Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/6d8a2c-e228-4d40-8d90-dec20ddc73aa/1/jZPEmKAhBO4v0zFAWZaPRCr8yek.roa
File: jZPEmKAhBO4v0zFAWZaPRCr8yek.roa (raw, json)
Hash identifier: l9kCW6lSJw9xnHW3vdkY5XNrk6vwNQY2iNVIxM+r26o=
Subject key identifier: 8D:93:C4:98:A0:21:04:EE:2F:D3:31:40:59:96:8F:44:2A:FC:C9:E9
Certificate issuer: /CN=216ebab4f46f254d95f4965b84a8cf24196b9c95
Certificate serial: 018E74CD2546F3A015ADC340C96199AAB13B
Authority key identifier: 21:6E:BA:B4:F4:6F:25:4D:95:F4:96:5B:84:A8:CF:24:19:6B:9C:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IW66tPRvJU2V9JZbhKjPJBlrnJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/6d8a2c-e228-4d40-8d90-dec20ddc73aa/1/jZPEmKAhBO4v0zFAWZaPRCr8yek.roa
Signing time: Mon 25 Mar 2024 08:49:45 +0000
ROA not before: Mon 25 Mar 2024 08:49:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 185.201.57.0/24 maxlen: 24
185.201.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/6d8a2c-e228-4d40-8d90-dec20ddc73aa/1/IW66tPRvJU2V9JZbhKjPJBlrnJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/6d8a2c-e228-4d40-8d90-dec20ddc73aa/1/IW66tPRvJU2V9JZbhKjPJBlrnJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/IW66tPRvJU2V9JZbhKjPJBlrnJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:74:cd:25:46:f3:a0:15:ad:c3:40:c9:61:99:aa:b1:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=216ebab4f46f254d95f4965b84a8cf24196b9c95
Validity
Not Before: Mar 25 08:49:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8d93c498a02104ee2fd3314059968f442afcc9e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:7d:ed:9c:5d:c4:93:aa:e7:12:04:fd:d3:b5:
a6:05:79:b9:f7:09:ab:77:8d:61:0b:b3:4e:8b:58:
a4:27:ce:d1:0b:05:4d:22:86:02:e7:1e:81:57:e6:
17:41:90:58:5e:b0:27:3a:f7:9e:18:aa:c4:cf:61:
37:f5:f1:ba:73:d7:0b:42:f6:b3:33:f0:3e:75:17:
b0:92:73:a5:12:53:0f:4b:af:50:c7:03:ec:f6:32:
c2:fd:37:ff:b3:03:78:36:ed:f6:03:82:09:cd:78:
19:3b:6d:3b:d9:5d:20:c5:49:06:b8:96:d5:08:47:
9b:b7:4c:11:cb:57:02:4e:0e:67:84:06:1d:65:67:
b7:d0:51:de:bc:73:bd:70:08:88:4f:a4:99:db:f7:
4f:0f:2d:e4:87:f3:83:a1:8f:6c:ec:bd:2e:e6:66:
95:0d:a3:fb:cb:14:ea:5f:bb:de:21:32:62:64:40:
c0:a5:9b:1a:b3:0e:d5:91:9e:40:ae:ef:58:01:93:
9d:e4:22:17:66:76:12:65:eb:b4:e3:69:61:73:9e:
da:02:1c:8f:49:32:d6:60:9b:ef:52:15:1c:a0:0a:
66:43:f9:3a:40:42:5d:d5:bd:5e:60:13:ab:12:65:
99:55:92:18:17:a7:c8:87:e3:59:a7:7f:55:6a:21:
2b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:93:C4:98:A0:21:04:EE:2F:D3:31:40:59:96:8F:44:2A:FC:C9:E9
X509v3 Authority Key Identifier:
keyid:21:6E:BA:B4:F4:6F:25:4D:95:F4:96:5B:84:A8:CF:24:19:6B:9C:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IW66tPRvJU2V9JZbhKjPJBlrnJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6d8a2c-e228-4d40-8d90-dec20ddc73aa/1/jZPEmKAhBO4v0zFAWZaPRCr8yek.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6d8a2c-e228-4d40-8d90-dec20ddc73aa/1/IW66tPRvJU2V9JZbhKjPJBlrnJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.201.57.0-185.201.58.255
Signature Algorithm: sha256WithRSAEncryption
74:fa:90:a1:2d:d4:91:c1:20:7a:80:19:bc:99:fb:9c:16:cf:
86:16:5e:81:53:01:21:72:da:48:a6:25:7f:11:e1:a3:8f:24:
81:cb:00:02:34:39:f7:db:e0:6f:94:5b:d5:37:fb:1e:35:08:
2f:7b:94:36:48:1b:4f:d3:54:db:c3:26:51:07:fc:aa:99:5b:
4f:7e:e7:2f:bc:b8:36:9c:a4:cf:5c:55:58:3f:69:dd:42:81:
cd:13:5e:c8:c7:68:9a:81:ce:56:6f:9e:5f:f1:11:17:0b:4f:
42:5e:6d:b0:7d:1c:38:1f:9a:a2:c7:78:ed:14:30:33:d5:fe:
af:c7:39:5a:6e:b2:ae:0d:dc:55:9e:6d:4d:2e:1f:60:22:37:
56:bd:10:56:d1:e2:4e:03:c2:45:85:4f:2f:e8:11:06:0d:f5:
e3:8e:9b:80:be:10:1c:19:d2:0e:35:87:69:92:20:77:e5:21:
7e:c6:5e:86:0d:47:19:2c:32:e0:09:80:ee:53:0f:92:65:e7:
56:ee:bd:02:d0:87:e3:db:49:5a:db:a2:91:26:3f:f8:6a:19:
c9:86:f2:de:c0:21:2f:a3:3e:9f:26:23:73:33:74:89:04:dc:
7b:00:5e:81:49:60:70:da:ac:b5:89:f2:c7:1d:ee:b4:fe:4b:
10:a1:25:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 13:23:08 2024 by rpki-client on console-fra.rpki-client.org