Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/7Bmni0mpAc2dO4MJ7qDfqFxycSg.roa
File: 7Bmni0mpAc2dO4MJ7qDfqFxycSg.roa (raw, json)
Hash identifier: Cu7529rABWvyosea6hruappYxMjRhMZWZhthPyLQkVQ=
Subject key identifier: EC:19:A7:8B:49:A9:01:CD:9D:3B:83:09:EE:A0:DF:A8:5C:72:71:28
Certificate issuer: /CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Certificate serial: 018CC86F8A64CDB31A798E70E43A5874BAEE
Authority key identifier: E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/7Bmni0mpAc2dO4MJ7qDfqFxycSg.roa
Signing time: Tue 02 Jan 2024 04:30:02 +0000
ROA not before: Tue 02 Jan 2024 04:30:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12443
IP address blocks: 213.175.124.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 20:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:8a:64:cd:b3:1a:79:8e:70:e4:3a:58:74:ba:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Validity
Not Before: Jan 2 04:30:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ec19a78b49a901cd9d3b8309eea0dfa85c727128
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:89:ac:23:ba:35:77:9d:56:63:81:b6:57:89:
00:1c:ab:e6:d9:08:0f:73:43:5a:c7:20:00:bf:d7:
05:74:62:b4:9e:56:ae:30:e9:ed:0b:b9:bb:7b:ee:
f4:0c:c1:db:77:2c:c5:81:53:50:de:80:62:3e:ce:
4b:e7:c1:cd:a3:8d:1f:24:56:e4:d0:d3:1e:02:d9:
9c:04:98:9e:0a:40:66:26:ff:e3:ec:79:34:93:45:
de:db:9d:4a:13:55:39:09:9d:d7:86:84:8a:1a:84:
f5:40:bd:f7:1e:64:0f:8c:e8:61:08:93:fc:82:c3:
56:c1:10:ee:a3:91:ca:47:da:a4:c5:4f:e4:a1:2e:
37:e0:57:02:52:27:63:e0:35:70:37:24:38:06:a0:
12:2d:1f:4e:7f:f8:4e:52:6b:fa:d3:1a:50:78:04:
58:86:7d:16:22:3b:79:3c:46:b7:24:e2:d8:bd:55:
bf:d1:1a:2c:88:fc:7a:05:21:b2:da:c6:ca:ea:22:
8d:29:b5:72:83:62:52:aa:1e:a8:89:40:8a:90:f6:
83:9b:fb:76:a7:4f:da:9a:50:0f:9d:a4:16:da:e4:
8f:11:02:d7:5e:5e:10:f6:dd:ae:ee:05:e0:b0:fe:
26:aa:5a:0c:c9:b0:10:04:32:ce:09:3f:be:c8:11:
af:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:19:A7:8B:49:A9:01:CD:9D:3B:83:09:EE:A0:DF:A8:5C:72:71:28
X509v3 Authority Key Identifier:
keyid:E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/7Bmni0mpAc2dO4MJ7qDfqFxycSg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.175.124.0/22
Signature Algorithm: sha256WithRSAEncryption
58:fc:c2:75:c7:6d:33:0a:25:29:bd:54:e9:28:d9:e8:73:99:
26:61:79:1f:d3:0c:be:4f:26:be:6a:ac:e0:e7:da:2d:e3:4a:
e5:13:0f:83:b3:f0:3c:7d:83:90:52:b5:e4:9b:4d:1b:3e:26:
55:29:d1:72:b7:02:0b:d8:b2:4a:e3:95:4d:e9:23:3e:ff:05:
a9:c6:57:7b:26:be:f6:67:5f:5a:2f:2e:a2:2c:8b:19:aa:c2:
f4:c0:bd:be:bd:46:f9:a1:19:c2:b9:b0:a3:0f:cb:01:d5:b4:
16:94:ad:7b:7e:fa:75:d5:ca:78:9f:ef:e8:3f:64:dd:1a:c7:
29:1c:55:50:68:62:be:ae:20:a9:a6:48:6d:e3:5c:d2:5b:59:
0b:ed:e7:95:35:f4:2f:5f:c0:1e:e3:aa:23:87:33:56:6d:f5:
45:c2:5f:ee:2b:07:7d:49:6e:2f:3a:8e:e0:f9:72:fa:cd:46:
64:a9:b5:92:59:d1:e2:1d:14:ea:c3:fc:8a:d5:ba:89:16:d8:
a2:86:0a:5a:a5:4d:12:67:16:3b:d4:53:52:5a:46:1c:05:ff:
9e:79:4f:01:26:8c:42:5b:12:11:07:06:56:9a:4e:38:87:58:
e8:65:47:1d:9a:c7:8e:a9:c7:9f:cf:78:5a:f0:12:03:8d:71:
7c:62:08:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:38:58 2024 by rpki-client on console-fra.rpki-client.org