Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/EwMPlBAaHSeXApAMqbSXCTLYO9Q.roa
File: EwMPlBAaHSeXApAMqbSXCTLYO9Q.roa (raw, json)
Hash identifier: o9+Vusv2U4iebEpcLrIPlUYMlaH6mIcGFl0YJSRGboY=
Subject key identifier: 13:03:0F:94:10:1A:1D:27:97:02:90:0C:A9:B4:97:09:32:D8:3B:D4
Certificate issuer: /CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Certificate serial: 018CC7275858A74D0A370DEEA6D372A3DE84
Authority key identifier: 54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/EwMPlBAaHSeXApAMqbSXCTLYO9Q.roa
Signing time: Mon 01 Jan 2024 22:31:33 +0000
ROA not before: Mon 01 Jan 2024 22:31:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213107
IP address blocks: 213.238.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.mft
rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 06:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:58:58:a7:4d:0a:37:0d:ee:a6:d3:72:a3:de:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Validity
Not Before: Jan 1 22:31:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=13030f94101a1d279702900ca9b4970932d83bd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:50:00:b3:66:eb:cb:83:c1:1c:4f:51:b7:3a:
b4:f0:67:87:87:49:5b:dc:55:9c:c5:d8:5c:71:6e:
c3:02:eb:0f:01:22:d8:3f:39:c2:63:0c:b3:3b:cc:
30:bd:d4:3d:29:11:27:c2:7f:74:ae:7f:4c:18:f2:
d9:57:fa:dc:30:8f:0c:ae:6a:14:12:50:a6:15:88:
81:f7:12:29:85:8f:7c:3e:67:71:86:ab:fc:6e:c2:
05:1e:01:13:c3:8c:42:5a:06:5b:3a:2e:f6:fc:0e:
db:a2:3d:2f:ff:a4:02:82:7d:6e:8d:91:27:5e:57:
8c:c7:f4:6f:14:17:ba:39:7e:91:f5:80:3f:1b:b2:
a3:ad:30:b6:ab:59:4e:28:74:6e:95:7a:16:d0:50:
be:34:a1:38:64:df:f7:5a:80:35:7e:ce:de:6b:4d:
80:2b:fd:bc:24:6f:47:28:a8:0d:8b:bd:4e:58:d8:
76:e6:2c:5b:8a:30:1f:a2:af:da:a8:9a:38:4d:5e:
fb:82:9e:1f:78:50:e4:38:62:45:a0:c3:3f:92:5a:
f4:50:95:e0:bf:37:ee:43:37:af:0d:76:83:fe:30:
32:92:2b:a7:53:18:46:95:46:5f:3e:16:57:e9:94:
cf:29:72:91:4c:f8:dd:a0:e8:b2:24:fa:bb:4a:dd:
cc:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:03:0F:94:10:1A:1D:27:97:02:90:0C:A9:B4:97:09:32:D8:3B:D4
X509v3 Authority Key Identifier:
keyid:54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/EwMPlBAaHSeXApAMqbSXCTLYO9Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.238.184.0/24
Signature Algorithm: sha256WithRSAEncryption
84:01:9e:60:1d:b7:3f:1d:87:99:8e:3d:06:52:62:58:20:ab:
d8:15:ca:38:b2:04:ae:65:48:44:5f:ae:29:87:36:e2:0e:d1:
8b:7f:fb:43:41:6c:5f:7d:63:21:09:35:3d:c0:af:2a:4e:62:
36:0a:a2:bd:3e:94:11:5c:19:85:70:d9:2d:9e:dc:9d:4f:87:
75:c4:2f:38:ee:21:2d:83:52:98:b4:1e:7d:de:7f:5c:41:ad:
51:fe:f9:e2:bf:c2:03:f6:a9:30:79:9d:16:b6:53:f1:6d:64:
49:9d:5c:39:ca:f5:b5:06:24:5a:06:f8:5e:6f:ad:f7:85:6b:
e8:2a:46:2a:43:ba:5a:8d:b5:67:d1:91:ec:3b:a1:00:5b:99:
de:31:37:e4:c8:2f:e4:33:3c:cf:35:d1:14:f0:b4:bd:71:df:
48:ef:64:88:6d:31:54:ca:8d:1c:df:a6:42:1d:c4:14:bc:ff:
5c:33:1e:0a:a5:59:b0:8b:99:1e:8c:9b:e5:3d:ad:dd:b5:7a:
65:0a:7c:2a:21:f2:26:47:98:0d:87:5e:1d:34:20:a7:49:29:
66:52:e8:f5:d2:60:df:fe:7d:41:5f:8a:d7:f3:41:f8:2d:97:
5c:21:b0:3f:56:97:94:e2:0b:57:63:01:1d:f6:0a:9d:52:ba:
a5:8c:f5:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:36:16 2024 by rpki-client on console-ams.rpki-client.org