Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/461685-073e-41af-9bb6-cf6c305212eb/1/EuLoKUaUe-7E9c6UBiy901mgCJQ.roa
File: EuLoKUaUe-7E9c6UBiy901mgCJQ.roa (raw, json)
Hash identifier: 30nwELRXJPmwmVDnL3AWH2d15f0Yvs0gVtJhOFQeKlM=
Subject key identifier: 12:E2:E8:29:46:94:7B:EE:C4:F5:CE:94:06:2C:BD:D3:59:A0:08:94
Certificate issuer: /CN=b14aba8b60749393478e83c360e6cbd75d156f89
Certificate serial: 018CC348CEB47181ED014EEC3B314D09FE64
Authority key identifier: B1:4A:BA:8B:60:74:93:93:47:8E:83:C3:60:E6:CB:D7:5D:15:6F:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sUq6i2B0k5NHjoPDYObL110Vb4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/461685-073e-41af-9bb6-cf6c305212eb/1/EuLoKUaUe-7E9c6UBiy901mgCJQ.roa
Signing time: Mon 01 Jan 2024 04:29:37 +0000
ROA not before: Mon 01 Jan 2024 04:29:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210020
IP address blocks: 188.124.3.0/24 maxlen: 24
188.124.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/461685-073e-41af-9bb6-cf6c305212eb/1/sUq6i2B0k5NHjoPDYObL110Vb4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/461685-073e-41af-9bb6-cf6c305212eb/1/sUq6i2B0k5NHjoPDYObL110Vb4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/sUq6i2B0k5NHjoPDYObL110Vb4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Jun 2024 04:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:ce:b4:71:81:ed:01:4e:ec:3b:31:4d:09:fe:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b14aba8b60749393478e83c360e6cbd75d156f89
Validity
Not Before: Jan 1 04:29:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=12e2e82946947beec4f5ce94062cbdd359a00894
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:07:6f:4e:b8:b0:7b:39:97:03:9e:d0:b1:06:
da:92:70:9a:cf:f0:4a:8e:74:f9:4c:b7:87:b3:ba:
f4:dd:62:2e:4d:45:77:cc:5a:73:0b:7d:72:f1:57:
e3:b5:5e:1b:78:3b:21:ba:3b:22:88:b9:d0:e1:d2:
76:91:11:80:20:16:9a:dc:5c:6f:0e:ff:d5:7b:ae:
f5:84:86:e6:72:35:dd:93:1e:d3:bf:b7:d9:10:a3:
60:74:a2:64:37:b6:a9:49:9a:fd:1f:5e:34:f9:dc:
d0:c3:80:e0:1a:c3:20:f0:b5:9b:fd:a4:44:3f:00:
ab:3d:b1:ea:9e:8c:88:b3:4d:dc:13:8e:71:30:e0:
92:03:d9:4b:bb:2f:4b:71:21:47:48:88:58:a9:d9:
3b:2b:bf:c6:f7:8b:76:6d:c1:fc:ff:1b:04:ad:22:
a7:33:ba:da:9c:b2:b5:f0:47:b3:d0:18:44:86:fb:
ea:fc:32:c2:9d:50:44:db:ac:bd:d9:f3:43:4a:94:
72:10:fc:ff:4e:2f:8f:09:1e:64:21:cb:a1:7d:d1:
df:0f:d6:d2:80:e8:97:ba:0d:0a:25:5f:ff:ba:cb:
83:c2:4d:5a:12:b5:3b:fe:1b:97:24:f3:da:5f:8e:
56:5e:52:f9:cc:72:91:cf:cf:43:20:1c:13:f7:6b:
ae:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:E2:E8:29:46:94:7B:EE:C4:F5:CE:94:06:2C:BD:D3:59:A0:08:94
X509v3 Authority Key Identifier:
keyid:B1:4A:BA:8B:60:74:93:93:47:8E:83:C3:60:E6:CB:D7:5D:15:6F:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUq6i2B0k5NHjoPDYObL110Vb4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/461685-073e-41af-9bb6-cf6c305212eb/1/EuLoKUaUe-7E9c6UBiy901mgCJQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/461685-073e-41af-9bb6-cf6c305212eb/1/sUq6i2B0k5NHjoPDYObL110Vb4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.124.3.0/24
188.124.5.0/24
Signature Algorithm: sha256WithRSAEncryption
80:a3:d4:1a:6c:7e:f1:88:03:c8:af:1a:13:a3:cc:aa:7d:13:
72:f7:25:48:63:ef:5f:e1:b4:8b:b5:38:56:46:3d:45:ac:4b:
2a:5c:c5:ee:c5:d8:18:9f:5f:ae:a3:86:4f:a5:b0:37:d4:db:
7c:51:3d:38:0d:5b:87:72:31:bb:5e:51:69:ea:12:19:24:cd:
90:ba:0c:90:98:ce:26:c9:8e:03:f3:27:21:07:e3:cc:6e:71:
bc:82:4a:ad:e8:36:df:46:54:46:3f:f8:2f:9d:95:26:30:b3:
30:24:7d:9c:36:6e:ba:da:a5:ef:02:fe:df:c7:14:b3:47:6a:
1a:62:43:ec:87:07:44:d7:ea:59:61:a5:fe:d5:75:a8:85:2b:
c7:88:6c:68:45:c0:ea:c6:37:3e:9f:92:a2:ea:94:92:bd:86:
dc:53:cf:d6:59:cd:97:00:5f:f9:6c:e4:68:ba:90:1e:c7:ef:
28:55:24:8e:b5:0c:04:39:09:57:8a:1c:df:d8:25:06:76:3c:
87:94:2f:df:ab:cc:e8:3a:6f:88:7b:ad:39:fb:05:23:c5:66:
f0:8c:9f:ff:c8:99:26:a1:38:da:1c:95:14:de:6a:ee:b4:62:
d0:c6:92:9f:54:b6:39:65:21:da:5d:ae:e1:e8:be:84:f3:fd:
1e:4e:dd:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 09:28:39 2024 by rpki-client on console-fra.rpki-client.org