Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/EohRGBwPgq_DW7ozJ4TzdI3fjjw.roa
File: EohRGBwPgq_DW7ozJ4TzdI3fjjw.roa (raw, json)
Hash identifier: DU1I4DrrTEK3PgBnRf4iO9cIfiBHHUQwS3Cl/FgGEic=
Subject key identifier: 12:88:51:18:1C:0F:82:AF:C3:5B:BA:33:27:84:F3:74:8D:DF:8E:3C
Certificate issuer: /CN=ebb08be800126511cff8d25699d9ac136ed0ec8c
Certificate serial: 018CC348E93E53468C6D488F27242D5F4BB3
Authority key identifier: EB:B0:8B:E8:00:12:65:11:CF:F8:D2:56:99:D9:AC:13:6E:D0:EC:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/67CL6AASZRHP-NJWmdmsE27Q7Iw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/EohRGBwPgq_DW7ozJ4TzdI3fjjw.roa
Signing time: Mon 01 Jan 2024 04:29:44 +0000
ROA not before: Mon 01 Jan 2024 04:29:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 54748
IP address blocks: 134.0.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.mft
rsync://rpki.ripe.net/repository/DEFAULT/67CL6AASZRHP-NJWmdmsE27Q7Iw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 04:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:e9:3e:53:46:8c:6d:48:8f:27:24:2d:5f:4b:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebb08be800126511cff8d25699d9ac136ed0ec8c
Validity
Not Before: Jan 1 04:29:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=128851181c0f82afc35bba332784f3748ddf8e3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:9e:ef:45:4f:57:2e:0c:cb:bb:9a:2a:50:c1:
9b:3c:b5:8b:43:62:02:bc:79:f3:9e:c2:36:06:a8:
04:b9:93:65:79:56:2f:b7:1d:81:1c:e2:fd:f2:9b:
1a:43:55:48:a6:62:6f:94:4c:e0:71:d6:86:e1:bc:
a5:e3:5e:e0:5d:6a:77:60:d4:b2:13:c6:d0:51:f9:
fc:20:2f:88:aa:52:fc:30:eb:69:04:6a:59:bc:a7:
0a:fb:c1:3f:8f:b2:81:f6:4a:d2:90:00:b0:f1:be:
0d:80:2d:ae:b9:40:1b:6c:47:5c:10:3f:75:7d:35:
66:8e:6d:42:5d:fd:39:fe:3c:b0:85:71:6c:ca:23:
74:5b:91:37:79:04:f6:e0:68:24:79:58:ce:87:99:
79:97:21:c6:dd:c5:80:66:76:81:a5:34:0e:2e:37:
d1:13:45:fe:a1:63:a1:d6:07:ed:7d:6b:bd:c7:03:
98:47:32:34:62:81:05:50:d1:b9:96:05:e4:a3:79:
fd:4a:3b:5f:ea:dc:d6:20:1e:13:aa:f4:fb:5c:87:
b2:c4:fa:e6:60:04:70:98:52:d3:06:3b:0f:f6:b5:
c3:90:3d:c2:44:a4:de:85:88:ab:2f:0e:e9:2e:5f:
38:4a:b4:b5:2a:0c:3b:2a:f4:2f:e1:69:f3:04:48:
eb:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:88:51:18:1C:0F:82:AF:C3:5B:BA:33:27:84:F3:74:8D:DF:8E:3C
X509v3 Authority Key Identifier:
keyid:EB:B0:8B:E8:00:12:65:11:CF:F8:D2:56:99:D9:AC:13:6E:D0:EC:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/67CL6AASZRHP-NJWmdmsE27Q7Iw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/EohRGBwPgq_DW7ozJ4TzdI3fjjw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
134.0.71.0/24
Signature Algorithm: sha256WithRSAEncryption
de:0f:19:d5:81:2a:44:c2:c9:36:76:90:a4:21:0d:c0:eb:48:
28:db:59:31:68:e1:75:61:d1:0a:15:60:e2:95:ca:c6:4e:ec:
23:5b:da:0d:a8:f5:30:e7:5b:26:8c:31:e6:1e:07:66:6d:a5:
c3:95:80:87:a6:2b:b9:94:bb:c4:96:d9:cf:0a:7b:a5:fd:19:
f5:9a:90:8b:05:70:66:9e:e4:3c:07:6f:1b:0a:18:07:92:cc:
3d:92:c4:7c:36:e1:03:b6:4c:1d:c7:29:3a:13:71:5c:b9:fa:
40:ee:85:c6:4d:dd:5d:80:62:e2:ea:de:3a:eb:cd:8f:d5:79:
99:89:90:94:f3:5d:d0:9c:c8:77:2d:39:56:64:78:dd:2b:98:
ec:d1:49:f6:c2:af:65:bd:88:64:28:e3:e4:30:c6:2c:76:9f:
ad:60:28:85:0f:d5:7a:ea:c6:94:5a:84:c8:0b:8c:b1:29:55:
9d:9d:3a:3e:b4:d4:18:e7:41:0b:df:cf:e3:b5:ff:42:17:96:
65:2a:ab:f1:ac:f4:69:9b:62:98:3e:42:f9:49:50:c3:d0:a3:
a9:b9:df:80:1d:98:10:49:c4:f0:d2:80:28:31:25:03:b9:2a:
73:74:01:96:6b:44:d2:25:32:66:9d:26:de:c2:c8:5a:1c:ab:
14:4d:cc:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 05:08:59 2024 by rpki-client on console-fra.rpki-client.org