Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/38b511-7547-4a48-8baf-7764584670fd/1/EWnRDYAWcWOaglL_UD4twA5U_nA.roa
File: EWnRDYAWcWOaglL_UD4twA5U_nA.roa (raw, json)
Hash identifier: AoeAcCuI8bSS7OcehoDzQjQEfm8b5bDRnAtQOAg1Tek=
Subject key identifier: 11:69:D1:0D:80:16:71:63:9A:82:52:FF:50:3E:2D:C0:0E:54:FE:70
Certificate issuer: /CN=c2bf81ab950a18034630c25830749e650eb4e634
Certificate serial: 018DD564ACDE3DB836532BB60E1A1A80D3EE
Authority key identifier: C2:BF:81:AB:95:0A:18:03:46:30:C2:58:30:74:9E:65:0E:B4:E6:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wr-Bq5UKGANGMMJYMHSeZQ605jQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/38b511-7547-4a48-8baf-7764584670fd/1/EWnRDYAWcWOaglL_UD4twA5U_nA.roa
Signing time: Fri 23 Feb 2024 09:56:01 +0000
ROA not before: Fri 23 Feb 2024 09:56:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50623
IP address blocks: 195.191.154.0/24 maxlen: 24
195.191.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/38b511-7547-4a48-8baf-7764584670fd/1/wr-Bq5UKGANGMMJYMHSeZQ605jQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/38b511-7547-4a48-8baf-7764584670fd/1/wr-Bq5UKGANGMMJYMHSeZQ605jQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/wr-Bq5UKGANGMMJYMHSeZQ605jQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:d5:64:ac:de:3d:b8:36:53:2b:b6:0e:1a:1a:80:d3:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2bf81ab950a18034630c25830749e650eb4e634
Validity
Not Before: Feb 23 09:56:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1169d10d801671639a8252ff503e2dc00e54fe70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a0:18:d1:14:68:69:f5:2d:e8:1f:29:ff:c0:
7e:6a:ef:64:96:43:8b:0c:82:49:33:af:f3:ef:b0:
28:31:29:8f:4e:b6:df:19:40:d9:b0:43:fb:02:9f:
d3:0e:38:78:4e:53:02:6d:df:fc:de:f1:25:b5:56:
6e:f9:8d:f1:ba:0b:ae:db:9f:ab:cd:90:25:a4:fd:
9e:b9:6c:9f:93:7b:f6:50:fb:1e:7f:5f:b4:21:1e:
de:24:84:cb:58:09:d2:2c:48:73:c6:a0:a9:70:7c:
bc:21:83:6e:20:9c:ec:50:e5:06:7f:87:0d:ae:ce:
9f:74:85:35:05:0e:e7:ba:08:5b:6e:e7:10:f4:d8:
a0:e7:14:85:97:0f:e4:b5:83:7f:c8:7e:9d:96:fe:
56:fb:94:a3:fa:d9:0a:e3:be:c0:0a:65:58:e8:90:
90:84:fa:4a:07:b3:db:e1:58:28:cd:02:6b:68:c6:
83:aa:f3:56:97:83:75:36:09:f8:fb:57:69:e3:95:
29:b7:c7:24:42:f5:fb:07:ee:43:1f:f5:16:12:38:
6f:50:a5:1d:d8:58:6f:36:84:03:92:e3:37:cb:6b:
30:68:7c:1d:b2:5b:1d:3d:0e:ed:63:6a:0d:45:7d:
6b:a6:80:10:b0:d5:16:91:c9:12:2c:6c:43:6e:d3:
bc:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:69:D1:0D:80:16:71:63:9A:82:52:FF:50:3E:2D:C0:0E:54:FE:70
X509v3 Authority Key Identifier:
keyid:C2:BF:81:AB:95:0A:18:03:46:30:C2:58:30:74:9E:65:0E:B4:E6:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wr-Bq5UKGANGMMJYMHSeZQ605jQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/38b511-7547-4a48-8baf-7764584670fd/1/EWnRDYAWcWOaglL_UD4twA5U_nA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/38b511-7547-4a48-8baf-7764584670fd/1/wr-Bq5UKGANGMMJYMHSeZQ605jQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.191.154.0/23
Signature Algorithm: sha256WithRSAEncryption
58:73:e8:28:c2:15:4d:b2:5c:1e:87:31:0d:fb:c9:13:26:34:
56:8d:22:02:b8:72:04:c2:bb:80:70:a0:00:41:d1:7f:6c:97:
84:44:a0:6d:28:e4:57:ec:0f:3b:32:07:fd:51:89:b0:d1:04:
c8:62:96:f9:44:2a:7f:74:dd:e4:d5:47:6b:0f:66:eb:d2:82:
41:4c:82:94:b8:17:c0:19:cc:4f:ca:c0:7c:a3:33:06:1a:c2:
77:52:84:c8:dc:a9:87:3e:70:96:c0:3c:19:8e:76:10:f8:7f:
7c:7b:35:0b:9f:6d:75:e3:29:94:a5:17:e3:95:71:ae:35:fc:
ad:b2:3d:86:b4:aa:1a:c4:05:50:ef:4a:4c:89:4b:11:01:a0:
c3:a0:23:5a:9a:f3:5b:28:58:5a:f4:f6:f4:61:cd:01:f4:b9:
af:56:d3:99:8c:1b:32:71:18:2c:98:03:55:c7:f4:45:3e:99:
b3:e4:ec:2f:88:f2:64:49:45:1c:8d:20:04:c8:28:12:20:85:
b2:9d:ed:c1:c8:0d:e7:71:b8:c1:53:eb:c1:ae:15:71:68:e4:
1f:41:c2:d1:04:92:33:03:dd:1e:f7:6d:28:88:71:54:c2:d8:
81:9e:2d:86:8d:71:e7:a6:61:49:b4:26:32:d3:c9:69:d3:41:
b2:07:70:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 06:42:52 2024 by rpki-client on console-fra.rpki-client.org