Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/EdSKIJZaerwGStRzmZxrfNmI4DI.roa
File: EdSKIJZaerwGStRzmZxrfNmI4DI.roa (raw, json)
Hash identifier: jp1hwE7nmb02RurhbSU8HBYUzlvuc+DGgmpkgji1T8k=
Subject key identifier: 11:D4:8A:20:96:5A:7A:BC:06:4A:D4:73:99:9C:6B:7C:D9:88:E0:32
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 018CC348E7CD06A96C2570FDD25B78A7D550
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/EdSKIJZaerwGStRzmZxrfNmI4DI.roa
Signing time: Mon 01 Jan 2024 04:29:44 +0000
ROA not before: Mon 01 Jan 2024 04:29:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210998
IP address blocks: 194.6.177.0/24 maxlen: 24
217.193.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:e7:cd:06:a9:6c:25:70:fd:d2:5b:78:a7:d5:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Jan 1 04:29:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=11d48a20965a7abc064ad473999c6b7cd988e032
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:3c:32:74:83:35:1e:7b:b3:a5:7d:21:a7:b1:
e6:21:53:5c:52:6c:dc:c6:3a:59:8a:32:1f:bb:59:
37:b8:b2:1a:7e:32:ca:08:1d:de:11:cb:f0:cb:54:
5e:3c:6b:54:82:3c:09:8d:6a:47:b3:be:fb:1c:81:
e9:d1:f3:b7:68:b9:06:8a:0f:f8:0c:94:99:8c:00:
1a:4c:e5:d2:45:c8:15:2f:ed:2e:fe:09:07:41:ce:
21:75:0c:8d:70:6d:cc:a1:59:1c:eb:d8:ae:ba:4e:
77:ec:74:02:45:a6:86:42:e3:d4:9b:e2:c9:2f:09:
a6:bf:81:62:07:8f:04:4b:2b:8d:3e:5f:b4:cc:b4:
25:57:35:0d:d9:1d:7a:e3:a3:1b:cb:53:da:59:24:
75:e5:ae:95:66:4c:80:f3:bc:29:95:b1:5e:4c:e6:
f9:2d:b2:88:12:f6:c4:96:3c:ac:61:32:18:38:a4:
d5:ab:92:78:e6:58:10:77:68:99:e9:44:3a:8e:a0:
47:56:5b:14:d2:79:79:46:b7:d6:9a:db:1c:51:55:
21:9d:0a:4a:08:ec:aa:4a:a4:40:34:ae:c8:df:59:
5d:6a:e5:b2:de:1d:8e:93:fc:08:1d:c1:b1:1c:31:
f5:47:29:db:87:2b:e1:53:42:f2:19:96:b8:e3:5d:
13:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:D4:8A:20:96:5A:7A:BC:06:4A:D4:73:99:9C:6B:7C:D9:88:E0:32
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/EdSKIJZaerwGStRzmZxrfNmI4DI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.6.177.0/24
217.193.221.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:97:5b:bc:98:fa:f2:af:a2:bd:e4:4e:44:d5:60:73:bd:a0:
17:b3:7e:d5:2f:88:7c:da:66:2b:5e:49:1e:2e:e4:c0:ec:21:
52:af:51:a8:48:08:40:fa:27:99:67:75:17:91:c6:16:e3:1d:
8b:3f:f3:96:6b:75:9e:f3:37:1d:7c:a0:61:da:f2:db:af:bb:
c6:32:ae:e0:47:69:8d:19:53:fe:9d:35:fe:4e:98:23:46:13:
01:37:d2:cb:81:26:5b:7e:10:9c:7a:e2:64:7f:2e:a1:0f:e8:
da:ed:3b:70:0f:e7:71:e6:9e:54:82:84:c6:47:4a:6e:80:32:
61:97:dd:59:cc:68:a3:e5:0d:b1:b6:7a:93:16:d9:61:74:07:
dc:6e:1f:40:c6:1c:65:29:66:2f:fe:54:f6:96:f1:ae:69:99:
b7:d0:2e:bb:26:b7:2f:19:f8:54:63:2f:45:86:af:2f:66:48:
f8:40:5b:40:f5:c5:35:ef:17:e8:dc:39:d5:ba:07:6f:20:df:
24:81:50:25:c4:46:08:6a:23:9c:d0:c8:33:95:5d:b0:e2:10:
8a:33:a6:fe:ad:5f:f3:a8:68:e6:3c:c5:b7:31:74:8b:77:2f:
9d:c2:d5:82:d5:19:d4:fc:a5:98:d8:91:60:81:47:f2:57:f5:
03:d4:f6:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 05:33:38 2024 by rpki-client on console-fra.rpki-client.org