Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/a282cd-ee30-49c3-9c9e-471db7eb719e/1/EYxTAPv1b2fy-c3-bTKk4Jz5PMI.roa
File: EYxTAPv1b2fy-c3-bTKk4Jz5PMI.roa (raw, json)
Hash identifier: srDdXk55QGkOS8GxWC5S5FDE3/bHhe6MVTzeTEzQmtQ=
Subject key identifier: 11:8C:53:00:FB:F5:6F:67:F2:F9:CD:FE:6D:32:A4:E0:9C:F9:3C:C2
Certificate issuer: /CN=c5d5ce69fccf0c6bb8e2b2667e1e38fb940f3d26
Certificate serial: 018CC3490943C6FBCB3EFEA5B3D13DC51F66
Authority key identifier: C5:D5:CE:69:FC:CF:0C:6B:B8:E2:B2:66:7E:1E:38:FB:94:0F:3D:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xdXOafzPDGu44rJmfh44-5QPPSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/a282cd-ee30-49c3-9c9e-471db7eb719e/1/EYxTAPv1b2fy-c3-bTKk4Jz5PMI.roa
Signing time: Mon 01 Jan 2024 04:29:52 +0000
ROA not before: Mon 01 Jan 2024 04:29:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31014
IP address blocks: 193.28.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/a282cd-ee30-49c3-9c9e-471db7eb719e/1/xdXOafzPDGu44rJmfh44-5QPPSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/a282cd-ee30-49c3-9c9e-471db7eb719e/1/xdXOafzPDGu44rJmfh44-5QPPSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/xdXOafzPDGu44rJmfh44-5QPPSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:09:43:c6:fb:cb:3e:fe:a5:b3:d1:3d:c5:1f:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5d5ce69fccf0c6bb8e2b2667e1e38fb940f3d26
Validity
Not Before: Jan 1 04:29:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=118c5300fbf56f67f2f9cdfe6d32a4e09cf93cc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:49:48:41:c1:6f:13:cb:20:54:c5:b3:f8:37:
be:a3:e0:70:e1:1d:90:e7:40:98:53:86:49:65:97:
64:dd:81:78:55:a8:2f:b9:fb:b2:d8:db:bb:14:d9:
cb:ce:cc:e3:5e:94:0c:7a:06:fc:80:c9:9b:9c:9a:
3c:ec:7e:64:de:a2:ac:7e:bf:5f:35:ad:f4:44:82:
14:c8:b2:af:ea:35:d6:ac:fb:3b:6b:48:93:62:58:
0f:ca:b4:2e:ce:0f:a4:4a:84:82:f1:00:6f:4b:18:
c1:92:09:d2:63:2f:f1:62:22:a1:78:f6:72:38:f6:
1a:71:2d:ea:92:0e:c6:24:f8:ef:54:e2:24:eb:db:
23:9b:3c:8d:c1:ea:e8:bd:45:f5:c5:d5:77:0f:86:
bc:a1:68:eb:09:aa:12:76:58:cc:df:bb:e8:cc:fb:
c9:9f:57:07:92:74:5c:1e:a4:9b:e6:79:53:24:64:
0e:8a:e7:18:5a:8f:71:5d:53:30:b3:16:9c:cc:46:
21:d3:72:e0:d9:6a:50:93:37:7b:a7:43:47:a9:ad:
1d:05:d2:bf:83:8e:5e:4c:cc:60:40:74:b0:d4:3c:
bc:c7:43:b8:d6:d2:20:4c:ea:f7:4f:ee:d0:e7:5b:
65:91:51:a6:81:8c:df:1b:b6:1b:fd:0d:be:2e:14:
42:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:8C:53:00:FB:F5:6F:67:F2:F9:CD:FE:6D:32:A4:E0:9C:F9:3C:C2
X509v3 Authority Key Identifier:
keyid:C5:D5:CE:69:FC:CF:0C:6B:B8:E2:B2:66:7E:1E:38:FB:94:0F:3D:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xdXOafzPDGu44rJmfh44-5QPPSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a282cd-ee30-49c3-9c9e-471db7eb719e/1/EYxTAPv1b2fy-c3-bTKk4Jz5PMI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a282cd-ee30-49c3-9c9e-471db7eb719e/1/xdXOafzPDGu44rJmfh44-5QPPSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.28.250.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:49:ff:29:4b:a5:56:10:92:77:00:65:a4:29:a2:17:48:7b:
53:19:2e:0b:15:16:09:02:7a:06:85:9e:a0:22:a1:7d:48:a6:
18:46:6c:6c:d1:5b:44:d9:a0:1a:31:0f:32:82:3b:d1:ab:7a:
c2:b4:64:07:02:94:8d:78:7a:b5:9a:67:d1:40:6a:54:82:70:
0c:8f:62:c7:66:77:74:5a:f7:69:1c:d8:c2:9f:93:ff:49:04:
27:13:11:d8:17:64:d5:4b:c7:3c:c3:1e:cf:b6:9a:fc:b2:d4:
d1:ff:33:f1:92:9f:ba:d3:53:00:56:f5:32:b9:9c:e4:e7:51:
c5:4f:00:39:75:35:26:c7:42:25:75:4e:fb:46:33:2d:47:f7:
8d:29:91:41:ac:83:5e:ef:8c:2d:fa:60:d2:ad:38:b1:ad:c2:
3c:c9:94:65:d2:eb:89:cf:6b:74:ed:79:ff:51:00:7c:22:07:
c1:05:94:ec:bb:2d:6a:c4:d1:dd:34:47:2e:0a:de:a0:95:88:
d8:e3:81:77:0d:aa:a1:75:0b:9d:3a:75:58:35:77:54:1f:42:
0c:97:e5:04:32:8e:db:1c:cf:a1:c4:f3:23:55:23:32:36:06:
3a:4a:65:00:5d:0d:b7:00:cc:ec:ca:4a:a9:f7:5d:b1:d2:8f:
3e:da:b5:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 05:08:51 2024 by rpki-client on console-fra.rpki-client.org