Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/eNyn9FNeVYI8HwUhtQZ2wwbiLQc.roa
File: eNyn9FNeVYI8HwUhtQZ2wwbiLQc.roa (raw, json)
Hash identifier: 6G7/K6zWfsI/yKFnmfyhrCb3XrPuodY4bjw/EgX7afM=
Subject key identifier: 78:DC:A7:F4:53:5E:55:82:3C:1F:05:21:B5:06:76:C3:06:E2:2D:07
Certificate issuer: /CN=c9d6b59a93e324083fbca4237e47e9f5ebf371ab
Certificate serial: 018CC8016B8E2BD4F8F7919BC034A3AFF61B
Authority key identifier: C9:D6:B5:9A:93:E3:24:08:3F:BC:A4:23:7E:47:E9:F5:EB:F3:71:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yda1mpPjJAg_vKQjfkfp9evzcas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/eNyn9FNeVYI8HwUhtQZ2wwbiLQc.roa
Signing time: Tue 02 Jan 2024 02:29:45 +0000
ROA not before: Tue 02 Jan 2024 02:29:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212335
IP address blocks: 185.193.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/yda1mpPjJAg_vKQjfkfp9evzcas.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/yda1mpPjJAg_vKQjfkfp9evzcas.mft
rsync://rpki.ripe.net/repository/DEFAULT/yda1mpPjJAg_vKQjfkfp9evzcas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 31 May 2024 03:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:6b:8e:2b:d4:f8:f7:91:9b:c0:34:a3:af:f6:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d6b59a93e324083fbca4237e47e9f5ebf371ab
Validity
Not Before: Jan 2 02:29:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=78dca7f4535e55823c1f0521b50676c306e22d07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a4:28:8b:17:6f:3a:b1:c3:5d:46:38:f1:08:
c2:3d:ef:c5:99:db:6e:df:e2:df:53:6f:38:63:e7:
68:bb:9d:6e:4b:5b:ee:1e:d4:d1:f4:33:9d:09:f9:
cf:41:ee:9f:57:35:5f:01:86:cb:c4:b9:53:f4:c7:
84:c8:db:68:6c:bc:54:0e:2e:61:05:71:86:1b:8b:
e5:b7:09:cc:32:f1:e4:82:4d:21:2d:2b:3f:23:b6:
0a:bf:c6:45:40:b2:9d:50:14:02:cc:38:0c:e6:7b:
56:e4:fa:79:39:2b:4a:a9:58:1d:b6:d8:58:c9:e4:
df:3a:18:31:37:18:8a:dc:84:60:e4:6b:1e:ad:c4:
f1:d8:15:c5:5f:58:f1:73:38:30:c2:f7:5b:ca:4d:
89:47:10:e2:60:ed:61:f5:da:26:8f:1a:2d:aa:07:
8e:22:d4:fb:d8:57:42:dd:66:62:fc:ba:8c:0b:f7:
92:28:f0:62:dc:45:f8:a7:27:41:7c:e7:15:c8:ca:
b3:79:52:87:8b:fd:51:2d:2b:f1:e1:76:29:03:c1:
6e:08:55:6c:0a:6c:74:55:09:a2:1b:0f:21:e1:0b:
36:62:38:8b:68:8c:fb:b2:85:16:64:f5:73:d9:c9:
43:0e:e5:ef:d7:c9:38:5b:2b:46:8e:fb:2a:b6:28:
85:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:DC:A7:F4:53:5E:55:82:3C:1F:05:21:B5:06:76:C3:06:E2:2D:07
X509v3 Authority Key Identifier:
keyid:C9:D6:B5:9A:93:E3:24:08:3F:BC:A4:23:7E:47:E9:F5:EB:F3:71:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yda1mpPjJAg_vKQjfkfp9evzcas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/eNyn9FNeVYI8HwUhtQZ2wwbiLQc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/yda1mpPjJAg_vKQjfkfp9evzcas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.193.164.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:ce:c1:6e:bc:63:d9:64:98:19:ee:5b:06:7d:1e:0a:87:b1:
93:69:47:3d:77:a9:65:5b:0d:4d:d9:1c:d9:2e:3e:d9:56:82:
5e:07:0a:dd:ca:31:85:32:aa:54:c8:db:6d:4a:f1:bb:d8:d3:
3b:f3:b2:96:4e:9d:57:cb:bf:c1:1e:45:ac:ea:96:11:a6:8d:
a7:4e:33:98:ab:5d:14:de:78:b4:f0:f1:94:7c:1e:69:be:46:
e8:a4:24:31:20:f1:ce:2f:2f:f7:50:7a:24:5d:82:95:9b:b7:
90:ee:d7:39:3a:c1:0d:cd:fa:2e:60:54:af:56:89:69:c6:dc:
ff:73:38:58:fd:5c:eb:bc:52:a7:e5:c4:4e:45:59:17:c8:46:
77:2d:53:76:47:33:48:5a:52:a6:b7:29:48:b4:db:b5:f3:ed:
02:67:3f:fe:ee:2d:8b:f7:23:af:dd:c4:aa:33:32:77:d7:14:
ec:a5:85:32:d2:05:c0:f5:87:c0:3d:4d:ea:5a:42:49:01:42:
4f:b3:02:35:af:fb:d8:ab:74:bc:8f:79:6d:a6:b7:66:c0:13:
42:69:d0:56:7d:0c:b6:cd:3a:be:eb:f2:ee:be:fb:10:d1:9e:
b2:20:3d:9a:e6:fd:f8:77:ff:34:14:ae:1e:28:ba:93:c6:a1:
39:b5:71:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 12:15:58 2024 by rpki-client on console-fra.rpki-client.org