Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/EcV_GEq-FOdD3cFomWcewCQdLg4.roa
File: EcV_GEq-FOdD3cFomWcewCQdLg4.roa (raw, json)
Hash identifier: xRCRxIGnvc1fCsnQzVq0OaGuGSD6a4V5hsKcYy4FzjU=
Subject key identifier: 11:C5:7F:18:4A:BE:14:E7:43:DD:C1:68:99:67:1E:C0:24:1D:2E:0E
Certificate issuer: /CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257
Certificate serial: 018CC72742CB1F86B3E8A0BC7B96052EB979
Authority key identifier: E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/EcV_GEq-FOdD3cFomWcewCQdLg4.roa
Signing time: Mon 01 Jan 2024 22:31:28 +0000
ROA not before: Mon 01 Jan 2024 22:31:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12184
IP address blocks: 94.31.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 11:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:42:cb:1f:86:b3:e8:a0:bc:7b:96:05:2e:b9:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257
Validity
Not Before: Jan 1 22:31:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=11c57f184abe14e743ddc16899671ec0241d2e0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:4f:f2:41:89:c5:1a:fc:ba:06:cf:1c:08:40:
05:a8:80:48:44:e6:b2:4e:75:ee:42:d6:99:d2:e0:
51:ba:2a:26:dc:a4:b6:8b:32:5f:52:2c:1b:fa:35:
0f:35:e6:06:c1:4f:52:a5:11:f2:8e:cd:e6:81:aa:
28:dc:dd:80:18:5e:51:a6:ac:1d:9d:e7:b9:44:bb:
a6:8f:d9:49:44:a0:ff:6d:d1:d4:98:1d:c4:4f:0e:
ae:18:cc:af:fb:0d:14:8a:23:27:59:ca:d2:db:a3:
40:71:19:d7:bb:f9:4d:15:5c:1c:ea:b8:e3:07:56:
7e:4c:36:59:b5:6b:60:98:07:57:e5:55:5b:24:80:
16:93:1b:d8:81:54:09:31:b7:cd:be:91:8a:02:ed:
7c:93:b5:c5:48:57:34:1d:5f:07:e0:a8:ac:c1:7b:
23:42:40:33:fd:72:48:69:e6:8e:27:05:bf:46:26:
b3:8e:7d:34:a3:0f:16:90:b0:b3:2b:38:8e:6e:ca:
27:30:cd:a6:e9:e6:df:6d:89:07:9b:ea:50:3b:3e:
ca:41:cc:81:c2:bc:d6:a7:2c:e3:98:6e:fc:bd:a5:
7a:07:77:ee:26:8a:3d:e3:d7:4d:e0:cd:97:11:a4:
b2:c9:ed:90:2e:bd:24:7c:ce:af:3c:10:e0:20:06:
af:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:C5:7F:18:4A:BE:14:E7:43:DD:C1:68:99:67:1E:C0:24:1D:2E:0E
X509v3 Authority Key Identifier:
keyid:E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/EcV_GEq-FOdD3cFomWcewCQdLg4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.31.8.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:69:68:c3:2c:55:7c:24:40:62:1a:84:fe:9d:53:23:19:95:
18:ce:b3:25:db:2d:4d:39:ac:47:4c:b6:ac:31:7e:85:02:09:
ce:40:bc:b0:ec:b8:a3:e7:e7:77:e5:67:2c:44:06:a1:52:c3:
97:04:6f:a6:55:61:5b:93:43:1a:8e:d8:d5:4b:3b:0e:bc:46:
e4:45:51:be:3c:e1:96:d3:d9:92:f3:d1:df:bf:e4:5a:11:3b:
fe:c5:09:34:2c:3f:79:28:27:e3:7e:7c:18:96:73:53:81:da:
7b:7a:69:61:77:4e:04:46:2d:fc:57:95:53:60:c1:f9:c8:48:
ec:48:06:c6:93:5f:47:51:a4:93:cf:7a:5e:9d:9e:d8:01:1f:
55:32:89:11:9f:5c:2c:9f:b7:99:19:f7:cc:c5:93:48:37:e0:
37:99:1f:ed:93:e6:ea:86:5d:73:69:ba:53:3b:51:8a:1a:e5:
12:5b:37:61:fa:3a:3e:4d:a5:69:c9:c6:2a:e3:d7:36:f0:76:
8d:1b:5e:9e:e1:e7:b1:ed:6a:8c:26:03:8d:d6:dc:48:c9:90:
9c:15:94:f4:70:cf:be:01:15:b4:e3:01:e9:aa:64:be:23:bf:
be:ee:af:bd:8c:ad:57:1d:7e:3a:4a:d6:28:68:23:63:98:84:
8d:12:c5:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 13:48:18 2024 by rpki-client on console-fra.rpki-client.org