Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/IRCXWp6gjdwkYnBlXTdZAz6k-8c.roa
File: IRCXWp6gjdwkYnBlXTdZAz6k-8c.roa (raw, json)
Hash identifier: H+IEt78mKjn7zZFNpbA/dRAwUuhASpaVC3dQdoz8Ykk=
Subject key identifier: 21:10:97:5A:9E:A0:8D:DC:24:62:70:65:5D:37:59:03:3E:A4:FB:C7
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 018EE2C247FD5A267C8C8044AD9BAE537A4D
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/IRCXWp6gjdwkYnBlXTdZAz6k-8c.roa
Signing time: Mon 15 Apr 2024 17:16:06 +0000
ROA not before: Mon 15 Apr 2024 17:16:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212238
IP address blocks: 14.102.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 May 2024 23:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:e2:c2:47:fd:5a:26:7c:8c:80:44:ad:9b:ae:53:7a:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Apr 15 17:16:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2110975a9ea08ddc246270655d3759033ea4fbc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:c0:bb:7d:a8:9c:24:93:36:ce:62:cb:b0:df:
f2:a4:37:c3:b9:2b:29:ca:ce:ad:a5:b3:17:ed:3e:
b7:da:c5:2d:76:cc:ad:74:bf:8d:6e:45:6b:d0:80:
db:8a:99:02:8b:a9:fb:69:e1:20:68:27:5b:39:48:
70:24:1f:ea:35:16:42:a7:a0:75:4c:48:18:a4:27:
8d:41:e7:2a:5f:39:fd:46:8a:92:97:af:1d:f1:2d:
00:8e:0b:92:b3:e9:fe:e9:2c:ff:22:df:e5:8d:cc:
4c:07:c1:1c:e5:28:2c:af:97:d1:2c:02:af:e8:37:
a6:60:25:c7:16:38:cf:24:25:63:60:9f:99:91:9f:
fc:82:29:a7:5a:de:51:c7:7f:88:fb:53:d3:20:27:
f8:02:4f:95:9c:ad:e1:fa:2f:ab:aa:82:ee:b4:fa:
7e:27:87:fe:f3:7b:dc:12:82:b2:10:0d:66:c6:14:
df:f7:71:9e:c3:e3:2e:c8:a4:a6:c5:63:c8:ca:8f:
e1:36:c3:be:7d:a7:8a:a5:a8:2c:32:a5:59:87:85:
2c:95:7a:fd:e0:2e:d3:7b:7e:bb:9a:6e:a5:d1:6a:
1d:2c:a1:eb:06:32:62:63:6c:a2:89:be:aa:db:42:
86:6c:ef:91:36:af:e5:91:93:f3:fa:83:10:41:23:
d2:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:10:97:5A:9E:A0:8D:DC:24:62:70:65:5D:37:59:03:3E:A4:FB:C7
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/IRCXWp6gjdwkYnBlXTdZAz6k-8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.234.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:3e:e6:9a:2b:6f:d3:42:4b:a4:82:82:00:01:1d:6e:65:0b:
d0:5d:65:0a:4a:59:d8:e3:02:39:6a:f9:63:36:7e:8a:ad:c8:
21:fe:86:65:69:fe:75:2f:e5:21:d6:0a:e6:b1:af:eb:02:3d:
07:58:0f:2a:63:16:db:4f:e4:57:3d:10:e8:cd:28:33:18:73:
3c:80:1d:c7:2e:08:89:a4:72:a0:99:1d:4f:f9:2a:75:63:be:
29:9a:a3:48:8f:dc:bf:49:d5:18:c9:a1:13:92:40:ee:c7:5b:
be:2d:50:97:ad:83:4f:73:27:61:21:50:03:d3:81:5e:6b:9c:
a3:09:c7:bf:44:03:30:75:5a:2a:82:a7:03:6c:2a:01:e4:af:
c7:a5:14:51:86:99:03:5e:63:a5:67:99:46:c5:5b:2c:63:28:
1c:0d:81:f3:a6:70:3a:2d:5a:23:c3:5e:73:e0:a9:52:d0:45:
ec:f7:cf:73:15:95:7a:1a:4a:56:24:cc:9b:1a:91:00:5e:81:
6e:22:b1:83:04:19:f3:3d:d2:73:4f:d3:a2:6f:ad:03:a3:0f:
6f:9e:5d:66:ab:82:e2:d8:23:74:2c:19:4b:79:55:8a:91:a0:
fc:e9:42:5c:95:9f:b7:49:a8:1a:39:bb:6e:61:59:6a:bf:fb:
83:ad:37:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 03:27:11 2024 by rpki-client on console-ams.rpki-client.org