Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/EL0wCguzT1YPUmBOOZWznPK4ik4.roa
File: EL0wCguzT1YPUmBOOZWznPK4ik4.roa (raw, json)
Hash identifier: apH+O6Koenmh0o8YfF1SDR5CsCbp2QSPS8OgtQ3b/NA=
Subject key identifier: 10:BD:30:0A:0B:B3:4F:56:0F:52:60:4E:39:95:B3:9C:F2:B8:8A:4E
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018EA2EBCA1DFC213A4398376ADEB4D88A45
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/EL0wCguzT1YPUmBOOZWznPK4ik4.roa
Signing time: Wed 03 Apr 2024 07:45:45 +0000
ROA not before: Wed 03 Apr 2024 07:45:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 136744
IP address blocks: 84.32.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:a2:eb:ca:1d:fc:21:3a:43:98:37:6a:de:b4:d8:8a:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Apr 3 07:45:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=10bd300a0bb34f560f52604e3995b39cf2b88a4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ee:c0:87:95:1b:1e:f4:c3:9f:8e:62:e7:47:
80:74:11:ad:bb:b8:de:7d:2a:c4:35:51:6c:86:8c:
8a:c6:06:10:a0:db:4b:b6:41:d2:22:69:1c:9e:47:
74:41:eb:91:36:db:b2:92:c6:e9:35:b8:c9:95:3e:
11:72:c6:4c:03:6d:d9:2e:1d:8a:83:b2:47:35:71:
1f:6b:bf:ce:f9:d9:b6:5c:26:57:58:e5:1b:32:1f:
af:cd:f9:94:e5:11:22:06:a1:de:a3:4f:a5:80:0a:
cf:58:f9:6f:58:b7:fc:23:69:47:74:96:00:cd:1e:
d7:37:36:b2:ba:f7:ec:ae:ef:aa:8c:22:fa:63:be:
f6:b6:37:c1:a0:4b:4c:bc:65:33:11:80:2e:af:74:
e2:5a:e3:03:32:5c:b2:3a:cb:4f:8a:a6:72:81:63:
62:ea:97:5d:4b:ea:77:cc:3e:6a:0e:18:9a:b6:d4:
3c:78:92:a5:3d:cd:dc:22:e5:46:7c:a2:13:19:f3:
cc:00:71:7b:ec:a2:9b:33:50:61:b5:71:73:16:32:
4b:26:4e:8b:22:13:81:90:88:3c:3f:f4:fe:00:82:
9f:a8:73:82:52:f3:e6:36:e8:65:6b:43:7b:3c:e7:
cf:22:c1:c9:5e:20:9b:5b:64:bc:3a:80:24:d5:d7:
fe:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:BD:30:0A:0B:B3:4F:56:0F:52:60:4E:39:95:B3:9C:F2:B8:8A:4E
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/EL0wCguzT1YPUmBOOZWznPK4ik4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.66.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:99:ab:64:73:f0:b9:35:c5:07:d4:95:7f:ac:c1:cb:13:90:
7e:e1:60:63:30:a6:7f:62:1d:fc:15:b8:3d:49:3e:02:54:46:
97:27:e9:5b:95:d8:3e:92:7b:b7:fa:7a:23:4e:c0:d5:bf:02:
bc:c0:f6:d3:68:6d:68:c5:38:0c:5f:53:0f:bc:a1:d1:4b:54:
2c:93:d0:64:f1:12:66:fb:69:eb:66:35:9c:d8:d5:a5:c1:94:
12:47:81:61:c4:3b:ed:22:c6:18:d4:30:bb:bd:d7:35:c1:ca:
e3:2e:af:bd:34:52:5b:ff:43:d8:39:fd:b5:e6:a6:61:00:63:
13:0c:72:1c:70:47:86:62:cd:f7:83:2a:f3:67:0f:f9:b1:dd:
13:af:1d:b2:82:44:29:7e:73:19:c4:ee:5f:ec:c6:9e:39:5e:
3b:bc:3d:3a:63:5e:4b:d8:cb:3c:22:62:7d:5f:b0:21:85:cf:
d3:4d:2c:14:69:3b:a6:e2:cb:83:12:2c:9b:94:4a:f6:c3:91:
e9:c2:c7:35:a2:4e:8f:cd:f8:cc:b8:81:92:18:82:9e:b0:c5:
f3:c2:f1:cb:4c:f4:44:5a:de:7b:ee:37:36:0f:68:55:07:24:
26:8e:45:c1:17:e8:80:85:26:7a:25:7b:00:fa:90:42:05:e8:
3a:a4:fd:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 23:34:23 2024 by rpki-client on console-fra.rpki-client.org