Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/EhI7qHrem-H8Q_VFcuVEoTvXO5g.roa
File: EhI7qHrem-H8Q_VFcuVEoTvXO5g.roa (raw, json)
Hash identifier: RhWBkr2g6nzIwFCs27fscImMIFNjTNoprD3W3we6588=
Subject key identifier: 12:12:3B:A8:7A:DE:9B:E1:FC:43:F5:45:72:E5:44:A1:3B:D7:3B:98
Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Certificate serial: 018CC94DB40C9ED2CA66519C5EC5840FAC2F
Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/EhI7qHrem-H8Q_VFcuVEoTvXO5g.roa
Signing time: Tue 02 Jan 2024 08:32:41 +0000
ROA not before: Tue 02 Jan 2024 08:32:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202658
IP address blocks: 88.148.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 May 2024 05:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:b4:0c:9e:d2:ca:66:51:9c:5e:c5:84:0f:ac:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Validity
Not Before: Jan 2 08:32:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=12123ba87ade9be1fc43f54572e544a13bd73b98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:cc:2b:06:69:32:a8:63:db:9b:55:43:d2:8c:
1b:98:04:ab:0d:7d:05:2d:0b:f8:57:b3:28:b7:74:
0d:88:37:00:6a:1d:3c:24:63:5d:52:0d:c5:bc:07:
61:d6:98:1b:69:c1:13:e3:1d:d1:b4:07:3f:78:1e:
df:84:21:96:90:c5:c6:f1:93:2e:8a:48:14:f8:1e:
18:aa:63:c0:b0:15:fc:32:53:89:4b:c6:43:42:a6:
59:f6:90:72:2f:97:e4:0f:0b:e0:48:c4:08:91:78:
c8:8b:d8:bc:c8:43:ad:80:3d:ef:57:ca:cc:87:6b:
fa:8c:e3:f1:30:a8:da:ce:80:4b:f1:34:17:c0:8e:
aa:73:17:4f:3a:5a:77:bd:46:85:36:8a:d8:83:15:
f1:57:d0:e0:05:9b:52:f1:f3:ce:26:11:d3:28:75:
4e:25:ea:e1:2c:fc:f6:ca:f2:12:46:3d:d8:0e:90:
d7:78:7c:ae:27:ae:75:96:9a:e2:a4:aa:b6:8c:77:
2d:26:37:31:53:1d:ff:83:0a:23:3e:5f:74:70:e2:
81:b4:4f:16:c9:69:70:75:af:1c:b4:90:2c:55:0a:
fd:bc:f9:de:a6:fb:4e:5f:19:23:a0:49:4e:ea:d0:
ec:7c:e0:66:2d:78:d1:d8:94:4d:c2:c7:ba:d3:be:
f2:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:12:3B:A8:7A:DE:9B:E1:FC:43:F5:45:72:E5:44:A1:3B:D7:3B:98
X509v3 Authority Key Identifier:
keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/EhI7qHrem-H8Q_VFcuVEoTvXO5g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.148.49.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:25:02:a9:cd:d9:c9:ee:da:19:ba:bf:ed:53:82:ca:81:69:
1e:5b:b8:fc:5a:a5:cc:f1:45:10:df:30:a6:0d:12:ab:bb:7d:
48:0c:3e:38:fa:d2:7a:38:80:a5:bc:ea:cc:ec:3e:5b:da:2e:
a2:9d:61:fd:c9:30:bf:27:3a:5e:fe:ce:6f:73:5d:7d:0d:ea:
74:51:c2:0c:5d:30:90:21:ee:bc:1e:d6:ef:51:dc:6d:a0:e4:
07:95:42:cb:40:d1:55:25:e5:b8:3c:79:b9:43:28:54:5c:e1:
22:a3:cf:d2:b0:c0:9f:92:71:ae:17:10:0e:c0:8a:1e:67:b3:
81:7a:37:54:f2:62:39:ec:3d:0b:e0:dc:d5:39:ed:dc:a7:c2:
f0:a6:b1:e1:19:0d:cd:c1:2b:27:89:14:a9:b7:c1:3c:4e:ec:
eb:d2:e1:63:85:15:21:fd:df:23:3e:90:e4:a0:cc:b0:4e:12:
b0:63:bd:bc:8a:b2:e4:2f:5f:23:54:8d:90:31:64:69:38:f8:
20:3f:d3:25:e3:fb:11:8f:02:73:ed:7d:e6:7d:48:8a:96:a4:
bd:94:3c:c6:85:f2:ee:a9:25:f2:a5:9f:c9:b5:3e:a1:5f:5f:
2d:37:1e:6e:b0:d5:88:62:28:88:ce:b0:77:fa:80:75:87:7c:
4b:1d:81:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 10:39:25 2024 by rpki-client on console-ams.rpki-client.org