Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/EBaJ8tX9jtDT7VcahZ9DBCEQPZk.roa
File: EBaJ8tX9jtDT7VcahZ9DBCEQPZk.roa (raw, json)
Hash identifier: luviHiFK4SwTUyLU+LLLaLzh2PpTgQOOezzG2s6dLMA=
Subject key identifier: 10:16:89:F2:D5:FD:8E:D0:D3:ED:57:1A:85:9F:43:04:21:10:3D:99
Certificate issuer: /CN=3d3f87bb7f7874aa7e15cfec9bbf6aae3c9ce33a
Certificate serial: 018CC8DCE5F6C7F28FEA0EE2016D97643301
Authority key identifier: 3D:3F:87:BB:7F:78:74:AA:7E:15:CF:EC:9B:BF:6A:AE:3C:9C:E3:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PT-Hu394dKp-Fc_sm79qrjyc4zo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/EBaJ8tX9jtDT7VcahZ9DBCEQPZk.roa
Signing time: Tue 02 Jan 2024 06:29:29 +0000
ROA not before: Tue 02 Jan 2024 06:29:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210194
IP address blocks: 194.39.231.0/24 maxlen: 24
194.39.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.mft
rsync://rpki.ripe.net/repository/DEFAULT/PT-Hu394dKp-Fc_sm79qrjyc4zo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:dc:e5:f6:c7:f2:8f:ea:0e:e2:01:6d:97:64:33:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d3f87bb7f7874aa7e15cfec9bbf6aae3c9ce33a
Validity
Not Before: Jan 2 06:29:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=101689f2d5fd8ed0d3ed571a859f430421103d99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:69:4c:ff:a7:92:ca:68:6e:0a:f8:39:55:29:
dd:3d:1c:30:e8:6a:68:ac:74:f2:17:31:a4:a7:9e:
29:d7:d3:3a:07:31:d0:6f:ca:7e:a0:11:f7:c8:fd:
14:1d:e7:c1:97:ef:d4:13:85:45:0a:7e:39:e3:a0:
78:cb:73:9e:24:63:23:8d:a7:17:0f:53:b7:79:0c:
72:06:54:f9:03:a6:34:67:4e:1e:6a:8b:b9:27:1e:
5f:96:5b:d6:0f:f6:b8:94:4d:c2:78:b0:82:95:5b:
f4:6b:44:a7:36:47:be:a6:49:17:99:70:bb:0d:e7:
33:8c:c5:7e:d4:a0:b0:07:6a:54:7f:a0:ae:00:70:
72:cf:5e:41:9a:45:84:89:20:21:96:17:4b:31:65:
95:db:0e:93:95:5c:14:bd:4a:21:65:f3:0e:c6:80:
5e:fa:98:db:c7:2c:74:0f:d0:e0:a9:dc:fb:48:dd:
c9:38:5b:37:b3:2c:80:58:67:82:dc:a2:5d:24:fb:
18:e5:40:3e:73:10:78:c7:dd:80:e0:5f:da:93:7a:
9d:0d:46:77:de:0e:72:46:2e:0e:0a:23:0f:b4:f9:
c5:6a:d7:68:d6:bc:ad:03:92:dc:4c:0e:38:56:18:
d9:25:80:f7:79:54:ca:07:e6:9a:d3:83:03:20:85:
ad:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:16:89:F2:D5:FD:8E:D0:D3:ED:57:1A:85:9F:43:04:21:10:3D:99
X509v3 Authority Key Identifier:
keyid:3D:3F:87:BB:7F:78:74:AA:7E:15:CF:EC:9B:BF:6A:AE:3C:9C:E3:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PT-Hu394dKp-Fc_sm79qrjyc4zo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/EBaJ8tX9jtDT7VcahZ9DBCEQPZk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.39.230.0/23
Signature Algorithm: sha256WithRSAEncryption
40:52:da:a6:bc:71:ec:b1:84:ba:0e:fd:74:f0:a7:8d:79:8a:
b8:4a:04:8c:91:5e:cb:32:a2:4d:d1:54:3c:f8:3b:43:1c:9a:
96:9d:22:9f:8d:64:b5:7c:a8:89:64:36:e9:1f:54:85:aa:42:
ea:13:61:4b:15:fb:18:09:ce:98:37:6f:d2:3f:b9:05:1b:40:
16:bd:63:3c:52:de:03:c5:51:83:b6:a7:79:cb:99:c4:13:2a:
9b:8b:49:2b:74:73:83:ce:f0:5c:bf:f3:d5:fc:00:83:85:ce:
cc:ea:1c:90:2b:6b:0c:80:9f:0c:77:ef:bf:6a:6a:ef:f5:ed:
d3:db:e9:5a:0c:45:26:5a:39:9f:81:14:8f:d8:59:ae:ed:5c:
87:4b:ee:cf:7d:ba:b5:5b:c5:8a:5e:f0:1a:72:5e:ee:3c:a3:
85:bc:0d:0e:a0:c6:5a:5b:15:65:03:5e:5f:1e:ef:81:eb:77:
a3:98:67:70:cd:cf:52:bf:33:ef:1d:49:2d:f9:32:43:54:b3:
6a:b5:43:90:df:c5:3b:b3:38:14:95:6d:cf:e4:92:77:ec:1f:
dc:09:65:d2:37:b7:eb:a7:55:d3:b1:13:c3:03:57:20:1d:42:
46:32:a7:53:65:a4:73:54:a9:19:2e:d7:30:92:04:9e:6d:df:
57:8b:c6:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 03:01:17 2024 by rpki-client on console-ams.rpki-client.org