Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/12e72c-7491-47e2-ac53-ac0c60100478/1/et0yKzzPLtXJVaUL1yOxJ-LrBjE.roa
File: et0yKzzPLtXJVaUL1yOxJ-LrBjE.roa (raw, json)
Hash identifier: E8u2LX5l7DzWXoJgjZZgQKU3Fp6cQwN4FNFpVJqSA/w=
Subject key identifier: 7A:DD:32:2B:3C:CF:2E:D5:C9:55:A5:0B:D7:23:B1:27:E2:EB:06:31
Certificate issuer: /CN=eb50d3084bf8aa9ea777d245b60d511be189eab2
Certificate serial: 018CC9BCB42C7EC5CC6AB3DCCF4F1EE0F6C4
Authority key identifier: EB:50:D3:08:4B:F8:AA:9E:A7:77:D2:45:B6:0D:51:1B:E1:89:EA:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/61DTCEv4qp6nd9JFtg1RG-GJ6rI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/12e72c-7491-47e2-ac53-ac0c60100478/1/et0yKzzPLtXJVaUL1yOxJ-LrBjE.roa
Signing time: Tue 02 Jan 2024 10:33:56 +0000
ROA not before: Tue 02 Jan 2024 10:33:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207366
IP address blocks: 164.138.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/12e72c-7491-47e2-ac53-ac0c60100478/1/61DTCEv4qp6nd9JFtg1RG-GJ6rI.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/12e72c-7491-47e2-ac53-ac0c60100478/1/61DTCEv4qp6nd9JFtg1RG-GJ6rI.mft
rsync://rpki.ripe.net/repository/DEFAULT/61DTCEv4qp6nd9JFtg1RG-GJ6rI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 May 2024 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:b4:2c:7e:c5:cc:6a:b3:dc:cf:4f:1e:e0:f6:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb50d3084bf8aa9ea777d245b60d511be189eab2
Validity
Not Before: Jan 2 10:33:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7add322b3ccf2ed5c955a50bd723b127e2eb0631
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:38:79:b6:33:2c:0c:79:90:27:47:40:1d:25:
14:0e:7d:7b:0c:96:6e:3e:0b:3b:54:fa:f2:a6:f3:
b2:0f:59:27:05:4f:d9:5c:70:5b:e0:9b:15:a5:9e:
eb:69:5d:87:dc:28:fe:41:87:a8:a5:7d:d2:a4:36:
65:77:18:4a:26:0d:82:4e:ae:4a:93:fd:f1:85:a1:
70:91:6d:eb:b6:8c:30:7f:08:44:d1:d9:6b:26:a3:
9a:28:b3:0c:40:f7:23:8a:40:7b:2e:cc:5e:67:28:
0e:00:21:09:59:b4:df:54:fe:03:1c:27:e1:32:e4:
a3:bb:be:4b:30:f6:b9:d3:84:d0:3b:4b:98:a0:87:
61:56:6c:0a:0b:0a:1c:32:7a:2b:7d:ff:73:3a:6d:
99:cd:0f:bb:1d:fb:7f:4c:d3:36:f3:16:97:45:93:
eb:30:06:de:1a:9d:81:5a:6d:b2:8e:45:84:e3:fd:
59:11:0b:31:00:8b:57:c9:e5:bf:f5:1e:1a:98:3b:
be:da:25:8e:41:85:b5:21:b7:d7:f9:31:15:1d:b1:
6a:fd:80:5a:ba:19:d0:17:d8:4c:f0:21:38:9f:4e:
93:d4:43:b4:49:1d:c6:a8:db:73:ed:f6:e3:f7:94:
54:69:35:3b:c3:f0:d6:d5:60:a6:63:2b:e6:0b:d1:
27:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:DD:32:2B:3C:CF:2E:D5:C9:55:A5:0B:D7:23:B1:27:E2:EB:06:31
X509v3 Authority Key Identifier:
keyid:EB:50:D3:08:4B:F8:AA:9E:A7:77:D2:45:B6:0D:51:1B:E1:89:EA:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/61DTCEv4qp6nd9JFtg1RG-GJ6rI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/12e72c-7491-47e2-ac53-ac0c60100478/1/et0yKzzPLtXJVaUL1yOxJ-LrBjE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/12e72c-7491-47e2-ac53-ac0c60100478/1/61DTCEv4qp6nd9JFtg1RG-GJ6rI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.138.254.0/24
Signature Algorithm: sha256WithRSAEncryption
26:c8:e1:22:94:87:9b:c1:86:fa:9c:5f:c2:73:03:2e:8e:e3:
c6:09:a4:a3:a8:54:f5:b0:60:aa:9a:ee:bf:9e:a9:15:c3:e5:
46:28:fa:ad:97:d7:ac:40:bf:3d:28:29:3a:41:db:77:28:2f:
40:d0:9b:ca:70:05:5a:74:18:4a:43:65:41:1f:cc:3c:6c:6a:
83:da:60:fa:ed:f5:b2:61:d6:60:1a:cf:54:da:3a:22:f0:3e:
6a:55:20:7a:91:96:a8:af:14:fd:a6:b0:15:15:80:0a:89:e9:
7b:e8:4f:02:35:5f:e6:cd:f8:bb:f1:42:21:58:87:f0:94:62:
17:76:0d:6b:bf:c9:1e:e4:1e:d2:a6:60:8d:60:9b:ce:d2:c9:
82:e5:67:e6:55:e1:6f:10:66:82:c4:2a:cf:15:96:b9:28:d7:
20:62:a2:09:24:97:76:a2:4d:37:33:f0:1c:04:0c:ec:4d:1c:
68:ab:3b:34:9d:37:cb:5c:ea:a1:65:db:1c:ac:31:25:2f:4d:
97:27:98:c7:f7:35:31:b7:d2:d7:26:14:79:01:88:0c:3b:b0:
13:36:8f:4a:9a:0b:81:ff:41:5e:b1:da:60:b7:38:9d:9e:f2:
fb:45:08:45:43:de:7b:18:0d:f4:52:e6:ff:81:c6:f0:be:e7:
c8:15:13:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 07:43:13 2024 by rpki-client on console-fra.rpki-client.org