Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/793e00-0c53-49c4-a51b-eda316a2afb8/1/ESDvjqPqoqrR9OTsed-1z_PLfZA.roa
File: ESDvjqPqoqrR9OTsed-1z_PLfZA.roa (raw, json)
Hash identifier: 8y9pgql6xPiAVL9qxpBjAmd7iwa3BJAkcjXrj7H4p68=
Subject key identifier: 11:20:EF:8E:A3:EA:A2:AA:D1:F4:E4:EC:79:DF:B5:CF:F3:CB:7D:90
Certificate issuer: /CN=af2b68f0c83add9a3a3b86ab24fb910a960262c6
Certificate serial: 018CC2DAE0A59A74FF680EB38E795892E08E
Authority key identifier: AF:2B:68:F0:C8:3A:DD:9A:3A:3B:86:AB:24:FB:91:0A:96:02:62:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ryto8Mg63Zo6O4arJPuRCpYCYsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/793e00-0c53-49c4-a51b-eda316a2afb8/1/ESDvjqPqoqrR9OTsed-1z_PLfZA.roa
Signing time: Mon 01 Jan 2024 02:29:33 +0000
ROA not before: Mon 01 Jan 2024 02:29:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14297
IP address blocks: 185.147.172.0/23 maxlen: 23
185.147.174.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/793e00-0c53-49c4-a51b-eda316a2afb8/1/ryto8Mg63Zo6O4arJPuRCpYCYsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/793e00-0c53-49c4-a51b-eda316a2afb8/1/ryto8Mg63Zo6O4arJPuRCpYCYsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ryto8Mg63Zo6O4arJPuRCpYCYsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:e0:a5:9a:74:ff:68:0e:b3:8e:79:58:92:e0:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af2b68f0c83add9a3a3b86ab24fb910a960262c6
Validity
Not Before: Jan 1 02:29:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1120ef8ea3eaa2aad1f4e4ec79dfb5cff3cb7d90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:96:2a:c0:34:46:5d:28:c5:94:4c:1e:f0:f8:
92:5f:5b:8a:e5:c9:13:84:b5:45:bd:c3:26:ea:52:
df:cf:46:44:ef:fd:96:cb:e4:85:3a:55:3f:45:d9:
b5:6b:64:be:14:d0:38:6e:cb:e9:63:59:e8:69:5e:
44:ed:97:6f:53:e6:6c:bf:49:56:75:2e:c4:50:1e:
9c:2c:b9:20:14:d8:54:71:f4:c6:e0:3b:03:51:2a:
9b:49:4d:94:2d:95:5a:46:d0:9a:76:02:3e:8f:d0:
4e:68:a4:72:32:db:8d:65:f0:68:94:de:02:93:59:
ac:10:69:e0:bf:36:23:1d:7e:9d:f0:26:ea:6b:a9:
3a:6b:2d:83:0e:c6:9c:c3:35:a0:19:68:74:a2:f9:
77:a2:cf:87:0a:04:d3:5d:93:18:e2:54:43:df:2b:
b8:c0:37:e0:7b:44:f9:08:82:ba:ac:c4:98:76:d9:
ef:57:e3:ad:6f:aa:8c:38:d5:e6:a6:4e:ae:98:3f:
45:32:73:9e:c5:6a:e1:20:f1:aa:cf:7b:83:88:fb:
48:15:14:33:27:48:31:d1:3a:a8:e7:5a:51:db:28:
51:24:19:50:31:0a:e6:75:72:91:5f:40:94:7e:3a:
44:5f:db:05:7a:9d:3d:38:12:82:74:80:67:a8:01:
97:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:20:EF:8E:A3:EA:A2:AA:D1:F4:E4:EC:79:DF:B5:CF:F3:CB:7D:90
X509v3 Authority Key Identifier:
keyid:AF:2B:68:F0:C8:3A:DD:9A:3A:3B:86:AB:24:FB:91:0A:96:02:62:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ryto8Mg63Zo6O4arJPuRCpYCYsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/793e00-0c53-49c4-a51b-eda316a2afb8/1/ESDvjqPqoqrR9OTsed-1z_PLfZA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/793e00-0c53-49c4-a51b-eda316a2afb8/1/ryto8Mg63Zo6O4arJPuRCpYCYsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.147.172.0/22
Signature Algorithm: sha256WithRSAEncryption
b4:56:97:f7:be:9f:3c:78:f6:4d:d3:b6:e1:75:4f:39:6e:b8:
7d:cc:09:1d:51:9c:f4:b1:0c:c9:0e:d7:8a:84:49:68:a8:cc:
87:5a:0f:c0:57:1a:6c:4c:51:d1:79:82:94:d7:c3:bc:d2:4f:
a3:72:2d:d9:56:b7:97:4c:be:09:6a:cb:cc:4e:d8:e1:af:03:
39:f3:3a:af:86:78:20:d0:ad:15:23:f9:e3:c5:61:4c:51:28:
52:28:84:c6:15:7b:c4:a4:89:05:d0:4e:75:2e:89:e3:4a:28:
9a:32:e3:c2:e0:33:9a:3d:b8:24:d0:e9:21:26:38:18:cf:1c:
56:0c:26:8d:f3:71:c7:77:67:d3:c7:54:f3:fc:75:66:98:ca:
81:be:67:73:3d:e7:a8:61:f5:15:1e:bf:0f:5d:f8:f2:15:26:
c0:5f:03:3b:b0:71:7f:9d:33:25:ff:18:8c:e5:3f:ea:5c:33:
e1:78:1a:27:29:bc:3d:5a:72:02:c6:bd:9f:95:51:7d:c8:e3:
20:0c:da:66:eb:4b:e9:fa:08:9e:5f:5b:a8:b2:9f:b5:06:c8:
24:d1:3f:b7:83:24:b9:7b:f3:32:3e:04:c7:22:a9:2b:dc:23:
75:77:15:a9:47:60:ed:73:7e:03:fb:88:c5:44:d2:9e:cb:2c:
50:f4:48:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 23:52:33 2024 by rpki-client on console-ams.rpki-client.org