Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/EyHmCVvYNBKE5m52sq-oFwyY0Mg.roa
File: EyHmCVvYNBKE5m52sq-oFwyY0Mg.roa (raw, json)
Hash identifier: wOMuxAy9SelSkDSiSoYTC5suct7thW4By2ih/YXX9Tg=
Subject key identifier: 13:21:E6:09:5B:D8:34:12:84:E6:6E:76:B2:AF:A8:17:0C:98:D0:C8
Certificate issuer: /CN=2aaacfc5d5e3b268f2c6ba4336bcc941f5c8d7af
Certificate serial: 018CC94DA1D2C6E4BFC84971AC46899DF1BA
Authority key identifier: 2A:AA:CF:C5:D5:E3:B2:68:F2:C6:BA:43:36:BC:C9:41:F5:C8:D7:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqrPxdXjsmjyxrpDNrzJQfXI168.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/EyHmCVvYNBKE5m52sq-oFwyY0Mg.roa
Signing time: Tue 02 Jan 2024 08:32:37 +0000
ROA not before: Tue 02 Jan 2024 08:32:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210917
IP address blocks: 185.234.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/KqrPxdXjsmjyxrpDNrzJQfXI168.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/KqrPxdXjsmjyxrpDNrzJQfXI168.mft
rsync://rpki.ripe.net/repository/DEFAULT/KqrPxdXjsmjyxrpDNrzJQfXI168.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 05:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:a1:d2:c6:e4:bf:c8:49:71:ac:46:89:9d:f1:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aaacfc5d5e3b268f2c6ba4336bcc941f5c8d7af
Validity
Not Before: Jan 2 08:32:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1321e6095bd8341284e66e76b2afa8170c98d0c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:aa:5e:19:05:c2:c0:d0:a8:cb:73:da:22:fd:
73:b4:d3:37:3b:89:36:91:02:8a:ea:b3:2a:cd:72:
4b:7f:97:59:3b:50:91:5c:01:bb:1d:67:20:7e:cb:
b4:16:44:9d:cb:6b:eb:ef:bd:0f:cc:2d:43:52:cd:
30:5f:c1:a4:64:e3:a6:cb:5b:79:18:3d:42:51:84:
08:bb:36:17:b4:3f:39:28:9e:73:71:81:98:b7:53:
a1:87:ad:f3:63:d5:75:89:88:1e:af:0a:83:7b:cd:
e3:4e:42:58:03:5b:40:4e:70:c7:65:df:a2:a4:5a:
ea:a9:0f:42:5c:8f:9e:36:aa:a4:ab:64:53:b2:ed:
a4:bb:9e:06:6b:1a:ce:04:65:be:dc:b3:30:04:b8:
35:12:33:ad:7d:fe:29:2a:78:dc:c5:a2:5d:1c:62:
bf:8c:e7:ce:50:c6:b7:10:92:15:51:37:cd:5a:1f:
4c:d3:cb:96:cd:9a:60:f5:3a:c7:52:17:1a:60:87:
36:e5:f7:c1:bb:ce:f4:fb:10:95:55:93:6d:a5:f6:
ff:2f:7f:cc:c3:00:bf:35:46:c3:a8:dd:db:c6:3a:
71:b8:69:64:61:09:73:7a:26:93:ea:fd:a5:83:97:
c3:e6:ac:f4:5b:63:10:4a:2d:97:0a:cf:3c:e1:80:
73:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:21:E6:09:5B:D8:34:12:84:E6:6E:76:B2:AF:A8:17:0C:98:D0:C8
X509v3 Authority Key Identifier:
keyid:2A:AA:CF:C5:D5:E3:B2:68:F2:C6:BA:43:36:BC:C9:41:F5:C8:D7:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqrPxdXjsmjyxrpDNrzJQfXI168.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/EyHmCVvYNBKE5m52sq-oFwyY0Mg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/KqrPxdXjsmjyxrpDNrzJQfXI168.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.234.110.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:aa:73:58:f1:4f:5d:1a:03:12:8e:4e:ae:c1:28:11:8c:1a:
13:21:0a:bc:56:58:77:4a:ce:9b:6f:9d:38:1e:27:a0:98:75:
87:f5:43:f2:c7:d3:af:8c:48:3f:04:53:6f:53:6a:fa:ce:fe:
51:eb:93:d5:59:95:cc:34:05:70:4d:14:79:02:ab:5d:fc:4e:
89:3b:47:88:25:6f:78:22:dd:e2:96:1e:d9:9d:49:4d:c2:83:
81:8f:87:96:36:4f:e3:6a:e0:b0:cb:87:12:55:4e:6d:3b:2e:
0f:af:8f:05:4c:f4:ac:31:1c:da:95:ee:03:b6:58:ad:4b:1c:
e3:a8:42:b5:e7:43:92:dd:88:6e:1d:30:c7:4a:18:3d:2e:7c:
40:cc:83:eb:b5:e3:10:f4:68:79:ab:44:eb:fc:31:d3:7a:06:
c7:89:eb:bb:8c:9d:c9:1f:f7:3b:ff:ed:14:bc:03:51:1f:a2:
cf:40:82:6e:aa:9f:9b:2e:a0:13:47:86:35:9e:4b:02:95:f8:
c4:a7:c4:18:e9:73:6d:9f:60:cd:68:ad:46:21:a3:0a:bb:b9:
0e:8b:ae:dd:76:bb:ac:1a:ca:2c:e7:f3:93:e9:52:6c:5f:12:
21:62:2e:79:22:f3:51:a6:c7:ac:e1:a6:a0:1d:7a:ca:39:eb:
8d:2d:9c:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:40:19 2024 by rpki-client on console-ams.rpki-client.org