Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/ewZfEts9gqAe8Jgs1WakpG9VA2E.roa
File: ewZfEts9gqAe8Jgs1WakpG9VA2E.roa (raw, json)
Hash identifier: VKjMi7qH3TKkWx9nL+OCMje8kdmyivkRUyCd84BWoQ0=
Subject key identifier: 7B:06:5F:12:DB:3D:82:A0:1E:F0:98:2C:D5:66:A4:A4:6F:55:03:61
Certificate issuer: /CN=633e752ca0dc423c74f508405ba5228a8c2e5157
Certificate serial: 018CC6B7B970956BCBC7C84883DC503FC31B
Authority key identifier: 63:3E:75:2C:A0:DC:42:3C:74:F5:08:40:5B:A5:22:8A:8C:2E:51:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yz51LKDcQjx09QhAW6UiiowuUVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/ewZfEts9gqAe8Jgs1WakpG9VA2E.roa
Signing time: Mon 01 Jan 2024 20:29:38 +0000
ROA not before: Mon 01 Jan 2024 20:29:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198696
IP address blocks: 194.49.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yz51LKDcQjx09QhAW6UiiowuUVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:03:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:b9:70:95:6b:cb:c7:c8:48:83:dc:50:3f:c3:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=633e752ca0dc423c74f508405ba5228a8c2e5157
Validity
Not Before: Jan 1 20:29:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7b065f12db3d82a01ef0982cd566a4a46f550361
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:75:b2:ed:e0:dc:8a:37:c4:71:04:7f:4e:2b:
39:35:26:26:17:8a:d9:dc:1d:a1:31:81:4c:2b:6b:
da:93:97:02:59:60:46:c6:b3:03:28:7c:10:03:ae:
ad:3b:e9:43:c4:e5:4f:bb:a0:ba:7b:4f:0c:c6:2c:
3c:72:d2:75:5b:b3:43:3e:89:8f:8d:1b:32:eb:a1:
3b:3b:1d:01:31:7f:a9:92:76:16:5b:9a:98:03:c0:
68:50:d5:a6:1a:b7:d8:71:06:62:05:ce:5b:fd:27:
88:3b:78:11:4b:45:9d:43:30:d8:2d:65:7d:3b:17:
31:92:f4:b3:86:0a:35:db:04:a3:05:77:23:d4:9b:
39:84:d2:12:24:ba:5b:d5:38:34:4c:10:3a:68:07:
10:71:f5:13:da:78:6f:fa:88:56:3f:4b:58:0a:7d:
0f:9e:ea:15:e2:08:20:9d:3f:ff:b0:23:f0:ac:a9:
5a:ed:71:f6:52:56:e9:d5:b0:7f:3f:2b:8a:ef:5b:
79:d8:1d:6a:a8:36:e0:3b:a0:3f:b0:8c:62:42:68:
3b:9f:77:4b:74:87:da:59:2d:40:83:9b:d8:2a:3f:
e7:20:ac:5e:38:12:ec:f7:00:96:94:7f:50:87:b0:
7e:55:cd:18:5f:68:35:af:a8:1e:58:68:57:95:3f:
ac:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:06:5F:12:DB:3D:82:A0:1E:F0:98:2C:D5:66:A4:A4:6F:55:03:61
X509v3 Authority Key Identifier:
keyid:63:3E:75:2C:A0:DC:42:3C:74:F5:08:40:5B:A5:22:8A:8C:2E:51:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yz51LKDcQjx09QhAW6UiiowuUVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/ewZfEts9gqAe8Jgs1WakpG9VA2E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.49.124.0/24
Signature Algorithm: sha256WithRSAEncryption
99:5f:d4:b3:4d:a1:84:0a:76:af:ac:75:70:1a:9d:3e:6d:a0:
be:a6:ce:94:4d:24:69:8e:45:ba:b0:67:40:96:8f:e4:d3:40:
5a:bb:87:fd:c1:d5:90:9b:21:f6:57:2f:0e:38:5c:21:4f:65:
b0:2f:b2:41:6b:95:93:12:0e:ee:56:7b:72:3b:e4:de:1e:bf:
63:38:f4:53:0d:fc:dc:63:a0:3b:01:2f:51:99:0d:96:4e:20:
ae:f4:f5:0b:cf:51:6a:9b:32:e7:6e:af:f7:ca:10:95:a6:be:
28:64:ee:cc:2c:12:7d:87:ff:a1:0d:92:76:6f:6e:30:39:66:
45:11:30:ab:a7:18:ab:75:28:34:87:9e:ec:33:b1:19:e4:10:
bf:b9:aa:75:cb:33:3e:8d:64:9a:89:e2:e3:57:b2:c7:44:b2:
b0:5f:67:58:f3:30:e6:48:d6:c6:8e:aa:93:4d:14:7d:f5:dd:
f3:60:83:1b:14:44:3d:8c:0c:bc:6a:31:33:35:e3:b4:26:8c:
37:7a:11:9a:8f:29:21:0d:11:e5:e7:78:97:13:b1:a4:f6:33:
4e:d1:6f:3d:08:53:d3:8c:59:0b:71:48:86:c4:01:fc:7a:ef:
48:51:29:ca:f8:56:ae:a6:63:70:f2:d4:49:54:88:c4:4a:3d:
8c:ff:e3:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:31:02 2024 by rpki-client on console-ams.rpki-client.org