Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/EJtGwHbuNoiIJIVYx-KIvFJjQYA.roa
File: EJtGwHbuNoiIJIVYx-KIvFJjQYA.roa (raw, json)
Hash identifier: KpdLcsZaEJRSy8kLshfMJP+M+QV9OMiDU3w8+pFpsRI=
Subject key identifier: 10:9B:46:C0:76:EE:36:88:88:24:85:58:C7:E2:88:BC:52:63:41:80
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 018CC649DC76A4F302329036E8990A287836
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/EJtGwHbuNoiIJIVYx-KIvFJjQYA.roa
Signing time: Mon 01 Jan 2024 18:29:38 +0000
ROA not before: Mon 01 Jan 2024 18:29:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43943
IP address blocks: 92.247.110.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 06:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:49:dc:76:a4:f3:02:32:90:36:e8:99:0a:28:78:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: Jan 1 18:29:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=109b46c076ee368888248558c7e288bc52634180
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:b2:08:a9:d5:27:ad:d5:b5:26:43:94:d9:f4:
bc:e7:03:63:b0:16:91:67:b4:f3:47:01:0f:16:05:
32:1f:29:71:ae:f4:38:83:df:59:ed:e7:40:81:7f:
92:08:30:df:45:14:b4:f5:02:07:f7:5c:ee:a0:3a:
96:3e:4f:49:ac:a2:df:22:da:ef:ed:1c:fb:33:03:
ce:cf:58:36:e1:8e:73:27:c5:40:22:f1:fd:d4:d1:
88:d2:9e:3f:8a:53:6d:b8:4f:90:53:f8:15:5f:d9:
1e:ff:c9:8e:89:b9:c4:cf:ef:bf:09:79:d4:5a:21:
d3:11:9c:ce:13:68:68:fd:e1:1a:ed:8f:5e:bf:a1:
7b:ca:a1:d6:de:49:84:3b:79:0e:c4:2e:3b:83:13:
11:a3:07:84:3a:93:67:d6:45:d0:1f:4a:3b:61:19:
2d:4c:b5:17:ba:2a:6a:2b:ef:58:4c:c5:1a:86:69:
f2:ae:a2:fe:6e:7f:04:0d:c0:b6:df:5c:01:45:30:
93:91:8f:79:1a:b3:f5:4b:9e:06:13:d6:2b:27:72:
14:34:cf:d4:96:86:33:5f:06:6d:f8:3a:7a:dd:d0:
2d:af:3f:96:55:b7:a7:91:ca:ac:c9:17:f8:22:71:
29:68:5b:ae:7d:9b:68:60:b8:72:f3:22:a3:38:b0:
bb:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:9B:46:C0:76:EE:36:88:88:24:85:58:C7:E2:88:BC:52:63:41:80
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/EJtGwHbuNoiIJIVYx-KIvFJjQYA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.247.110.0/23
Signature Algorithm: sha256WithRSAEncryption
86:ec:48:98:0b:ac:01:d7:a3:49:7c:c5:0b:03:dd:6a:32:02:
de:fd:6a:83:5d:61:2b:fe:21:7b:ec:21:c1:f8:cf:03:5d:a1:
22:12:ea:53:d7:91:61:46:ce:41:cd:e5:99:d9:cc:c8:a4:65:
8f:46:88:73:35:35:86:b3:ec:2f:79:45:7d:e1:64:ba:63:07:
fd:9a:e5:72:db:c2:cb:de:80:fd:fd:e6:99:ea:44:24:56:44:
c9:06:68:80:47:36:e6:de:f4:70:fe:16:d2:cc:0e:1c:79:d1:
c2:81:a0:07:af:aa:b1:97:07:20:12:09:40:e9:e5:0a:96:7d:
04:3e:59:7f:45:4a:d8:3c:10:2a:12:34:bc:2d:84:f4:dc:2c:
b8:17:7d:f2:d8:7d:3b:02:ab:e5:b5:0c:68:8a:f8:42:7e:26:
34:4c:10:bd:58:fb:59:48:4f:9b:f0:7b:c7:6d:f5:8a:9c:5b:
03:e4:18:56:73:22:8a:1e:38:12:d7:0b:b0:f3:38:12:4b:e7:
d6:64:61:13:fe:55:00:cf:ec:92:f9:cf:a6:eb:c5:8f:a7:e8:
c8:fd:14:e8:1c:e0:0e:11:1d:e7:a0:7f:7e:4b:77:cb:dc:74:
62:e6:44:9a:7b:eb:67:4c:4f:c1:ae:4a:97:82:0b:94:f8:ce:
eb:df:40:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 15:22:55 2024 by rpki-client on console-ams.rpki-client.org