Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/e1iIcFWANbDhDShh18PiCeZ-UJs.roa
File: e1iIcFWANbDhDShh18PiCeZ-UJs.roa (raw, json)
Hash identifier: CYLFcen6/aEVdzDB+AQc3nL7d3Mc3YoZG1i4CjXJyLI=
Subject key identifier: 7B:58:88:70:55:80:35:B0:E1:0D:28:61:D7:C3:E2:09:E6:7E:50:9B
Certificate issuer: /CN=48724742c3f54e179b82e6af8e33e0d9d2fbd4d5
Certificate serial: 018CC801444E936507389A1D858AA2DC7DD9
Authority key identifier: 48:72:47:42:C3:F5:4E:17:9B:82:E6:AF:8E:33:E0:D9:D2:FB:D4:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SHJHQsP1ThebguavjjPg2dL71NU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/e1iIcFWANbDhDShh18PiCeZ-UJs.roa
Signing time: Tue 02 Jan 2024 02:29:35 +0000
ROA not before: Tue 02 Jan 2024 02:29:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35104
IP address blocks: 185.48.149.0/24 maxlen: 24
185.48.148.0/24 maxlen: 24
185.48.148.0/23 maxlen: 23
185.48.151.0/24 maxlen: 24
185.48.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/SHJHQsP1ThebguavjjPg2dL71NU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/SHJHQsP1ThebguavjjPg2dL71NU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SHJHQsP1ThebguavjjPg2dL71NU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Sep 2024 13:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:44:4e:93:65:07:38:9a:1d:85:8a:a2:dc:7d:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48724742c3f54e179b82e6af8e33e0d9d2fbd4d5
Validity
Not Before: Jan 2 02:29:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7b588870558035b0e10d2861d7c3e209e67e509b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:30:33:bf:0d:96:25:f0:94:9e:11:99:74:58:
0c:dd:98:69:c0:a2:f2:cc:ec:d4:f7:2d:f8:4a:64:
c6:63:e2:57:25:07:c4:b5:44:66:f6:17:3f:da:a3:
67:39:5c:60:eb:37:02:2c:3b:dd:b1:30:8f:f5:93:
ca:f9:9f:9d:1a:0f:c1:6b:36:53:d0:c2:b4:86:fc:
b5:71:b6:86:e7:b6:bb:1f:61:b1:e9:c2:b1:b5:4e:
78:04:aa:1c:3a:b9:32:2b:bd:b3:1b:83:c6:86:59:
a3:94:86:ab:71:17:fa:72:49:58:b1:bf:e3:f9:11:
5a:7d:eb:87:f3:b4:96:8b:74:21:7b:09:91:39:14:
7b:fd:35:86:64:47:df:59:cc:79:3a:32:3c:f2:25:
ea:9c:19:cf:ac:05:f2:72:5a:65:15:a6:6d:2f:6d:
4b:58:1c:4d:86:f4:0c:94:1e:41:3f:16:e8:04:2c:
79:ca:cf:10:32:45:c5:f5:79:14:18:fb:76:a6:7b:
25:75:33:cc:04:4a:18:2e:82:b7:ee:58:bb:b5:a7:
ce:da:dd:e1:50:1e:ea:78:27:76:4d:e8:cb:30:3c:
10:de:c4:97:ce:d2:70:d1:8a:42:56:c6:55:c9:f8:
89:2b:01:3c:ab:e6:13:41:e0:07:e0:76:d8:1f:a3:
d1:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:58:88:70:55:80:35:B0:E1:0D:28:61:D7:C3:E2:09:E6:7E:50:9B
X509v3 Authority Key Identifier:
keyid:48:72:47:42:C3:F5:4E:17:9B:82:E6:AF:8E:33:E0:D9:D2:FB:D4:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SHJHQsP1ThebguavjjPg2dL71NU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/e1iIcFWANbDhDShh18PiCeZ-UJs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/SHJHQsP1ThebguavjjPg2dL71NU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.48.148.0/22
Signature Algorithm: sha256WithRSAEncryption
36:e0:85:5b:c6:6d:3b:81:29:8f:93:8f:9f:52:10:d4:53:7d:
bc:4f:c7:b3:1b:67:8a:25:38:96:cb:f3:f1:03:18:ac:b7:8e:
07:95:02:ef:37:f4:5f:d2:0b:81:8a:e1:02:48:4f:5e:44:26:
c3:2b:80:2c:ed:52:f5:9f:e0:9c:5a:1c:98:bb:e7:fa:11:bc:
02:9c:5e:f4:1d:9d:64:f8:2d:30:8f:ee:32:a2:3a:4c:84:ed:
a8:f6:6b:f5:73:7a:99:5e:98:a1:d2:cb:14:a5:89:de:92:7f:
a0:d1:d7:b9:a8:ee:15:78:b6:fe:7f:e6:6e:d9:98:c4:04:18:
4b:f6:5b:cf:ed:56:9d:3f:9a:7a:4a:79:fe:73:df:1f:7a:3b:
20:2a:0d:4e:66:cc:35:46:55:32:a3:2c:d3:9c:9e:10:82:fb:
31:e7:1c:05:00:78:05:77:9c:30:0a:de:22:45:c5:2f:61:ae:
a7:ef:bf:6a:d7:c2:2f:5a:ba:6f:1b:b2:f0:e7:41:63:7a:ae:
db:54:bf:ef:03:2b:6f:6c:95:10:b5:b8:ed:54:a2:41:c7:67:
86:5e:23:52:8b:96:aa:95:ed:be:e9:dc:c7:ee:9e:aa:7e:da:
79:15:f0:64:3a:0d:99:d4:65:36:65:45:3f:c5:e2:ae:0c:1e:
45:09:f3:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 22:18:38 2024 by rpki-client on console-fra.rpki-client.org