Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/50f08f-f907-44de-be94-05764c7edaa7/1/EgbJlEuwDewS8yuD3ytBP3XJBKA.roa
File: EgbJlEuwDewS8yuD3ytBP3XJBKA.roa (raw, json)
Hash identifier: SFtJlbIEJSOVsRnZOMjV3yv9b83dFRmVHNG+05M7Z3w=
Subject key identifier: 12:06:C9:94:4B:B0:0D:EC:12:F3:2B:83:DF:2B:41:3F:75:C9:04:A0
Certificate issuer: /CN=4ab6d7c468d092c921314d66473cfa53851cd686
Certificate serial: 018CC50115D54012A34D9E47B3AF3CC1CC92
Authority key identifier: 4A:B6:D7:C4:68:D0:92:C9:21:31:4D:66:47:3C:FA:53:85:1C:D6:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SrbXxGjQkskhMU1mRzz6U4Uc1oY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/50f08f-f907-44de-be94-05764c7edaa7/1/EgbJlEuwDewS8yuD3ytBP3XJBKA.roa
Signing time: Mon 01 Jan 2024 12:30:31 +0000
ROA not before: Mon 01 Jan 2024 12:30:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21183
IP address blocks: 80.91.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/50f08f-f907-44de-be94-05764c7edaa7/1/SrbXxGjQkskhMU1mRzz6U4Uc1oY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/50f08f-f907-44de-be94-05764c7edaa7/1/SrbXxGjQkskhMU1mRzz6U4Uc1oY.mft
rsync://rpki.ripe.net/repository/DEFAULT/SrbXxGjQkskhMU1mRzz6U4Uc1oY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 18:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:15:d5:40:12:a3:4d:9e:47:b3:af:3c:c1:cc:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ab6d7c468d092c921314d66473cfa53851cd686
Validity
Not Before: Jan 1 12:30:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1206c9944bb00dec12f32b83df2b413f75c904a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:30:9d:4d:b1:c9:08:59:31:58:39:b5:27:0d:
b4:f3:6b:91:8d:76:d7:e2:68:be:49:b4:23:ec:b9:
22:8d:8f:85:c5:3a:c3:f3:3d:09:d8:a3:db:c4:5f:
7e:8c:47:8b:f3:a0:e8:74:88:cf:e9:a9:bf:0b:e3:
c0:8b:75:ae:5f:95:ec:80:af:d6:b4:6c:63:f8:c9:
27:7f:69:c9:6a:1d:9d:cc:6e:48:31:86:a8:fe:8b:
0b:a2:5b:f6:8b:0d:e6:24:e9:aa:71:1b:10:14:0a:
40:e6:78:fc:cf:82:a2:43:76:c7:7e:2b:f1:78:87:
f0:1a:96:10:b3:99:eb:58:8f:f6:7b:bf:1a:c8:94:
1a:c7:d4:81:b0:c6:26:07:a3:15:ec:be:8e:3e:3e:
b8:8d:7b:03:5c:7a:8f:4d:53:20:36:37:89:d9:8d:
68:65:57:25:10:3b:6d:de:92:f6:1b:b3:d0:8a:73:
20:18:d5:bb:6e:60:09:6a:93:bc:96:d9:34:fb:d2:
3b:18:7f:b2:88:58:70:64:4d:13:0d:06:da:6c:06:
f8:80:b0:f2:5f:00:16:46:b0:ce:df:c1:dc:a8:11:
c4:4a:93:74:06:cd:71:ba:b5:23:fd:d4:29:60:19:
9c:e5:ca:68:c4:3c:37:54:29:44:ae:9d:50:31:80:
f9:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:06:C9:94:4B:B0:0D:EC:12:F3:2B:83:DF:2B:41:3F:75:C9:04:A0
X509v3 Authority Key Identifier:
keyid:4A:B6:D7:C4:68:D0:92:C9:21:31:4D:66:47:3C:FA:53:85:1C:D6:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SrbXxGjQkskhMU1mRzz6U4Uc1oY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/50f08f-f907-44de-be94-05764c7edaa7/1/EgbJlEuwDewS8yuD3ytBP3XJBKA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/50f08f-f907-44de-be94-05764c7edaa7/1/SrbXxGjQkskhMU1mRzz6U4Uc1oY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.91.124.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:28:61:3c:62:80:e7:ab:55:1c:e0:6a:cd:4b:b2:d5:5b:5b:
f8:30:27:0c:98:d1:fd:49:d4:77:3a:5c:d2:f9:79:00:3d:b6:
f5:96:b1:29:64:e2:e7:0f:56:47:d7:c7:16:63:51:13:73:b3:
5a:b2:8c:d1:bc:b5:2f:1d:e0:66:9d:a8:de:86:68:57:10:ef:
8e:5f:ca:8b:ce:75:92:3d:e4:0c:81:1f:42:e7:69:73:f2:6e:
43:00:40:57:f1:db:9e:6e:78:ae:85:25:ca:62:7b:56:08:0a:
16:03:53:ec:7c:91:b5:b0:2d:54:e6:6d:89:bf:da:c9:5d:45:
d9:e0:fb:23:ee:01:82:d6:8a:81:68:1e:76:a2:9a:2f:8a:56:
1c:aa:b9:cb:ba:c7:08:fa:a9:6f:7e:8b:b5:40:0e:a7:dd:41:
da:06:3d:43:7b:4f:94:72:8f:f3:b8:81:bb:35:45:18:99:fd:
9d:8c:cd:e7:58:b0:27:86:dd:d1:fa:f6:e8:62:1b:d4:e9:98:
c0:4c:40:88:85:1b:17:0a:a4:82:b5:a8:78:c4:cc:0e:0e:24:
e3:d5:26:b6:67:b4:9f:80:77:2a:89:eb:ca:ac:98:2d:2c:e0:
1a:4f:3f:d5:91:35:8e:31:ed:39:97:9c:71:d5:d0:a6:a4:b1:
a1:db:4e:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 02:35:49 2024 by rpki-client on console-ams.rpki-client.org