Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/EDiCesljzz_3LXbf6kP4Uq1C3tE.roa
File: EDiCesljzz_3LXbf6kP4Uq1C3tE.roa (raw, json)
Hash identifier: eG4IF7Y9+xy57y8bJIxgXzDtqwpmiuS9x/jXwMmsSHQ=
Subject key identifier: 10:38:82:7A:C9:63:CF:3F:F7:2D:76:DF:EA:43:F8:52:AD:42:DE:D1
Certificate issuer: /CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Certificate serial: 018CC2DB64FAFCB3769AE96A972D0C1AB55E
Authority key identifier: 77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/EDiCesljzz_3LXbf6kP4Uq1C3tE.roa
Signing time: Mon 01 Jan 2024 02:30:07 +0000
ROA not before: Mon 01 Jan 2024 02:30:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48147
IP address blocks: 87.248.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 04:37:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:64:fa:fc:b3:76:9a:e9:6a:97:2d:0c:1a:b5:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Validity
Not Before: Jan 1 02:30:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1038827ac963cf3ff72d76dfea43f852ad42ded1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:a8:d4:dd:38:f8:89:c1:ae:96:35:99:84:a1:
06:1f:56:c1:c5:ee:b0:8b:ad:73:b7:5a:cd:e4:47:
e2:e8:c6:cb:3a:c1:30:1c:13:50:91:f8:d9:8e:17:
01:c3:cf:00:74:4f:4e:c7:39:55:3c:56:71:7f:84:
b7:80:f7:26:30:b2:55:6e:a3:04:0e:27:51:23:ee:
13:98:61:2a:26:23:9c:0e:80:7e:da:52:3a:98:c6:
ab:72:62:fb:9a:db:18:d7:18:48:c6:af:44:55:bb:
bb:e6:32:25:02:f6:a8:3c:17:3d:4a:dd:56:09:65:
1b:bf:af:50:28:fc:5d:7c:ea:c9:22:78:ce:5f:4e:
52:09:fe:18:91:cf:62:4a:cb:73:e1:df:d1:54:93:
01:c1:c0:1e:a0:38:af:78:d7:4e:21:d0:c9:05:04:
60:04:59:01:6a:4f:b7:dc:c4:f2:ed:e1:55:02:0d:
58:5c:ce:80:fd:a9:29:a6:52:46:1c:81:bb:3c:65:
6b:78:51:e1:86:f8:14:b7:b0:07:ce:37:74:65:9e:
95:9a:ab:f1:f8:51:6c:97:7e:d0:6f:d7:99:bd:a9:
7f:56:db:77:6b:1a:8d:6c:21:05:19:c9:13:e6:06:
2a:6f:fd:7d:b2:26:a0:f2:7d:61:c5:b9:92:aa:ec:
b7:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:38:82:7A:C9:63:CF:3F:F7:2D:76:DF:EA:43:F8:52:AD:42:DE:D1
X509v3 Authority Key Identifier:
keyid:77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/EDiCesljzz_3LXbf6kP4Uq1C3tE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.248.147.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:7d:0e:0e:13:2c:dd:5a:f1:29:9e:10:49:a1:c0:8b:d0:31:
e2:3a:96:3d:52:52:01:48:b7:47:db:69:13:96:c2:66:e8:9c:
29:48:46:0c:71:ee:92:ee:8c:28:1b:af:f4:bd:03:e5:18:37:
ed:bd:ff:52:03:3b:e1:43:0d:7e:95:08:c8:73:84:db:90:96:
5b:0d:a0:37:ac:d4:72:3e:48:db:3c:b1:53:be:61:f7:6d:33:
d8:ca:e4:fa:4f:66:0a:0c:6e:03:d6:03:db:06:5c:e0:6e:08:
1a:4b:db:51:5f:fb:95:26:79:21:9a:1f:77:51:4b:e2:58:a4:
2d:a4:97:99:bf:fd:20:51:1b:61:4c:d9:5b:03:cf:67:5c:aa:
39:ef:2e:c4:df:97:aa:87:31:25:87:cd:08:a2:a0:d6:0b:06:
84:8f:19:b4:51:3f:bd:ba:b1:22:15:39:fb:98:1f:e6:83:e0:
4c:ca:03:13:c1:12:92:3b:92:91:9b:03:a9:eb:4c:68:8e:42:
7b:72:0e:91:6b:22:28:75:38:17:cc:6e:ab:74:da:72:22:87:
55:0b:43:87:5b:f5:17:35:5a:a8:d0:44:32:5f:58:15:99:43:
3d:dd:66:54:c8:f2:6c:1f:b0:e4:59:2d:03:1f:f5:3c:28:dd:
17:f3:21:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 13:53:12 2024 by rpki-client on console-ams.rpki-client.org