Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/44ce01-d451-4d73-a6e4-3802ff4ec159/1/e2Bov4u4MeMEQAoeEvSQN7BxseE.roa
File: e2Bov4u4MeMEQAoeEvSQN7BxseE.roa (raw, json)
Hash identifier: TYnB9+T0V2paiDXvsNZ5jhBHGtTaJ2pmQYCzAMS9EHA=
Subject key identifier: 7B:60:68:BF:8B:B8:31:E3:04:40:0A:1E:12:F4:90:37:B0:71:B1:E1
Certificate issuer: /CN=ca7448fc09b3f7320da8057bfa8eea9baf9cee39
Certificate serial: 018CC8DF3A6E345F298BC12F1540DE5569CE
Authority key identifier: CA:74:48:FC:09:B3:F7:32:0D:A8:05:7B:FA:8E:EA:9B:AF:9C:EE:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ynRI_Amz9zINqAV7-o7qm6-c7jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/44ce01-d451-4d73-a6e4-3802ff4ec159/1/e2Bov4u4MeMEQAoeEvSQN7BxseE.roa
Signing time: Tue 02 Jan 2024 06:32:01 +0000
ROA not before: Tue 02 Jan 2024 06:32:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57297
IP address blocks: 194.36.116.0/22 maxlen: 24
2a0c:bf40::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/44ce01-d451-4d73-a6e4-3802ff4ec159/1/ynRI_Amz9zINqAV7-o7qm6-c7jk.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/44ce01-d451-4d73-a6e4-3802ff4ec159/1/ynRI_Amz9zINqAV7-o7qm6-c7jk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ynRI_Amz9zINqAV7-o7qm6-c7jk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 03:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:3a:6e:34:5f:29:8b:c1:2f:15:40:de:55:69:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca7448fc09b3f7320da8057bfa8eea9baf9cee39
Validity
Not Before: Jan 2 06:32:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7b6068bf8bb831e304400a1e12f49037b071b1e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:31:d1:f0:e2:eb:52:03:0d:8a:5b:f5:1c:a0:
1f:33:28:75:42:f6:31:fe:3a:2b:8a:0e:92:76:e7:
fa:6a:47:f5:3e:63:97:5d:a1:a6:20:48:b9:01:d1:
86:c5:20:90:9e:c9:b4:44:07:a3:f7:f3:e1:30:5b:
64:f6:b0:e2:49:6e:29:ac:e4:65:dc:8b:da:8f:c8:
85:93:52:c5:c6:46:43:56:4f:13:02:a2:5f:13:c3:
d7:b0:13:ad:4a:24:d0:d0:40:e8:46:1a:2b:35:43:
b5:15:7d:c6:e0:3d:7f:87:0c:69:b7:d3:ba:d5:8c:
3d:27:a6:62:71:33:89:45:0d:31:eb:31:84:f0:74:
2b:8e:2f:45:d6:c1:17:16:4d:70:36:04:80:57:0c:
d8:32:5b:23:0e:cf:7d:0d:75:a2:b3:e7:bd:44:b9:
35:f7:0b:e8:a6:0f:ca:99:c2:e5:03:be:f9:ca:27:
90:44:28:4f:cb:4e:54:62:19:ac:c6:07:b9:f6:ef:
3f:ce:00:c3:1c:1d:cd:60:67:5e:7d:31:d8:dd:8e:
0d:0d:31:5f:6b:3d:a6:7c:90:67:32:8a:f9:86:6d:
da:84:c9:43:d5:94:e6:b0:22:4c:52:49:59:24:0f:
2d:04:5a:01:f6:fc:72:5e:84:c9:6f:38:8c:54:df:
68:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:60:68:BF:8B:B8:31:E3:04:40:0A:1E:12:F4:90:37:B0:71:B1:E1
X509v3 Authority Key Identifier:
keyid:CA:74:48:FC:09:B3:F7:32:0D:A8:05:7B:FA:8E:EA:9B:AF:9C:EE:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ynRI_Amz9zINqAV7-o7qm6-c7jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/44ce01-d451-4d73-a6e4-3802ff4ec159/1/e2Bov4u4MeMEQAoeEvSQN7BxseE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/44ce01-d451-4d73-a6e4-3802ff4ec159/1/ynRI_Amz9zINqAV7-o7qm6-c7jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.36.116.0/22
IPv6:
2a0c:bf40::/29
Signature Algorithm: sha256WithRSAEncryption
15:5e:3c:63:20:2c:10:73:08:95:03:bd:92:b4:12:e5:06:fb:
0d:1e:3d:8a:c6:ac:90:6f:0a:8f:70:38:87:73:48:3d:ad:1e:
16:eb:be:dd:06:ee:83:2d:0e:85:7a:9c:1d:62:4f:2c:98:ba:
60:86:db:6c:3d:0d:7c:f6:15:dd:d8:7f:ec:5f:c5:50:5e:44:
11:16:38:a9:ce:14:00:c5:5d:20:37:40:7e:a3:00:fb:a1:a7:
22:33:21:eb:e1:73:8e:01:fa:20:78:55:a8:dc:e5:6a:0e:ac:
f6:e9:48:d1:1a:8b:83:43:04:01:b0:c6:82:2f:fe:61:9e:37:
39:79:30:2a:dd:e4:4e:56:52:bb:2e:a7:bf:d0:48:b1:b7:1f:
d2:be:c5:21:df:c9:04:5c:02:aa:b1:eb:d4:41:a1:f3:0e:7b:
aa:39:88:14:85:5d:db:fb:d0:23:23:9f:f8:1d:c0:c8:7b:d6:
0e:60:a5:df:ac:d2:e8:46:e5:37:33:da:0d:72:00:7e:ba:e0:
2d:77:6b:d4:60:a5:60:63:72:a5:1c:0c:d8:6d:c4:c2:d1:f7:
18:58:95:03:a6:0f:ef:36:95:a1:11:e8:9e:62:f6:23:28:31:
47:ce:67:9e:d9:a3:7e:6a:85:e9:a4:a1:6b:f3:7e:dd:f7:2c:
d8:dd:d5:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:35:30 2024 by rpki-client on console-ams.rpki-client.org