Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/d718e4-8abc-4b23-ac10-c102ee96858e/1/neH0umyH-IptiGBmGWK9Luftc2o.roa
File: neH0umyH-IptiGBmGWK9Luftc2o.roa (raw, json)
Hash identifier: dZMwpo2iL4UMGoHAKfRKAyccZ+4Ksg+fQLSZgtZu1pE=
Subject key identifier: 9D:E1:F4:BA:6C:87:F8:8A:6D:88:60:66:19:62:BD:2E:E7:ED:73:6A
Certificate issuer: /CN=e726926b6e8970cf84d6b4756fa9c56211200537
Certificate serial: 018CC649F238AA243B9928BE79004F7DB016
Authority key identifier: E7:26:92:6B:6E:89:70:CF:84:D6:B4:75:6F:A9:C5:62:11:20:05:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5yaSa26JcM-E1rR1b6nFYhEgBTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/d718e4-8abc-4b23-ac10-c102ee96858e/1/neH0umyH-IptiGBmGWK9Luftc2o.roa
Signing time: Mon 01 Jan 2024 18:29:43 +0000
ROA not before: Mon 01 Jan 2024 18:29:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47701
IP address blocks: 185.144.41.0/24 maxlen: 24
185.144.43.0/24 maxlen: 24
185.144.40.0/24 maxlen: 24
185.144.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/d718e4-8abc-4b23-ac10-c102ee96858e/1/5yaSa26JcM-E1rR1b6nFYhEgBTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/d718e4-8abc-4b23-ac10-c102ee96858e/1/5yaSa26JcM-E1rR1b6nFYhEgBTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/5yaSa26JcM-E1rR1b6nFYhEgBTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 May 2024 01:03:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:49:f2:38:aa:24:3b:99:28:be:79:00:4f:7d:b0:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e726926b6e8970cf84d6b4756fa9c56211200537
Validity
Not Before: Jan 1 18:29:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9de1f4ba6c87f88a6d8860661962bd2ee7ed736a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:09:ba:5d:30:b3:54:6b:26:20:f6:7d:7b:02:
f6:0d:72:78:ea:94:a3:11:bb:cd:d8:4f:ef:43:70:
16:50:32:59:c7:76:46:06:b5:07:34:e9:99:95:3e:
ea:8f:bf:2d:48:06:89:96:bb:59:21:cb:5c:08:49:
1f:0e:dd:78:f9:5a:c9:21:aa:d5:8d:50:b8:5a:1e:
8f:b6:e1:a1:2c:11:f2:56:ec:eb:89:f3:d7:55:8c:
06:6a:4d:d0:82:9e:f0:74:02:e5:1d:26:d7:71:0f:
b5:56:d8:cd:2d:61:d7:57:78:80:2c:9f:8e:87:e6:
fa:a9:c4:91:0f:2d:4f:59:1c:3f:b3:4c:4a:15:80:
fb:eb:65:9b:84:4e:98:8e:cc:00:e3:cc:a8:e4:df:
93:27:bf:a4:30:ea:2a:b6:99:3a:8b:e9:a0:15:dd:
d1:45:4b:e1:a8:7f:de:e6:23:bf:02:a4:ce:ab:49:
f4:92:8d:d9:45:18:d2:1c:81:0c:b6:76:2c:ef:2e:
69:6e:be:6d:30:cb:6d:a2:ee:92:c7:dc:48:63:09:
c2:48:7a:ae:51:66:78:2e:44:d3:3a:dd:76:43:41:
09:3a:f1:e2:05:76:ca:6b:88:eb:61:e4:ab:f3:62:
27:c5:37:dc:b8:30:e0:f7:de:24:50:59:1b:b7:bf:
c0:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:E1:F4:BA:6C:87:F8:8A:6D:88:60:66:19:62:BD:2E:E7:ED:73:6A
X509v3 Authority Key Identifier:
keyid:E7:26:92:6B:6E:89:70:CF:84:D6:B4:75:6F:A9:C5:62:11:20:05:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5yaSa26JcM-E1rR1b6nFYhEgBTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d718e4-8abc-4b23-ac10-c102ee96858e/1/neH0umyH-IptiGBmGWK9Luftc2o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d718e4-8abc-4b23-ac10-c102ee96858e/1/5yaSa26JcM-E1rR1b6nFYhEgBTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.144.40.0/22
Signature Algorithm: sha256WithRSAEncryption
83:b6:e0:66:a5:c2:cb:7b:e9:4f:b9:33:f2:9a:67:fa:56:45:
9b:60:12:43:f2:f7:18:13:52:6a:83:0a:cd:bc:71:e0:4b:dc:
c2:21:02:8b:55:32:be:ba:96:cf:0c:18:98:41:eb:d4:9f:a3:
5b:12:af:09:cb:9e:0c:75:7a:3b:17:a1:ae:12:9d:4f:3f:17:
2c:53:ba:ac:0d:b8:4f:11:05:5f:93:46:85:ea:b9:e4:a7:d4:
0a:79:48:dd:6b:b8:5a:8b:b8:61:93:ab:7e:20:53:fe:e5:47:
81:dd:ae:fb:3c:a1:4a:81:6d:fb:62:35:f0:68:e9:5c:e7:ba:
e4:97:67:b5:5c:63:18:a4:db:b8:53:bf:80:05:4f:9f:02:6a:
94:a2:8b:aa:30:22:00:9d:65:f3:72:05:6a:d6:6d:68:8b:9b:
8f:d9:76:11:e7:9f:49:8b:c6:a0:7c:0e:16:83:e6:4d:b8:7f:
94:eb:8b:ad:a4:23:92:97:e6:6d:a7:23:0e:ad:ec:a4:f2:a1:
36:c7:59:ee:fb:36:ff:a7:ff:25:0c:f7:2f:af:95:00:d6:ed:
74:52:44:f9:58:df:da:56:30:d7:9d:df:2d:88:73:40:ab:2e:
0d:2a:93:27:29:83:6d:79:6c:6f:1a:6e:e7:da:b9:d1:94:67:
8b:89:99:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 04:54:55 2024 by rpki-client on console-fra.rpki-client.org