Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/0EA9_cLxlsu6S1x8XuL50gICec0.roa
File: 0EA9_cLxlsu6S1x8XuL50gICec0.roa (raw, json)
Hash identifier: FKjsI7s++P60eLiuovKWUyjwaGmG14nD5vO9pt8uCn8=
Subject key identifier: D0:40:3D:FD:C2:F1:96:CB:BA:4B:5C:7C:5E:E2:F9:D2:02:02:79:CD
Certificate issuer: /CN=a5c6373eab19cf43dd2f43111398383ee2bad030
Certificate serial: 018CC3489A5C393F43538E7EEBDB9F049971
Authority key identifier: A5:C6:37:3E:AB:19:CF:43:DD:2F:43:11:13:98:38:3E:E2:BA:D0:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pcY3PqsZz0PdL0MRE5g4PuK60DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/0EA9_cLxlsu6S1x8XuL50gICec0.roa
Signing time: Mon 01 Jan 2024 04:29:24 +0000
ROA not before: Mon 01 Jan 2024 04:29:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202636
IP address blocks: 185.142.200.0/24 maxlen: 24
185.142.203.0/24 maxlen: 24
185.142.201.0/24 maxlen: 24
185.142.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pcY3PqsZz0PdL0MRE5g4PuK60DA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:9a:5c:39:3f:43:53:8e:7e:eb:db:9f:04:99:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5c6373eab19cf43dd2f43111398383ee2bad030
Validity
Not Before: Jan 1 04:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d0403dfdc2f196cbba4b5c7c5ee2f9d2020279cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a6:f9:25:35:bc:cb:af:1f:1d:ab:c3:a1:4d:
00:52:f1:cc:e7:2c:ff:20:5f:f7:b0:b6:2a:83:e3:
87:b4:02:06:0e:89:63:d3:bd:1b:2a:9c:30:4f:44:
83:c1:19:db:d3:4b:35:5e:2a:77:a9:f6:9f:29:2a:
e8:7e:0b:be:d1:0b:f8:ff:be:ff:1f:c8:df:14:6a:
89:93:a3:1e:50:38:d7:88:28:26:aa:13:37:9f:d7:
68:c5:be:75:82:08:cb:93:81:ff:49:b8:a6:d1:86:
db:f8:11:ab:3d:71:7b:b0:1c:01:d8:80:98:85:2f:
ed:92:31:45:49:ee:d4:91:1d:4d:4d:d8:71:37:aa:
26:96:3c:10:77:65:7e:b1:14:f1:77:98:7a:8d:7d:
e9:ab:a0:52:27:7e:f9:c4:70:28:24:0a:cb:6e:8c:
08:18:5a:1f:61:04:b3:72:63:da:fc:70:6c:77:33:
38:9c:f3:07:50:c0:28:df:a7:6e:e9:5f:0e:0a:e3:
8b:93:1f:60:2f:9a:e5:f2:2d:88:76:37:c8:a6:ea:
d4:0d:f6:87:48:51:16:a3:35:93:b4:e4:03:49:62:
6d:6a:0b:b1:fd:fb:f8:f9:13:37:85:fd:94:0f:5f:
ba:78:b6:c6:39:1b:5b:83:a6:d0:f7:d0:b2:81:18:
8e:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:40:3D:FD:C2:F1:96:CB:BA:4B:5C:7C:5E:E2:F9:D2:02:02:79:CD
X509v3 Authority Key Identifier:
keyid:A5:C6:37:3E:AB:19:CF:43:DD:2F:43:11:13:98:38:3E:E2:BA:D0:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcY3PqsZz0PdL0MRE5g4PuK60DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/0EA9_cLxlsu6S1x8XuL50gICec0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.142.200.0/22
Signature Algorithm: sha256WithRSAEncryption
37:17:2f:5a:ad:82:a9:c7:11:84:dc:c9:36:ff:e8:1c:1d:4f:
21:65:4f:50:2c:7d:dc:78:91:74:20:49:76:b2:0c:57:95:d2:
50:91:29:86:aa:4e:1d:ed:12:f2:a1:f1:d5:eb:e0:70:9f:92:
27:71:20:e8:a4:b3:0a:12:4c:5b:7d:be:38:17:0e:3b:33:85:
96:2e:c1:6f:60:8b:82:6a:0b:33:ab:9c:ad:d6:3a:87:e9:5b:
ba:e0:1d:54:9a:bd:c7:28:33:0a:a8:89:9c:46:3c:ef:a3:e3:
f7:9f:1c:a7:52:9e:2d:0b:7a:47:26:4e:c2:dd:86:a6:01:4d:
6e:df:71:98:53:d3:14:58:70:70:6c:03:89:4a:43:4e:83:bf:
a6:2f:3c:e1:f2:b7:e1:cd:14:e8:8c:78:99:ef:df:5b:e9:88:
50:f0:88:9b:e5:87:4e:9d:8a:05:c0:1f:63:e5:70:37:43:f7:
c3:d8:9d:10:0b:86:3f:a9:29:ad:6d:81:28:d7:bb:9c:59:2d:
b0:e5:ff:ef:4a:3f:98:60:6e:53:6c:e4:5b:fd:e3:c6:fa:38:
53:db:b7:6f:a3:64:83:3b:c8:d8:db:5f:f6:7a:a1:ea:53:dc:
12:ff:bd:f5:fe:1f:f3:d7:6d:57:44:fc:80:a4:98:fb:25:db:
36:25:89:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:51:24 2024 by rpki-client on console-ams.rpki-client.org