Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/4fd95a-5157-4a1b-b868-138995c99b97/1/ePRHgcRts2kLWhc9jJnowDOe2Rw.roa
File: ePRHgcRts2kLWhc9jJnowDOe2Rw.roa (raw, json)
Hash identifier: 57AeA9tDBXLpDPHA2vfFanfdsbOeMA3fYU2XrhbNWPw=
Subject key identifier: 78:F4:47:81:C4:6D:B3:69:0B:5A:17:3D:8C:99:E8:C0:33:9E:D9:1C
Certificate issuer: /CN=11eecd71c193e4ac30ed03d0b9f05da101c603d2
Certificate serial: 018CC94E503C7649DBB2DF957A2A53D72443
Authority key identifier: 11:EE:CD:71:C1:93:E4:AC:30:ED:03:D0:B9:F0:5D:A1:01:C6:03:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ee7NccGT5Kww7QPQufBdoQHGA9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/4fd95a-5157-4a1b-b868-138995c99b97/1/ePRHgcRts2kLWhc9jJnowDOe2Rw.roa
Signing time: Tue 02 Jan 2024 08:33:21 +0000
ROA not before: Tue 02 Jan 2024 08:33:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212384
IP address blocks: 185.232.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/4fd95a-5157-4a1b-b868-138995c99b97/1/Ee7NccGT5Kww7QPQufBdoQHGA9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/4fd95a-5157-4a1b-b868-138995c99b97/1/Ee7NccGT5Kww7QPQufBdoQHGA9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ee7NccGT5Kww7QPQufBdoQHGA9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 May 2024 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:50:3c:76:49:db:b2:df:95:7a:2a:53:d7:24:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11eecd71c193e4ac30ed03d0b9f05da101c603d2
Validity
Not Before: Jan 2 08:33:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=78f44781c46db3690b5a173d8c99e8c0339ed91c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:4a:40:2f:19:52:64:bc:d2:62:9a:92:a8:1f:
ee:dc:1f:69:83:aa:de:31:24:42:7e:df:d2:92:a4:
83:e7:de:ed:8e:50:c4:e5:fb:26:02:3a:45:8b:8d:
cb:4d:d8:7f:d5:6f:08:cf:b0:5c:74:c7:64:f1:f4:
26:54:af:c3:ab:a0:07:f5:ab:5c:ae:be:9a:52:1c:
b3:90:76:02:cc:9f:7e:2d:03:3a:49:76:39:11:10:
11:e7:73:47:84:3c:41:d9:cf:9e:e1:0f:6a:84:03:
dc:61:e2:12:1d:05:3e:47:9c:87:29:39:c2:4d:60:
70:31:6a:9c:39:04:28:c6:79:b8:c5:b2:58:b9:e9:
1a:84:c6:9f:96:b3:2d:6f:a6:6e:72:30:de:82:99:
33:e4:f4:d3:57:c5:dd:cb:59:64:f6:1d:76:15:24:
bd:3f:32:8b:1e:8b:85:d4:78:6e:7e:53:e8:18:73:
4e:d7:76:a7:05:12:e8:38:5a:e1:94:4a:92:97:6c:
16:f1:b7:b5:b4:c3:e6:c9:8a:1d:34:ce:5e:fa:01:
71:ac:27:a1:6d:78:87:93:25:ca:85:41:25:5f:6a:
72:db:fd:73:7f:b8:d3:c8:c2:ca:0d:3f:17:ca:45:
82:1c:28:df:0d:68:a3:8a:ad:c5:e2:15:ea:d0:09:
af:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:F4:47:81:C4:6D:B3:69:0B:5A:17:3D:8C:99:E8:C0:33:9E:D9:1C
X509v3 Authority Key Identifier:
keyid:11:EE:CD:71:C1:93:E4:AC:30:ED:03:D0:B9:F0:5D:A1:01:C6:03:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ee7NccGT5Kww7QPQufBdoQHGA9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4fd95a-5157-4a1b-b868-138995c99b97/1/ePRHgcRts2kLWhc9jJnowDOe2Rw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4fd95a-5157-4a1b-b868-138995c99b97/1/Ee7NccGT5Kww7QPQufBdoQHGA9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.232.207.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:a2:9d:42:21:92:5e:84:54:d9:08:96:15:c8:63:06:81:9a:
44:fe:ab:b1:a0:a5:7b:3b:62:5f:6d:80:90:17:49:93:1c:3c:
86:8a:ad:2e:99:38:f3:a2:6e:03:e9:f7:62:be:50:fe:14:3e:
03:e1:84:6c:40:67:da:be:1b:42:f2:aa:6c:f2:02:06:e8:53:
13:c0:00:ce:c6:25:65:e2:a7:18:0c:52:31:93:83:6d:73:24:
d3:6f:fa:eb:9b:ab:9b:37:c9:2e:cf:fd:34:5a:6d:44:43:3e:
f9:e9:d6:20:4b:00:be:5a:22:f4:ec:ea:e2:3c:00:1e:2f:a9:
d7:3f:7c:3d:34:61:44:fc:d0:22:a4:fa:ef:43:51:7b:61:14:
f7:16:09:f6:35:12:9b:f5:8a:89:d2:72:12:68:0c:d8:ff:f9:
a2:bc:b7:a8:11:dc:e0:60:6f:34:95:3c:b5:dd:4d:8e:b6:f8:
44:d0:1b:15:df:68:cc:c9:9e:ff:6d:02:69:6f:1b:a0:28:3e:
37:b2:78:4c:bb:e3:49:56:df:48:60:93:30:d2:e7:f4:c3:ed:
65:b9:0a:16:da:a2:a4:e5:4a:c3:a0:7a:eb:89:af:71:bd:21:
84:49:d0:9a:bd:e8:ac:12:83:f8:13:95:79:59:2a:39:8f:8b:
47:f2:f0:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 19:27:11 2024 by rpki-client on console-fra.rpki-client.org