Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/6afa85-367a-4efd-a311-41172b249740/1/7z5B_ELSFinIM_qNyjOfusKUKsc.roa
File: 7z5B_ELSFinIM_qNyjOfusKUKsc.roa (raw, json)
Hash identifier: LSBBtUpQObAHm/r12XT71RruCBXCyCkTAPvE8zL+7fY=
Subject key identifier: EF:3E:41:FC:42:D2:16:29:C8:33:FA:8D:CA:33:9F:BA:C2:94:2A:C7
Certificate issuer: /CN=e67bc12b3685716d8ef6567e21904194377be1e5
Certificate serial: 018CC94AE1CF41AA33BC536F3AB90B41F665
Authority key identifier: E6:7B:C1:2B:36:85:71:6D:8E:F6:56:7E:21:90:41:94:37:7B:E1:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5nvBKzaFcW2O9lZ-IZBBlDd74eU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/6afa85-367a-4efd-a311-41172b249740/1/7z5B_ELSFinIM_qNyjOfusKUKsc.roa
Signing time: Tue 02 Jan 2024 08:29:37 +0000
ROA not before: Tue 02 Jan 2024 08:29:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207074
IP address blocks: 185.166.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/6afa85-367a-4efd-a311-41172b249740/1/5nvBKzaFcW2O9lZ-IZBBlDd74eU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/6afa85-367a-4efd-a311-41172b249740/1/5nvBKzaFcW2O9lZ-IZBBlDd74eU.mft
rsync://rpki.ripe.net/repository/DEFAULT/5nvBKzaFcW2O9lZ-IZBBlDd74eU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 16:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4a:e1:cf:41:aa:33:bc:53:6f:3a:b9:0b:41:f6:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e67bc12b3685716d8ef6567e21904194377be1e5
Validity
Not Before: Jan 2 08:29:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ef3e41fc42d21629c833fa8dca339fbac2942ac7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b6:b8:ec:68:88:5a:44:7d:5e:df:50:fd:06:
f1:61:42:bf:f1:aa:c2:7c:c1:01:ce:44:e6:11:57:
e0:e4:75:c6:10:77:a9:63:a2:2a:a2:1d:7e:dc:a2:
f1:44:69:3d:6a:95:60:4d:06:eb:78:43:98:41:d7:
15:44:19:f7:1f:ae:23:6b:c4:71:32:fa:da:d4:38:
2f:51:36:64:27:e9:e8:8b:1a:8c:3a:46:79:4c:14:
f2:58:33:20:cd:91:9b:ae:3e:47:eb:3d:14:bf:6a:
d4:37:57:89:c8:04:ce:4a:67:ab:ff:2b:4d:95:9c:
8f:7e:86:0c:a7:21:dd:94:6a:1d:8c:0b:2a:67:94:
e6:0f:9f:2a:4e:4f:27:8a:80:e6:7d:8b:0e:3f:6a:
48:45:1e:14:96:77:f5:77:aa:84:68:82:ba:b7:4e:
72:94:bc:34:49:69:52:cd:af:1b:8c:25:a0:a9:66:
fe:03:15:e0:1d:8a:d2:9c:9a:5e:93:e7:67:5c:d0:
14:4b:27:9d:39:55:f4:3e:c5:e2:d6:c2:75:21:95:
00:26:a2:2e:a6:f6:26:22:56:79:4c:71:9e:02:47:
dd:d8:e6:21:97:25:62:fc:2f:91:a1:bb:2f:11:59:
f1:4b:00:b1:be:1d:a2:4f:d1:40:ba:a7:d0:14:64:
f7:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:3E:41:FC:42:D2:16:29:C8:33:FA:8D:CA:33:9F:BA:C2:94:2A:C7
X509v3 Authority Key Identifier:
keyid:E6:7B:C1:2B:36:85:71:6D:8E:F6:56:7E:21:90:41:94:37:7B:E1:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5nvBKzaFcW2O9lZ-IZBBlDd74eU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/6afa85-367a-4efd-a311-41172b249740/1/7z5B_ELSFinIM_qNyjOfusKUKsc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/6afa85-367a-4efd-a311-41172b249740/1/5nvBKzaFcW2O9lZ-IZBBlDd74eU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.166.148.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:4f:8b:2d:83:ef:56:c4:c9:98:b4:69:2b:3e:03:b1:0c:16:
5e:7c:95:ff:04:56:07:f4:7e:c4:6d:6e:fa:98:3b:cf:3b:3d:
e2:03:79:94:24:47:28:b9:ee:7c:92:7d:ff:e8:9a:dc:aa:72:
2c:ad:6c:41:a8:a2:ad:66:0b:24:e1:66:84:fd:92:ff:c3:33:
b6:39:9d:d2:a7:56:2b:5d:45:ea:c9:75:b7:ba:ce:cb:79:66:
60:d1:e1:7c:ce:a1:12:ea:71:be:cf:ee:58:17:0e:97:9b:d9:
82:2f:f5:5a:ed:27:7b:e4:7a:66:bf:6f:63:9a:3f:36:7c:a0:
b4:8a:92:94:3d:c8:d8:5a:1c:e0:e6:52:a3:b4:ca:83:d3:d8:
71:9d:d5:9d:b0:f1:45:60:1d:34:e8:4f:50:07:77:b3:7e:ff:
5d:7b:e8:01:32:a1:97:4b:eb:53:d3:1a:86:81:85:36:13:79:
6b:67:d8:60:39:d5:24:19:7c:f5:8c:7e:a1:9c:cd:83:c8:57:
1f:d8:d9:8e:aa:be:8b:d1:7b:e6:28:b0:8f:33:40:f9:02:0d:
7d:35:f6:d6:4e:47:f9:04:19:bb:e6:d8:17:ee:42:35:eb:7d:
2d:c1:ba:6e:70:72:81:e0:92:0b:3c:e9:99:ca:01:c5:be:1b:
37:9b:14:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 29 00:32:07 2024 by rpki-client on console-fra.rpki-client.org