Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/3bfd0a-017f-481f-b676-bc36feeb90b3/1/EVZLg6BnzUgnNZdgpmlIMA9GF3o.roa
File: EVZLg6BnzUgnNZdgpmlIMA9GF3o.roa (raw, json)
Hash identifier: 8kyRh098i1I61V3Aw1r/ja6BlssTov2/wsOFOTfXc4U=
Subject key identifier: 11:56:4B:83:A0:67:CD:48:27:35:97:60:A6:69:48:30:0F:46:17:7A
Certificate issuer: /CN=3d2188ad597b58aaa597003f8f0843496c6c7c93
Certificate serial: 018CCA98FD0011A5F1A5DE9D09832856B0C8
Authority key identifier: 3D:21:88:AD:59:7B:58:AA:A5:97:00:3F:8F:08:43:49:6C:6C:7C:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PSGIrVl7WKqllwA_jwhDSWxsfJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/3bfd0a-017f-481f-b676-bc36feeb90b3/1/EVZLg6BnzUgnNZdgpmlIMA9GF3o.roa
Signing time: Tue 02 Jan 2024 14:34:33 +0000
ROA not before: Tue 02 Jan 2024 14:34:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 33850
IP address blocks: 194.6.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/3bfd0a-017f-481f-b676-bc36feeb90b3/1/PSGIrVl7WKqllwA_jwhDSWxsfJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/3bfd0a-017f-481f-b676-bc36feeb90b3/1/PSGIrVl7WKqllwA_jwhDSWxsfJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/PSGIrVl7WKqllwA_jwhDSWxsfJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 07:02:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:98:fd:00:11:a5:f1:a5:de:9d:09:83:28:56:b0:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d2188ad597b58aaa597003f8f0843496c6c7c93
Validity
Not Before: Jan 2 14:34:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=11564b83a067cd4827359760a66948300f46177a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:7e:2a:91:3e:a1:b1:01:f6:75:d9:20:6d:dc:
20:bb:50:00:eb:75:ed:81:1f:d5:38:29:e6:be:ea:
4a:47:83:65:a5:5c:67:0e:bd:cc:78:09:41:2a:ea:
c7:68:30:7d:24:47:df:73:b1:61:17:09:d6:1d:2a:
56:9b:12:f3:98:c8:9a:17:55:4b:7b:f6:10:e3:d7:
74:e2:6e:8e:0a:c7:c6:73:a1:ba:72:51:77:20:9d:
ca:d9:bc:d0:c6:5c:45:2b:29:cf:48:89:ac:a0:14:
d4:4d:c5:8e:aa:1d:e7:3f:35:2d:81:c5:fe:e9:24:
18:93:a5:17:21:46:ac:90:c1:ef:0b:82:4e:48:6f:
12:5d:21:a7:f8:00:23:cb:29:76:86:bd:40:f8:f6:
6c:4d:b1:ec:dd:b5:86:7a:09:19:59:b9:41:c4:b2:
08:2d:ff:3a:04:8a:da:e7:27:3b:fa:73:e9:1d:a3:
56:61:64:88:51:ad:9a:3c:7b:f7:80:7a:0a:8d:1c:
db:e5:cf:96:70:ea:e5:5d:cd:12:88:ac:38:f2:72:
78:2e:1e:14:79:de:18:2d:2c:ca:82:a7:6d:2f:46:
f0:5f:ec:e0:03:3d:ee:06:68:7c:10:a8:6b:06:75:
23:37:2b:fa:52:a3:db:05:d7:96:c9:ef:7a:dd:cb:
2c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:56:4B:83:A0:67:CD:48:27:35:97:60:A6:69:48:30:0F:46:17:7A
X509v3 Authority Key Identifier:
keyid:3D:21:88:AD:59:7B:58:AA:A5:97:00:3F:8F:08:43:49:6C:6C:7C:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PSGIrVl7WKqllwA_jwhDSWxsfJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3bfd0a-017f-481f-b676-bc36feeb90b3/1/EVZLg6BnzUgnNZdgpmlIMA9GF3o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3bfd0a-017f-481f-b676-bc36feeb90b3/1/PSGIrVl7WKqllwA_jwhDSWxsfJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.6.237.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:fb:49:b8:b7:45:ae:03:6c:57:20:a8:2e:1e:51:fc:b3:7d:
b4:d1:e9:39:7f:f7:3b:13:9b:70:78:9a:f1:ce:54:87:4c:c1:
dc:1e:7d:eb:cc:25:fe:3e:74:a8:b4:c0:76:71:55:97:e5:e0:
0c:1a:3f:f5:3c:fb:a9:af:d3:25:e1:6d:ef:88:d7:dc:c3:cf:
b3:93:ed:23:75:c9:81:3b:7a:3e:c1:dc:58:ac:34:bf:af:ec:
8e:6e:dc:e4:f4:cb:2c:88:12:46:2e:ac:e5:fd:e5:bb:64:12:
a9:8e:14:12:12:a0:e9:10:bd:3f:9b:f7:49:97:9e:60:ce:72:
8f:ef:bd:d4:52:46:da:52:7a:a7:3d:13:80:53:89:e2:0a:1e:
46:3f:b4:4e:94:42:43:99:09:05:09:58:58:05:a8:eb:a1:11:
c0:7f:d6:b5:e3:64:71:18:5e:d6:6a:4d:e9:13:27:72:fe:fd:
38:7f:27:76:2d:d9:15:96:d3:80:0c:c4:d6:2f:d3:a9:61:f0:
79:b3:f5:b3:2e:a0:cd:24:a4:09:ce:13:18:c6:d4:e2:25:e1:
99:c7:53:7f:f5:a6:07:5c:1d:c7:03:7f:59:bb:5a:87:c4:c4:
1c:1d:61:eb:8f:83:58:c1:4c:f2:5a:40:e3:f5:96:ac:95:bf:
0d:e5:bd:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 15:56:33 2024 by rpki-client on console-fra.rpki-client.org