Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/79ed04-be11-4388-a66a-482ec7d6872e/1/EW_pzLNmdlcvQclT5EnSEWBlu5Y.roa
File: EW_pzLNmdlcvQclT5EnSEWBlu5Y.roa (raw, json)
Hash identifier: EaDN8lpzr08i5oaTevLlQ8XPZI7h2z2VziUqjC50xOE=
Subject key identifier: 11:6F:E9:CC:B3:66:76:57:2F:41:C9:53:E4:49:D2:11:60:65:BB:96
Certificate issuer: /CN=8d992719191a894d068dba8d0a1006e9feadaa68
Certificate serial: 018CC4936E2B34EF9B75447E14BD265D7482
Authority key identifier: 8D:99:27:19:19:1A:89:4D:06:8D:BA:8D:0A:10:06:E9:FE:AD:AA:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jZknGRkaiU0GjbqNChAG6f6tqmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/79ed04-be11-4388-a66a-482ec7d6872e/1/EW_pzLNmdlcvQclT5EnSEWBlu5Y.roa
Signing time: Mon 01 Jan 2024 10:30:45 +0000
ROA not before: Mon 01 Jan 2024 10:30:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207281
IP address blocks: 185.63.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/79ed04-be11-4388-a66a-482ec7d6872e/1/jZknGRkaiU0GjbqNChAG6f6tqmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/79ed04-be11-4388-a66a-482ec7d6872e/1/jZknGRkaiU0GjbqNChAG6f6tqmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/jZknGRkaiU0GjbqNChAG6f6tqmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 13:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:6e:2b:34:ef:9b:75:44:7e:14:bd:26:5d:74:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d992719191a894d068dba8d0a1006e9feadaa68
Validity
Not Before: Jan 1 10:30:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=116fe9ccb36676572f41c953e449d2116065bb96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:14:a2:a4:62:27:3c:d4:51:71:e2:78:10:a5:
39:27:88:1d:60:5d:9e:ff:b4:2e:7e:29:a9:e6:85:
60:76:30:5f:3d:b4:3e:7a:23:c3:dc:a9:f6:6f:16:
68:6f:94:af:cd:e5:a5:5b:67:af:85:7d:35:37:69:
16:f1:fb:58:2d:f1:91:c1:be:86:79:25:0d:bb:ca:
85:e0:5b:47:8a:7a:8a:34:a8:15:5b:11:2d:3b:81:
2b:77:6c:e3:3e:98:f6:0f:ae:08:4b:9f:a6:a8:2a:
a9:2e:fd:ef:11:49:c3:0d:9a:08:d6:bf:0e:b6:c4:
12:d8:92:fd:7e:34:5b:7d:86:cc:2c:78:1a:91:39:
9d:37:a1:50:31:cd:14:06:5b:05:40:c9:b8:37:c1:
6f:0a:aa:aa:cf:dd:a5:3e:47:11:ff:01:56:59:1e:
95:db:9a:8f:62:f3:93:f2:65:ac:23:b9:ed:e3:6a:
49:c1:87:35:7b:cd:c4:df:a0:80:ab:53:32:ac:98:
91:30:26:fb:54:8f:ba:5d:0f:03:04:a7:aa:37:ac:
66:e7:b7:bb:cd:bc:3a:3d:3d:10:81:17:78:81:ad:
2d:a4:90:1d:f2:8e:b3:ff:a9:c6:85:65:c6:23:71:
68:14:4b:94:2e:be:1e:1e:e0:f4:3f:2d:58:89:2d:
67:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:6F:E9:CC:B3:66:76:57:2F:41:C9:53:E4:49:D2:11:60:65:BB:96
X509v3 Authority Key Identifier:
keyid:8D:99:27:19:19:1A:89:4D:06:8D:BA:8D:0A:10:06:E9:FE:AD:AA:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jZknGRkaiU0GjbqNChAG6f6tqmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/79ed04-be11-4388-a66a-482ec7d6872e/1/EW_pzLNmdlcvQclT5EnSEWBlu5Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/79ed04-be11-4388-a66a-482ec7d6872e/1/jZknGRkaiU0GjbqNChAG6f6tqmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.63.85.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:23:f7:fc:a6:a5:fa:96:53:c0:96:fe:76:40:6f:5d:4e:f5:
54:0c:d5:20:6e:78:d0:5a:7f:7d:b8:8d:a9:23:a2:ae:ec:8a:
91:60:86:78:dd:bc:83:e0:cc:29:1b:cd:88:b2:75:6a:45:3b:
1e:35:a2:ab:d6:df:31:81:dd:a3:50:34:36:b7:15:0e:be:9d:
4e:68:1b:e0:1c:18:44:6b:c0:f0:e5:12:28:a0:73:6e:4a:f4:
e0:86:15:f3:86:9d:3e:2f:14:8b:68:a5:db:f0:e5:fa:74:c0:
42:b4:c0:d6:ec:17:17:6a:1a:9e:61:e8:eb:1e:17:dc:0f:51:
30:d7:19:f0:e6:56:72:ad:f8:ae:1b:bd:08:1d:a6:6e:df:e6:
e3:83:5b:57:04:c0:2d:c9:ba:92:0f:7d:be:6c:b5:2b:6f:07:
6e:83:b0:ad:17:39:d6:31:8c:5a:db:cb:6a:21:0d:6f:91:c7:
e4:7d:37:81:d5:f8:c1:d4:34:49:77:d6:6b:28:87:21:06:fc:
d7:e2:7a:67:85:87:97:27:c4:ab:de:35:cd:b9:9f:b8:d1:2c:
df:c8:21:1e:04:c4:8d:78:5d:75:28:fe:de:a1:c2:15:5a:32:
5b:8b:05:c4:40:53:bf:38:30:18:cc:a7:73:6c:fb:ed:0d:32:
72:9b:99:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 20:12:46 2024 by rpki-client on console-fra.rpki-client.org