Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/0952d4-4a49-447d-ad3c-1903edafa8bf/1/ExSxH5rhVOimH6TwE9UWjVjr5S4.roa
File: ExSxH5rhVOimH6TwE9UWjVjr5S4.roa (raw, json)
Hash identifier: FAn3A7kT8yx/mM7E1spf6a35HL2Mr7brLhtTl5nqfn8=
Subject key identifier: 13:14:B1:1F:9A:E1:54:E8:A6:1F:A4:F0:13:D5:16:8D:58:EB:E5:2E
Certificate issuer: /CN=ebf42e80602aedf58a3c7a81883c1a34f69d2fb4
Certificate serial: 018CC3B69514FA48B3522FA86C48249087A0
Authority key identifier: EB:F4:2E:80:60:2A:ED:F5:8A:3C:7A:81:88:3C:1A:34:F6:9D:2F:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6_QugGAq7fWKPHqBiDwaNPadL7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/0952d4-4a49-447d-ad3c-1903edafa8bf/1/ExSxH5rhVOimH6TwE9UWjVjr5S4.roa
Signing time: Mon 01 Jan 2024 06:29:31 +0000
ROA not before: Mon 01 Jan 2024 06:29:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47225
IP address blocks: 89.46.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/0952d4-4a49-447d-ad3c-1903edafa8bf/1/6_QugGAq7fWKPHqBiDwaNPadL7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/0952d4-4a49-447d-ad3c-1903edafa8bf/1/6_QugGAq7fWKPHqBiDwaNPadL7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/6_QugGAq7fWKPHqBiDwaNPadL7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:95:14:fa:48:b3:52:2f:a8:6c:48:24:90:87:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebf42e80602aedf58a3c7a81883c1a34f69d2fb4
Validity
Not Before: Jan 1 06:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1314b11f9ae154e8a61fa4f013d5168d58ebe52e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:61:b9:4d:b9:fd:e4:47:5d:82:a6:7a:b7:c4:
50:f8:a4:5a:b2:66:01:ef:bd:ca:01:8d:10:09:db:
99:fb:9b:94:92:d1:e3:6b:47:68:b3:04:d9:e7:1d:
29:0e:32:06:7d:ca:a7:29:47:da:3f:29:b7:26:03:
de:78:b8:97:e8:14:a4:f4:82:82:75:7a:53:76:3d:
79:4f:dc:39:fc:7d:3b:95:a9:e7:9b:ec:e3:95:44:
04:8f:42:6a:ed:3e:e7:da:2c:f2:fc:82:4c:a0:c8:
f0:04:e0:d5:d9:e2:47:bd:30:c1:c3:df:16:ec:7d:
f4:65:a4:db:e6:38:c0:a5:41:86:c7:63:3e:2e:78:
23:07:87:5d:31:82:e2:62:56:17:bc:89:0b:cd:e4:
0d:28:2e:36:90:11:bf:48:36:75:b3:c0:7d:04:f5:
ba:3d:60:6a:5f:0e:a7:72:61:59:b0:36:90:04:26:
15:be:ae:34:5b:94:a1:68:9c:73:86:e7:a7:c8:38:
0d:b9:7a:d0:ed:6f:95:1a:a9:c4:e8:27:60:dc:6b:
b4:3c:3f:78:ed:27:8a:0f:a6:56:e6:97:2c:20:c9:
cd:74:f2:93:cf:a1:e5:18:0f:ab:78:b4:56:59:ce:
8d:13:d9:c7:bf:cd:30:82:77:b2:58:54:85:86:6c:
81:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:14:B1:1F:9A:E1:54:E8:A6:1F:A4:F0:13:D5:16:8D:58:EB:E5:2E
X509v3 Authority Key Identifier:
keyid:EB:F4:2E:80:60:2A:ED:F5:8A:3C:7A:81:88:3C:1A:34:F6:9D:2F:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6_QugGAq7fWKPHqBiDwaNPadL7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0952d4-4a49-447d-ad3c-1903edafa8bf/1/ExSxH5rhVOimH6TwE9UWjVjr5S4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0952d4-4a49-447d-ad3c-1903edafa8bf/1/6_QugGAq7fWKPHqBiDwaNPadL7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.46.243.0/24
Signature Algorithm: sha256WithRSAEncryption
15:cd:62:bd:aa:0c:58:93:ef:54:e2:76:ee:1e:32:92:3f:76:
4e:60:bc:5d:71:2a:73:7c:1a:cf:67:8d:f3:45:b7:2f:09:9d:
8a:c6:ea:3c:4f:0c:59:87:92:63:e7:7e:bd:f8:8c:34:57:ae:
d2:f7:96:25:1a:b6:58:6e:71:aa:87:16:d4:88:74:b0:71:a9:
33:2f:4e:80:85:ec:cb:71:5a:db:7f:c8:9d:07:f2:14:8e:08:
f5:97:f8:58:c3:76:15:92:a5:ba:ef:d1:c1:fa:c2:c9:fa:e8:
89:ea:db:16:1f:af:db:5e:68:cb:b2:1d:7d:97:6c:08:d0:45:
fe:4b:ef:4a:a1:d0:b8:0b:82:35:51:60:07:c6:0e:46:da:df:
3f:86:4b:a4:6b:f6:3f:57:1b:05:eb:56:69:bd:82:ba:7c:36:
73:7f:95:2c:3c:91:8d:fc:f2:ec:10:6d:84:80:11:f9:fa:c5:
74:3e:7a:0e:2f:95:0b:b5:94:0f:ac:e5:8c:16:66:79:bf:0f:
2f:eb:88:da:42:41:d5:7e:5f:5e:d3:46:26:c8:ad:70:80:ee:
c3:fe:5b:7f:fe:21:0c:71:10:7e:68:c1:df:43:67:1b:ae:96:
c8:e6:c8:90:3b:a9:7f:25:2e:b7:48:0b:1a:ff:bb:59:91:35:
0b:26:56:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:43:29 2024 by rpki-client on console-fra.rpki-client.org