Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/d52eac-c7e2-4881-88e3-471d42c2d806/1/edgGblueYm4F1mdOSZHncHOC85s.roa
File: edgGblueYm4F1mdOSZHncHOC85s.roa (raw, json)
Hash identifier: xcqTHVylBrVemQEkfrpvbmzp8ddpM981eKtAJiicR+s=
Subject key identifier: 79:D8:06:6E:5B:9E:62:6E:05:D6:67:4E:49:91:E7:70:73:82:F3:9B
Certificate issuer: /CN=49179e7cf60488c3ef5b770d21aeb147da4c7cee
Certificate serial: 018E4BB79246AFF52C9A20798A1BAFECB17B
Authority key identifier: 49:17:9E:7C:F6:04:88:C3:EF:5B:77:0D:21:AE:B1:47:DA:4C:7C:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SReefPYEiMPvW3cNIa6xR9pMfO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/d52eac-c7e2-4881-88e3-471d42c2d806/1/edgGblueYm4F1mdOSZHncHOC85s.roa
Signing time: Sun 17 Mar 2024 09:21:45 +0000
ROA not before: Sun 17 Mar 2024 09:21:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44400
IP address blocks: 185.204.180.0/22 maxlen: 22
185.204.180.0/24 maxlen: 24
185.204.181.0/24 maxlen: 24
185.204.182.0/24 maxlen: 24
185.204.183.0/24 maxlen: 24
2a0a:fbc0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/d52eac-c7e2-4881-88e3-471d42c2d806/1/SReefPYEiMPvW3cNIa6xR9pMfO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/d52eac-c7e2-4881-88e3-471d42c2d806/1/SReefPYEiMPvW3cNIa6xR9pMfO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/SReefPYEiMPvW3cNIa6xR9pMfO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Jun 2024 14:36:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:4b:b7:92:46:af:f5:2c:9a:20:79:8a:1b:af:ec:b1:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49179e7cf60488c3ef5b770d21aeb147da4c7cee
Validity
Not Before: Mar 17 09:21:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=79d8066e5b9e626e05d6674e4991e7707382f39b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:0e:56:ec:4f:3a:54:b6:4b:46:24:59:ff:f8:
e0:b4:b8:e4:a5:13:0b:c4:c2:c0:b9:d9:04:40:dd:
f3:5e:ae:1b:75:62:a7:83:36:c3:2d:2e:80:4b:24:
d8:0d:6d:5a:21:4d:8f:8d:0d:28:7c:98:c2:53:af:
c8:8e:6f:7f:e5:ee:0e:7e:0e:31:5d:d4:d4:e3:72:
32:08:33:50:85:ad:22:36:52:14:69:71:7b:f6:5e:
a8:38:8e:d4:8c:7d:eb:aa:ae:58:1b:7a:e3:56:8e:
3e:e3:4e:a2:4f:c5:4e:3e:2d:58:6b:ac:26:a0:76:
91:68:9a:38:d5:c0:b0:4f:c6:8b:e6:74:31:72:96:
61:c8:b1:d3:10:d2:a9:ab:4b:ba:cf:db:b2:12:f9:
42:e7:59:90:33:07:ce:56:cc:ed:f9:9b:3e:35:aa:
36:ee:71:aa:ca:0e:75:d2:9f:c0:fe:38:e5:15:8f:
a7:54:fa:f7:d5:7b:f4:26:a1:f7:27:e0:4b:69:10:
95:55:39:2b:a5:9f:f2:79:05:36:67:29:97:5b:60:
c7:6f:20:9e:54:5d:87:16:c8:10:3b:ff:d4:98:49:
24:af:51:38:ac:26:85:d9:d7:74:7a:20:c1:81:28:
ed:d7:9d:23:d9:f2:40:4c:ce:f2:b1:a4:49:52:a4:
62:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:D8:06:6E:5B:9E:62:6E:05:D6:67:4E:49:91:E7:70:73:82:F3:9B
X509v3 Authority Key Identifier:
keyid:49:17:9E:7C:F6:04:88:C3:EF:5B:77:0D:21:AE:B1:47:DA:4C:7C:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SReefPYEiMPvW3cNIa6xR9pMfO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d52eac-c7e2-4881-88e3-471d42c2d806/1/edgGblueYm4F1mdOSZHncHOC85s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d52eac-c7e2-4881-88e3-471d42c2d806/1/SReefPYEiMPvW3cNIa6xR9pMfO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.204.180.0/22
IPv6:
2a0a:fbc0::/29
Signature Algorithm: sha256WithRSAEncryption
67:55:59:ff:95:09:a6:78:d2:6e:5d:dd:9a:c1:f3:cf:5d:d4:
67:c5:eb:55:7c:3c:23:0a:98:95:27:33:40:ba:d2:c3:8e:96:
d7:8a:69:35:0a:b9:33:78:9d:c8:49:23:25:46:b0:d7:dd:5b:
05:84:6a:0a:8c:26:c7:18:d4:93:c5:6a:cf:7e:59:08:49:64:
de:f6:b2:19:b7:87:c2:a8:a6:4a:c2:70:c5:80:d6:05:35:47:
7f:be:ef:f9:07:69:64:51:99:18:78:7e:04:a5:4b:f8:db:6f:
93:2d:16:ae:50:87:d3:5a:6c:0d:6f:d3:94:d2:78:87:8e:a8:
6b:64:b7:b4:56:3d:7d:c5:94:00:7c:5a:02:f4:bb:e1:1e:cc:
92:59:08:bc:96:8c:2e:93:c1:b0:5c:c6:f4:cc:9c:58:0a:66:
0e:5e:a4:4c:3c:98:15:0d:be:b9:67:05:bc:0c:7a:c3:02:6e:
3a:6e:7d:9b:be:1e:64:13:d6:99:90:f9:8f:d1:a6:db:d4:ac:
f0:32:3e:34:0e:30:1b:b2:a5:46:90:ee:fd:fc:2f:e3:90:4b:
ce:30:97:46:ef:04:9e:4f:5e:95:ab:0a:4f:da:b7:ee:1f:2e:
1a:45:46:45:73:43:70:7f:17:5a:f7:d4:cc:f8:88:78:cf:93:
35:04:4b:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 22:47:54 2024 by rpki-client on console-ams.rpki-client.org