Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/52cb8d-11d4-4f9c-8f92-26e64d78b0c6/1/e8nHaTNCmUlbP1oHWMV2h6RU4P8.roa
File: e8nHaTNCmUlbP1oHWMV2h6RU4P8.roa (raw, json)
Hash identifier: xerB5okZzOX38ANd498TvkXnAGP7RTQraolEYAKGmd8=
Subject key identifier: 7B:C9:C7:69:33:42:99:49:5B:3F:5A:07:58:C5:76:87:A4:54:E0:FF
Certificate issuer: /CN=19b105d148de996036fdf21cb208a338a158ceda
Certificate serial: 018DB23608C084A2F83DB60114E29C9FCC45
Authority key identifier: 19:B1:05:D1:48:DE:99:60:36:FD:F2:1C:B2:08:A3:38:A1:58:CE:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GbEF0UjemWA2_fIcsgijOKFYzto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/52cb8d-11d4-4f9c-8f92-26e64d78b0c6/1/e8nHaTNCmUlbP1oHWMV2h6RU4P8.roa
Signing time: Fri 16 Feb 2024 13:58:22 +0000
ROA not before: Fri 16 Feb 2024 13:58:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 185.138.242.0/24 maxlen: 24
2a07:10c0:c57::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/52cb8d-11d4-4f9c-8f92-26e64d78b0c6/1/GbEF0UjemWA2_fIcsgijOKFYzto.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/52cb8d-11d4-4f9c-8f92-26e64d78b0c6/1/GbEF0UjemWA2_fIcsgijOKFYzto.mft
rsync://rpki.ripe.net/repository/DEFAULT/GbEF0UjemWA2_fIcsgijOKFYzto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 14:46:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:b2:36:08:c0:84:a2:f8:3d:b6:01:14:e2:9c:9f:cc:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19b105d148de996036fdf21cb208a338a158ceda
Validity
Not Before: Feb 16 13:58:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7bc9c769334299495b3f5a0758c57687a454e0ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:d3:05:2b:18:14:9d:7e:00:7d:19:ed:eb:71:
62:d3:03:0a:9b:ed:dc:ca:e5:7b:1f:b0:c8:f2:6f:
14:ad:d5:bd:e3:99:7c:71:97:f8:8f:55:cc:7c:ef:
4b:12:13:ab:cf:0b:23:50:e6:b4:72:30:6c:be:e4:
59:20:e3:6c:8b:02:03:a1:69:1d:1f:b9:21:43:81:
71:e8:98:48:89:7a:8b:ab:f9:06:ca:f8:50:80:9f:
12:d3:27:9d:9c:b5:2f:ea:88:9a:3e:fb:bd:67:78:
39:01:49:1b:b6:df:32:1b:eb:9d:01:f3:ea:f1:26:
1a:67:fe:63:d1:b9:2c:c6:16:76:8c:eb:8b:79:06:
6a:c2:9a:b1:b4:f3:33:99:45:20:3d:f4:34:57:88:
0b:6d:2d:52:63:8b:f1:71:b1:01:e4:9a:ad:98:11:
17:bd:eb:28:1a:de:64:75:4d:5c:cc:6a:98:64:31:
bf:88:d1:89:32:58:d7:f9:56:de:f0:5a:1e:84:74:
28:42:81:42:2a:b7:c0:97:cf:36:b1:f2:4e:ab:f2:
1d:53:04:33:19:14:a3:c5:6b:a3:4f:bf:83:74:00:
25:34:c1:6a:a7:c2:69:8d:98:ea:63:3e:ed:ee:b2:
1f:21:c0:27:61:2b:b6:31:54:8d:52:b4:4d:64:ee:
30:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:C9:C7:69:33:42:99:49:5B:3F:5A:07:58:C5:76:87:A4:54:E0:FF
X509v3 Authority Key Identifier:
keyid:19:B1:05:D1:48:DE:99:60:36:FD:F2:1C:B2:08:A3:38:A1:58:CE:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbEF0UjemWA2_fIcsgijOKFYzto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/52cb8d-11d4-4f9c-8f92-26e64d78b0c6/1/e8nHaTNCmUlbP1oHWMV2h6RU4P8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/52cb8d-11d4-4f9c-8f92-26e64d78b0c6/1/GbEF0UjemWA2_fIcsgijOKFYzto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.138.242.0/24
IPv6:
2a07:10c0:c57::/48
Signature Algorithm: sha256WithRSAEncryption
6b:2d:39:02:f5:93:e8:17:2a:6f:60:ea:84:7b:09:0d:cf:0d:
c4:6c:4c:73:b7:ac:0b:84:1c:fd:81:99:31:fb:80:1a:a0:48:
d9:df:c8:9b:72:69:0d:5e:34:c7:9a:72:1a:bc:09:f5:64:67:
f9:c9:5e:32:27:7d:00:4e:81:30:22:4d:46:d8:1f:1e:06:10:
4e:c2:ab:9f:25:8f:aa:ad:f3:a7:64:df:f5:eb:50:e3:ad:06:
a9:c6:e2:4b:ad:5b:e8:48:5f:c2:91:56:5b:56:fe:69:f7:50:
a3:0e:00:6d:ab:69:36:1a:c0:e2:fa:eb:2d:c2:48:ad:1d:7d:
d0:05:01:32:4a:01:cc:6e:86:b5:42:27:f1:d0:f4:8a:5b:6b:
30:38:b7:89:d6:68:53:45:e2:d1:d1:f4:14:95:43:40:53:15:
c0:6b:af:d9:88:8a:ab:11:d5:68:0f:b6:b6:f1:38:02:4b:69:
68:de:96:48:ae:e6:b8:12:55:1a:48:7e:3b:c9:c1:66:7c:c5:
fb:01:31:3e:f2:d8:bf:76:cf:62:60:0c:96:98:84:49:94:e4:
fe:ea:aa:09:2d:35:b6:b9:69:62:7e:a6:8a:34:36:be:08:a2:
c3:09:e1:57:79:e0:07:8a:f1:05:80:70:0e:00:a8:05:1e:e7:
fc:4a:86:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 23:56:39 2024 by rpki-client on console-fra.rpki-client.org