
ROA not before: Mon 01 Jan 2024 08:29:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60155
IP address blocks: 185.55.200.0/22 maxlen: 22
2a04:d640::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/a00c46-8031-411f-8503-a0f2591dd2bd/1/32K78V3jRKzbX3gARQ8sgteX15g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/a00c46-8031-411f-8503-a0f2591dd2bd/1/32K78V3jRKzbX3gARQ8sgteX15g.mft
rsync://rpki.ripe.net/repository/DEFAULT/32K78V3jRKzbX3gARQ8sgteX15g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 20:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:7d:3b:59:5f:4b:01:96:29:b4:86:5e:b1:9e:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df62bbf15de344acdb5f7800450f2c82d797d798
Validity
Not Before: Jan 1 08:29:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1124aab4adb03bb8b66d430af4bdb035a41ef9e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:57:1c:8b:4e:26:ec:85:40:c2:91:50:fe:ee:
e4:c5:19:9f:f8:8f:c7:e5:a3:5d:26:42:60:9c:e8:
a0:7e:3b:40:81:87:0a:37:7e:c0:1b:55:1b:76:3e:
e7:ad:42:69:3a:66:3b:dd:46:56:a8:11:72:13:5a:
52:67:57:35:b1:75:4f:e6:4b:c6:f0:22:98:57:82:
9d:24:c0:90:8f:35:86:87:36:a2:46:6b:95:2b:20:
29:c6:93:3c:2f:64:ac:bb:54:8f:9d:f8:a0:2f:fc:
c4:69:bc:6b:5b:26:73:50:88:89:a6:85:ef:87:09:
4c:f3:db:8d:d5:86:a3:df:b5:eb:50:b1:16:be:9c:
b3:33:3b:6f:e9:5e:ea:78:01:c1:b5:43:7e:23:26:
dd:49:cf:e2:86:47:55:1a:d2:17:1d:aa:d7:5f:6c:
65:0d:be:b1:94:fb:9a:42:ed:9d:96:46:7e:11:bc:
fd:bf:4c:36:c2:8d:13:8a:e6:ab:78:21:de:71:34:
6f:30:ff:4e:21:60:64:be:e7:aa:d7:32:3a:05:1c:
9e:f0:f5:97:b7:46:35:d6:8f:57:95:89:ca:2f:9b:
9e:87:7b:14:d3:c5:cc:d2:3a:29:45:20:cc:d7:14:
26:b2:85:e3:9f:5d:a9:79:6f:b9:77:ef:ba:9a:4b:
3f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:24:AA:B4:AD:B0:3B:B8:B6:6D:43:0A:F4:BD:B0:35:A4:1E:F9:E1
X509v3 Authority Key Identifier:
keyid:DF:62:BB:F1:5D:E3:44:AC:DB:5F:78:00:45:0F:2C:82:D7:97:D7:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/32K78V3jRKzbX3gARQ8sgteX15g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/a00c46-8031-411f-8503-a0f2591dd2bd/1/ESSqtK2wO7i2bUMK9L2wNaQe-eE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/a00c46-8031-411f-8503-a0f2591dd2bd/1/32K78V3jRKzbX3gARQ8sgteX15g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.55.200.0/22
IPv6:
2a04:d640::/29
Signature Algorithm: sha256WithRSAEncryption
2a:ae:f5:bc:21:12:8d:29:05:08:aa:3e:48:06:f1:df:0a:98:
80:b0:66:c9:02:91:b3:41:14:e3:bf:e3:38:c4:ee:02:de:c5:
ea:04:16:72:14:8d:de:87:7f:94:a5:56:81:c7:a3:80:0d:c5:
cd:5d:07:ed:42:89:9b:0d:99:58:83:cb:f3:85:7b:8e:bf:6c:
24:01:05:60:a0:0c:b7:56:b8:d7:56:02:7f:a1:cc:b8:b1:0f:
2d:86:5d:13:c6:20:6e:ae:7d:20:72:29:a0:b8:53:7a:30:0a:
ff:47:c7:74:80:9c:77:9f:40:0a:9b:3b:61:4f:f7:f9:31:c1:
0b:3b:cd:fe:af:b2:b1:5c:1f:79:3d:39:da:28:5f:a5:85:05:
d9:26:c1:08:96:46:d7:74:22:69:c5:2c:d9:d9:21:0e:2e:48:
75:b0:86:f4:dd:c2:23:a2:9d:96:5e:50:d6:80:df:21:b7:77:
22:45:95:f3:62:68:3f:3c:a0:1b:26:0d:2b:3f:f4:d6:df:1d:
f7:33:4b:6b:06:71:0c:30:bb:ff:b4:cd:99:bd:6c:01:fc:5f:
79:fd:f0:64:91:17:e7:1f:b4:4f:0d:4b:74:2b:4e:d5:53:65:
a1:31:2a:5e:e6:0a:2f:2e:e8:27:11:a8:b4:8c:50:97:ab:e9:
4c:06:10:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 05:10:07 2024 by rpki-client on console-fra.rpki-client.org