Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/EFFaIhzDhcQcETL5Ql036yJBmcE.roa
File: EFFaIhzDhcQcETL5Ql036yJBmcE.roa (raw, json)
Hash identifier: ibFwf0nc3z4r9TT+hDeMHXslH3bPhHx9etPMUwYwGoU=
Subject key identifier: 10:51:5A:22:1C:C3:85:C4:1C:11:32:F9:42:5D:37:EB:22:41:99:C1
Certificate issuer: /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Certificate serial: 018CC64ADBE5EDA93E0547EA967E20DC8804
Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/EFFaIhzDhcQcETL5Ql036yJBmcE.roa
Signing time: Mon 01 Jan 2024 18:30:43 +0000
ROA not before: Mon 01 Jan 2024 18:30:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204300
IP address blocks: 94.131.28.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Jun 2024 09:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:db:e5:ed:a9:3e:05:47:ea:96:7e:20:dc:88:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Validity
Not Before: Jan 1 18:30:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=10515a221cc385c41c1132f9425d37eb224199c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:56:62:63:8d:9a:5d:d1:a9:20:e9:d4:75:9b:
1c:68:6e:e9:f9:31:6b:08:6c:a5:ae:03:68:d9:e2:
45:e3:b3:3f:54:f5:06:6c:cb:9e:d9:c0:a9:aa:59:
40:66:8a:21:ac:2e:4a:d7:27:94:fe:21:dd:68:07:
3b:73:00:c8:4e:d7:62:d2:ba:4a:41:5e:8d:8d:08:
d8:04:f7:b0:d5:6f:3a:30:44:99:ed:24:c2:7b:b9:
28:71:98:ac:79:67:f7:cd:fa:67:be:6f:52:c8:1a:
f9:41:43:ab:34:53:d8:09:5b:b6:36:61:9c:a4:43:
ae:86:33:51:c9:a5:a5:19:b0:d4:4b:bd:ca:f4:55:
73:bf:31:c6:f0:34:a2:5e:2a:ff:04:32:37:95:6e:
2b:a0:dc:dd:14:fc:e1:d9:b1:34:60:a6:e5:7a:fd:
5b:e4:c2:7f:f1:25:c5:6e:ba:7a:b5:0b:33:28:df:
33:c7:d9:e4:79:57:46:0d:72:08:c0:c5:3e:00:c7:
ef:ff:e5:9b:48:33:11:83:b3:fb:80:73:e1:97:d0:
71:77:a5:99:0a:d3:7e:bb:26:53:b5:65:2c:96:c1:
15:05:7b:a7:30:8d:87:e2:68:95:cd:3b:90:f8:09:
b0:1f:f3:d2:4b:f7:18:49:ad:3f:24:71:9d:ab:08:
28:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:51:5A:22:1C:C3:85:C4:1C:11:32:F9:42:5D:37:EB:22:41:99:C1
X509v3 Authority Key Identifier:
keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/EFFaIhzDhcQcETL5Ql036yJBmcE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.131.28.0/22
Signature Algorithm: sha256WithRSAEncryption
31:f4:23:71:74:7d:83:54:5d:bd:4a:01:bd:2a:e5:10:9e:89:
d7:ae:46:7f:0f:24:7a:59:aa:49:9b:cf:6e:08:87:bc:a5:cc:
cc:22:25:7d:8a:c6:b6:97:9e:1e:33:f0:90:a0:3e:31:5d:f0:
c6:b1:01:5d:97:57:a8:f7:d2:f3:64:54:d2:4f:73:72:84:9a:
c1:13:1b:c6:4d:b9:32:19:5b:a2:bb:a3:45:73:a0:7a:70:95:
2e:90:7a:88:ef:8d:4f:c5:b5:50:0e:c2:75:fa:97:aa:69:c4:
b9:e2:98:6f:72:c0:84:a7:09:d5:67:77:ef:df:7b:23:a5:3f:
bf:af:c9:ee:95:39:4a:11:1d:c2:94:77:43:fd:cc:67:a0:d7:
23:60:dd:7b:cd:d8:34:ab:98:14:01:30:40:6c:ec:4d:a3:cc:
cc:b5:86:e9:1d:8c:a9:66:31:07:37:37:3e:08:c1:a3:72:4f:
3e:4f:e1:db:1a:2e:ab:fa:12:ab:2a:a3:18:94:e7:90:c4:7f:
b6:c8:e4:10:75:96:9d:b3:2e:b9:1a:08:31:2a:d1:62:12:1e:
1e:8a:42:a3:83:65:38:0d:50:02:d1:56:e3:14:6f:6c:fb:02:
0d:70:dc:37:b1:32:42:d8:a0:b6:54:b9:c8:ec:38:6c:6c:64:
02:50:eb:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 14 16:01:31 2024 by rpki-client on console-ams.rpki-client.org