Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/eGmAlQqD_aI1o5A0zQDmjexDRcA.roa
File: eGmAlQqD_aI1o5A0zQDmjexDRcA.roa (raw, json)
Hash identifier: MK7P9j/r0rUrkkesJqq+bhTLEUvAPlvJ1k16Bsv2/WY=
Subject key identifier: 78:69:80:95:0A:83:FD:A2:35:A3:90:34:CD:00:E6:8D:EC:43:45:C0
Certificate issuer: /CN=638c509cb77b0149b6f66f5019f858b3acf942e9
Certificate serial: 018CC6B7CAD6397530DA686EF010FBBF9536
Authority key identifier: 63:8C:50:9C:B7:7B:01:49:B6:F6:6F:50:19:F8:58:B3:AC:F9:42:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y4xQnLd7AUm29m9QGfhYs6z5Quk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/eGmAlQqD_aI1o5A0zQDmjexDRcA.roa
Signing time: Mon 01 Jan 2024 20:29:42 +0000
ROA not before: Mon 01 Jan 2024 20:29:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29562
IP address blocks: 185.2.142.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y4xQnLd7AUm29m9QGfhYs6z5Quk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 08:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:ca:d6:39:75:30:da:68:6e:f0:10:fb:bf:95:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=638c509cb77b0149b6f66f5019f858b3acf942e9
Validity
Not Before: Jan 1 20:29:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=786980950a83fda235a39034cd00e68dec4345c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:da:d5:00:db:20:de:be:bb:87:ce:56:21:a1:
f3:a2:a4:bd:1f:0a:85:30:bf:d1:44:e0:f2:1f:78:
59:2b:cd:13:48:a4:b6:a8:2b:35:9c:bc:c6:cf:83:
5b:dd:23:c8:8b:58:28:48:47:76:2e:df:4a:9d:09:
95:ab:72:5a:64:ce:a8:f8:ad:6f:cc:ea:26:d8:53:
14:a6:35:dd:55:6e:9e:06:3a:35:6b:30:ce:49:4b:
df:ce:b1:32:e9:1f:0e:b8:bf:d6:f7:09:cf:fe:02:
f6:73:e0:44:60:a6:65:97:02:76:e9:7e:d2:79:49:
4d:f1:70:ac:da:03:35:6b:90:00:d3:20:a9:12:39:
77:9c:0a:2d:59:64:f4:6e:0d:6b:8c:34:61:a8:12:
29:6f:2d:1c:f0:83:d2:cc:cf:6c:ea:f8:4b:cd:d1:
fa:a0:ce:b0:ae:83:8c:5e:a0:e2:d0:38:b7:c0:5d:
e9:65:d9:db:0e:44:4e:6a:39:5c:cf:42:13:18:df:
32:e8:d6:b3:13:c2:ba:39:c8:de:1f:75:80:0b:77:
74:d1:69:13:09:48:de:94:30:03:da:85:19:17:41:
2e:c8:b8:71:8d:ae:7d:0f:75:b8:26:7b:46:58:5a:
a8:96:7a:64:36:00:bb:3c:2a:b2:c5:de:f1:94:aa:
cd:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:69:80:95:0A:83:FD:A2:35:A3:90:34:CD:00:E6:8D:EC:43:45:C0
X509v3 Authority Key Identifier:
keyid:63:8C:50:9C:B7:7B:01:49:B6:F6:6F:50:19:F8:58:B3:AC:F9:42:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y4xQnLd7AUm29m9QGfhYs6z5Quk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/eGmAlQqD_aI1o5A0zQDmjexDRcA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.2.142.0/23
Signature Algorithm: sha256WithRSAEncryption
33:b8:b3:09:a6:92:2c:64:af:0a:bd:c4:0e:48:29:9d:b4:c2:
da:58:88:88:56:21:cf:48:0d:5e:d1:99:2c:6b:15:ab:47:02:
62:a2:c9:54:f5:b6:36:fb:8c:3a:9d:fe:36:e3:37:2c:f6:5f:
42:92:a1:06:4d:1b:d7:58:5c:2c:4c:9f:93:0c:01:aa:c9:34:
c0:fc:bf:53:03:18:b4:48:c1:e3:96:59:81:31:52:55:f2:81:
1f:e8:b8:aa:27:51:ef:9f:72:01:bf:af:f6:46:9c:fd:75:fb:
a5:f5:b7:b4:9e:df:c4:75:a9:0d:ec:45:6b:45:a0:c7:64:c1:
bb:0e:c5:0a:db:b9:39:c2:83:b3:12:81:c4:b1:84:dc:76:be:
30:9a:ca:d9:e2:06:cc:5b:78:bf:0f:2f:52:68:b2:46:85:c3:
2c:ef:85:6a:85:68:43:dd:38:d5:2b:2b:37:85:08:49:3a:bf:
90:3a:23:1a:d1:23:44:0d:b3:e3:c8:4c:88:32:df:0f:58:ef:
47:79:9d:57:f6:af:a3:9b:3a:85:fa:1d:5d:ef:02:80:59:64:
55:47:28:99:16:a7:73:9e:e9:2b:ba:98:9a:50:00:be:cd:1a:
b2:cc:61:15:4b:2c:ae:0c:66:7d:5d:77:21:0c:91:fa:cd:c3:
a5:7a:41:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:57:06 2024 by rpki-client on console-ams.rpki-client.org