Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/ekVBYcoyWGP2mYKG79r3xstZwCI.roa
File: ekVBYcoyWGP2mYKG79r3xstZwCI.roa (raw, json)
Hash identifier: 0XJiklsfTMErNwOgZacNkAFgiR/yYJlQiXDaW7wofos=
Subject key identifier: 7A:45:41:61:CA:32:58:63:F6:99:82:86:EF:DA:F7:C6:CB:59:C0:22
Certificate issuer: /CN=27a39e4794c34612e7f22569b1a6a81710260ae5
Certificate serial: 018CC794576BB70C446AADD4F33A426D6454
Authority key identifier: 27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/ekVBYcoyWGP2mYKG79r3xstZwCI.roa
Signing time: Tue 02 Jan 2024 00:30:36 +0000
ROA not before: Tue 02 Jan 2024 00:30:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202798
IP address blocks: 2.189.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.mft
rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 22:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:57:6b:b7:0c:44:6a:ad:d4:f3:3a:42:6d:64:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27a39e4794c34612e7f22569b1a6a81710260ae5
Validity
Not Before: Jan 2 00:30:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7a454161ca325863f6998286efdaf7c6cb59c022
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:c2:ef:fe:2b:91:e4:94:f0:74:0c:99:a6:2f:
7c:81:4c:4a:0f:52:ce:d4:60:9e:d6:05:7a:8a:9c:
a4:51:35:8b:0e:ec:d2:5d:91:e9:10:30:4b:e2:53:
40:0c:3a:86:e3:9c:95:9d:5c:1f:6a:7c:cf:ea:a0:
b3:8e:85:30:92:89:b3:d7:fb:b1:0f:21:7c:97:fc:
da:6b:9b:4e:99:10:46:0d:2b:1a:8d:f1:eb:df:eb:
73:bc:53:e7:7d:95:e0:e0:d1:b0:4c:7d:0f:29:8d:
5d:3b:b8:ed:a8:4b:4a:cb:2e:78:b2:5a:2d:36:13:
c9:45:f5:a4:fe:eb:a2:41:14:30:0d:32:23:7c:6f:
fe:95:d6:e9:89:a7:92:4a:6a:f9:b5:bc:19:67:27:
d2:0f:c3:b5:95:49:27:97:6a:d4:2a:05:3f:8b:41:
14:d1:7d:dd:b9:77:e1:41:d6:bc:90:8f:77:56:b4:
f3:ed:3f:bd:ac:fa:d1:e6:34:99:2e:a3:f3:91:ea:
a7:f5:fe:6e:a8:75:33:e3:fe:91:f0:76:3b:e5:81:
24:37:82:85:e9:08:3c:ee:b4:72:df:ff:85:51:eb:
b5:6f:a7:ea:90:26:30:3d:df:e2:8b:02:59:41:dc:
5b:12:bc:77:8e:fb:c8:95:0c:66:0c:cc:19:9c:53:
44:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:45:41:61:CA:32:58:63:F6:99:82:86:EF:DA:F7:C6:CB:59:C0:22
X509v3 Authority Key Identifier:
keyid:27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/ekVBYcoyWGP2mYKG79r3xstZwCI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.189.58.0/24
Signature Algorithm: sha256WithRSAEncryption
84:83:d1:34:7a:c1:bd:24:58:fd:5d:10:28:a7:cc:4d:db:2e:
aa:84:9f:82:d3:6e:99:81:98:c8:83:73:0d:4f:66:3d:6f:7c:
e4:f5:63:b3:43:eb:2f:7a:25:3b:6f:38:6f:92:e7:c8:9b:a4:
b6:77:8b:c8:2a:26:0c:06:49:62:f5:92:ad:e4:d2:59:83:d3:
e0:41:e9:7b:77:58:bd:b2:ea:eb:8a:b3:63:ad:c6:b3:88:63:
ec:89:f9:a5:37:12:2c:0e:f4:11:d4:8b:07:49:f8:0c:71:4a:
7d:18:99:1c:1b:8a:18:f6:a8:d9:31:b5:26:cf:64:d8:53:3a:
f1:dc:f9:0b:c1:96:08:ac:a7:56:b1:f7:a2:6f:00:b5:99:e0:
27:0a:e5:ab:f2:2b:3c:9b:b4:84:8a:de:33:76:1f:ca:fc:20:
d2:2c:d8:fa:37:78:2d:77:56:38:8e:c7:88:f0:bb:39:03:0a:
7d:7e:6e:5d:49:ae:f1:1c:f4:d8:52:c3:54:b8:2e:e3:b4:44:
71:76:d4:9c:4c:b3:ea:aa:8f:8b:68:2a:bf:3a:79:10:35:cb:
89:10:57:65:35:77:34:29:45:e7:52:46:9a:31:d2:a4:81:05:
2b:d6:94:b4:32:8c:ba:4e:05:eb:96:55:e9:8e:df:73:be:43:
c6:da:b6:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 03:11:15 2024 by rpki-client on console-ams.rpki-client.org