Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/ELFSPrGJOIn41OSIKTaUx-HfV5Q.roa
File: ELFSPrGJOIn41OSIKTaUx-HfV5Q.roa (raw, json)
Hash identifier: 51fQXM/reMvQXjjNCesidJmvG/OkKLsPgIgsl4cfejo=
Subject key identifier: 10:B1:52:3E:B1:89:38:89:F8:D4:E4:88:29:36:94:C7:E1:DF:57:94
Certificate issuer: /CN=632cd87feabe407522e06553f2eb05a0c1602fbf
Certificate serial: 018D13D7F08BF2058C11D8D25E3A7BB8FBD3
Authority key identifier: 63:2C:D8:7F:EA:BE:40:75:22:E0:65:53:F2:EB:05:A0:C1:60:2F:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YyzYf-q-QHUi4GVT8usFoMFgL78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/ELFSPrGJOIn41OSIKTaUx-HfV5Q.roa
Signing time: Tue 16 Jan 2024 19:55:35 +0000
ROA not before: Tue 16 Jan 2024 19:55:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58061
IP address blocks: 185.251.22.0/24 maxlen: 24
212.24.120.0/24 maxlen: 24
212.52.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/YyzYf-q-QHUi4GVT8usFoMFgL78.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/YyzYf-q-QHUi4GVT8usFoMFgL78.mft
rsync://rpki.ripe.net/repository/DEFAULT/YyzYf-q-QHUi4GVT8usFoMFgL78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 May 2024 14:15:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:13:d7:f0:8b:f2:05:8c:11:d8:d2:5e:3a:7b:b8:fb:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=632cd87feabe407522e06553f2eb05a0c1602fbf
Validity
Not Before: Jan 16 19:55:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=10b1523eb1893889f8d4e488293694c7e1df5794
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3b:d1:56:32:1f:b9:1a:b5:5d:29:6b:0e:44:
ce:27:02:81:1f:cb:43:56:a1:48:00:97:cd:26:e1:
47:99:89:3d:bc:e2:b7:33:16:14:df:41:69:84:75:
de:fe:89:3c:83:c4:54:dd:8b:7d:a1:83:78:1e:bc:
a2:14:98:ce:37:31:c5:69:3d:02:b1:98:11:97:3d:
a4:99:76:71:37:20:2b:95:b8:a3:f2:99:7a:85:c0:
ac:cf:99:69:e7:ae:59:dc:62:7a:71:b5:f2:46:7b:
22:c7:5f:05:45:af:b2:a2:d5:e7:98:02:38:17:8a:
60:2a:e6:9f:4d:ee:e8:5a:72:89:b3:93:5c:c3:15:
c6:e3:44:5d:b4:c5:2b:44:97:45:20:4a:f7:0c:cd:
78:3a:92:1a:c4:d9:95:22:79:b6:bc:25:fe:88:65:
48:e0:46:90:a4:ca:ce:34:8b:5c:5a:e0:d6:1f:63:
e8:2a:12:cc:2f:3a:75:bb:1a:13:7b:5e:41:80:8a:
60:42:7e:61:7d:a8:5a:79:0e:03:a0:89:db:04:20:
31:63:80:ff:39:d9:8c:09:d1:25:d2:38:fd:0c:ff:
d5:49:0b:6c:9e:88:79:35:47:18:e2:d3:f0:00:68:
32:39:d5:dc:f2:51:25:78:61:62:b7:73:cd:b7:b8:
93:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:B1:52:3E:B1:89:38:89:F8:D4:E4:88:29:36:94:C7:E1:DF:57:94
X509v3 Authority Key Identifier:
keyid:63:2C:D8:7F:EA:BE:40:75:22:E0:65:53:F2:EB:05:A0:C1:60:2F:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YyzYf-q-QHUi4GVT8usFoMFgL78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/ELFSPrGJOIn41OSIKTaUx-HfV5Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/YyzYf-q-QHUi4GVT8usFoMFgL78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.251.22.0/24
212.24.120.0/24
212.52.18.0/24
Signature Algorithm: sha256WithRSAEncryption
dd:23:2a:ef:4e:cd:9f:05:98:10:61:f6:c7:71:16:6f:0d:a4:
23:13:2b:66:52:52:8a:89:ee:90:d3:52:0b:4c:07:7e:e5:16:
17:7d:12:48:c6:7a:bb:c0:21:b5:9f:79:06:b6:c2:53:da:6c:
cc:db:a0:10:a4:b5:e3:37:36:17:d0:62:84:c7:ed:97:99:1c:
51:b8:69:47:27:99:fa:df:51:ea:2e:a1:3c:06:24:25:04:8a:
7a:cb:08:d8:ce:40:87:6c:66:a9:81:2f:ad:1f:ff:7a:b8:e9:
09:7f:07:ca:88:77:29:e7:4a:6d:3d:8e:a1:07:55:a1:1b:51:
d8:ef:14:56:24:94:10:52:17:a1:01:e6:4b:bd:62:70:c2:35:
22:8b:4f:32:13:b2:1c:9b:0b:fb:06:45:47:11:6c:6b:93:5b:
35:20:d9:d6:dd:0a:db:b6:7d:0f:fd:ff:7d:31:27:42:85:a0:
16:72:15:27:df:bc:e8:62:5c:17:aa:62:36:3b:ec:eb:ec:cf:
21:33:6e:12:2c:83:46:f0:64:6d:4d:2d:5a:40:ab:c1:8a:ad:
cd:0e:10:40:dc:b1:4a:8f:02:0b:32:6c:a5:81:db:5f:8c:56:
d6:98:07:a7:c5:7c:7d:76:81:b2:d8:c6:12:67:87:74:a0:c9:
5a:e3:76:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 00:58:58 2024 by rpki-client on console-ams.rpki-client.org