Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/23190c-e1a0-4ba4-b1d8-a102be382e51/1/EtYjpNM9xB7C3f6Z32CJHKOjF2g.roa
File: EtYjpNM9xB7C3f6Z32CJHKOjF2g.roa (raw, json)
Hash identifier: ba9b+RfGL6yqU3J4RyY8W8itCwyAmII4TmxXR2TTLjc=
Subject key identifier: 12:D6:23:A4:D3:3D:C4:1E:C2:DD:FE:99:DF:60:89:1C:A3:A3:17:68
Certificate issuer: /CN=ef7fd5d33061a9de920af1c2a13513d46dd24612
Certificate serial: 018CC49345DF2BFC9FA4BE0672FFB6B3AD1C
Authority key identifier: EF:7F:D5:D3:30:61:A9:DE:92:0A:F1:C2:A1:35:13:D4:6D:D2:46:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/73_V0zBhqd6SCvHCoTUT1G3SRhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/23190c-e1a0-4ba4-b1d8-a102be382e51/1/EtYjpNM9xB7C3f6Z32CJHKOjF2g.roa
Signing time: Mon 01 Jan 2024 10:30:35 +0000
ROA not before: Mon 01 Jan 2024 10:30:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9230
IP address blocks: 193.32.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/23190c-e1a0-4ba4-b1d8-a102be382e51/1/73_V0zBhqd6SCvHCoTUT1G3SRhI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/23190c-e1a0-4ba4-b1d8-a102be382e51/1/73_V0zBhqd6SCvHCoTUT1G3SRhI.mft
rsync://rpki.ripe.net/repository/DEFAULT/73_V0zBhqd6SCvHCoTUT1G3SRhI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 11 Jun 2024 14:33:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:45:df:2b:fc:9f:a4:be:06:72:ff:b6:b3:ad:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef7fd5d33061a9de920af1c2a13513d46dd24612
Validity
Not Before: Jan 1 10:30:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=12d623a4d33dc41ec2ddfe99df60891ca3a31768
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:2d:db:2d:4c:0b:37:0c:21:30:d2:8b:e5:a8:
4d:1e:93:6e:51:d5:6a:62:93:03:85:1d:d1:6c:44:
71:f5:8f:8e:ba:ab:47:e8:e3:18:77:e2:06:67:bf:
59:e5:0d:3f:0d:8a:5b:51:a1:c9:35:72:4e:0d:80:
24:8e:4e:cf:c9:97:d4:df:f5:f8:df:d6:83:db:b8:
59:28:41:02:56:9c:e0:3e:ab:3a:9f:41:2b:62:db:
f8:f0:d7:b7:f2:ff:2c:34:fa:9c:57:d6:ee:be:05:
a9:43:ed:f5:35:18:9a:c9:71:06:6c:db:4a:d5:3d:
c8:14:a9:a5:58:f7:c8:5a:91:8d:5a:3d:20:dc:67:
83:b1:63:64:f3:9a:d8:88:1e:a6:ca:fd:ef:94:06:
91:0d:9c:8a:fa:fd:6f:51:bc:0c:ea:c8:95:e3:4c:
47:4d:56:40:e0:16:f8:c9:7f:6c:1d:37:32:62:ae:
d6:f2:bc:47:a4:a8:38:df:e6:d6:58:2f:4e:69:3c:
5b:3d:34:1a:b6:7d:79:8f:7d:75:80:8b:ed:17:77:
13:45:75:16:6b:ef:d4:cf:ab:45:63:1f:ff:9d:8e:
60:73:3e:6c:da:e1:79:a5:b3:cf:45:ad:e9:39:e5:
55:65:00:04:ad:74:74:92:dc:23:d4:5b:6b:fd:f8:
74:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:D6:23:A4:D3:3D:C4:1E:C2:DD:FE:99:DF:60:89:1C:A3:A3:17:68
X509v3 Authority Key Identifier:
keyid:EF:7F:D5:D3:30:61:A9:DE:92:0A:F1:C2:A1:35:13:D4:6D:D2:46:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/73_V0zBhqd6SCvHCoTUT1G3SRhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/23190c-e1a0-4ba4-b1d8-a102be382e51/1/EtYjpNM9xB7C3f6Z32CJHKOjF2g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/23190c-e1a0-4ba4-b1d8-a102be382e51/1/73_V0zBhqd6SCvHCoTUT1G3SRhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.32.244.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:35:c0:ac:4c:86:52:b6:12:10:98:e9:40:c1:81:5e:48:76:
fc:67:24:2d:4d:c8:72:5d:c0:f8:b9:a1:36:bf:3c:29:5b:66:
30:b4:b5:57:4e:67:ae:e7:75:bd:a9:1f:82:29:82:ec:bc:67:
ad:3b:da:05:c3:a9:f4:bf:27:98:ae:4a:08:d5:53:85:87:57:
ef:5f:68:22:d3:3b:72:fe:45:22:3b:49:75:72:6a:5c:ef:dd:
a6:b8:63:45:87:8e:d9:45:0a:70:d6:be:12:bf:62:87:1e:fa:
41:a9:c9:85:d4:0b:c2:a9:d4:e4:6e:bd:9d:1d:a8:4f:8b:4c:
75:0d:1e:f4:55:2f:ba:91:20:5a:42:c7:3f:b7:39:89:df:9a:
64:7b:40:5b:09:9b:d7:22:72:31:f2:46:cb:fe:f2:36:3f:34:
06:cb:a5:ee:a7:84:a1:7d:8b:b4:ed:c3:ed:79:ec:40:f4:15:
22:d5:11:d6:8b:76:c1:89:d4:2e:89:98:8b:3c:a7:1f:b7:54:
39:09:5d:7d:44:b3:f7:f3:b2:a9:72:0a:68:94:27:de:df:12:
07:3a:8e:02:16:10:2d:67:c0:ad:d4:89:40:83:4b:d9:13:37:
f9:4d:93:e3:ff:57:9f:39:1a:bf:d5:b9:21:33:40:f2:e4:0c:
a2:f2:b6:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 10 22:23:20 2024 by rpki-client on console-ams.rpki-client.org