Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/EwrqIEqLVmI1-7txR-LLMnUAOqQ.roa
File: EwrqIEqLVmI1-7txR-LLMnUAOqQ.roa (raw, json)
Hash identifier: PFASRxCTKRDMbGXvYXJdgCEHWU/JY+wVW0uYesU2uDk=
Subject key identifier: 13:0A:EA:20:4A:8B:56:62:35:FB:BB:71:47:E2:CB:32:75:00:3A:A4
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 018F1162097BB284C8ED3A42BBF258E166D7
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/EwrqIEqLVmI1-7txR-LLMnUAOqQ.roa
Signing time: Wed 24 Apr 2024 18:33:08 +0000
ROA not before: Wed 24 Apr 2024 18:33:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58172
IP address blocks: 213.232.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Jun 2024 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:11:62:09:7b:b2:84:c8:ed:3a:42:bb:f2:58:e1:66:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Apr 24 18:33:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=130aea204a8b566235fbbb7147e2cb3275003aa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:27:07:1f:30:0f:0a:42:6f:a9:ac:1f:8e:e6:
f5:2e:d1:31:88:cc:c7:7e:46:f4:cf:a5:36:81:16:
3d:8e:93:88:c5:41:4d:bf:ea:bb:32:83:55:04:b2:
05:17:0f:99:31:d3:06:59:ab:28:f8:cf:db:4a:dc:
df:df:98:33:4b:79:35:75:3b:ad:a6:25:4a:9d:87:
bb:55:87:0d:31:b0:e9:49:59:aa:48:0c:6c:6a:80:
cd:b2:68:11:49:64:3e:cf:ae:c8:2e:ad:ad:24:c6:
08:6a:e4:e5:31:15:77:70:fd:65:63:cd:3d:23:b2:
54:7c:fd:49:35:b8:76:b7:8a:19:55:f4:8f:af:c6:
91:d8:c7:8f:c1:ba:b9:57:77:39:fd:4e:6a:be:a1:
f0:16:e6:b6:5f:2d:3e:07:8a:f0:3f:31:aa:7d:af:
33:2e:a5:24:17:be:c8:a6:1e:8c:1e:37:d2:64:9e:
2c:91:f8:e5:22:ef:62:9b:af:32:c3:d8:dc:5f:82:
09:f7:33:93:3f:b1:f9:61:90:40:78:21:10:f4:d7:
e9:70:11:b6:e0:dc:c0:01:42:bc:6f:b4:db:38:f4:
57:4c:dc:4b:47:9e:c7:a7:70:1d:ad:fe:93:1c:50:
ab:bc:80:03:d1:43:b4:9d:38:37:9a:5a:77:e0:34:
aa:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:0A:EA:20:4A:8B:56:62:35:FB:BB:71:47:E2:CB:32:75:00:3A:A4
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/EwrqIEqLVmI1-7txR-LLMnUAOqQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.232.206.0/24
Signature Algorithm: sha256WithRSAEncryption
29:67:17:04:75:30:85:c9:ca:af:72:12:3e:cd:ef:98:a5:1b:
88:ba:3d:31:6e:26:a0:ff:7f:81:15:bc:05:c5:6c:a9:67:54:
24:ba:49:93:79:36:89:85:7f:de:ee:d1:c1:de:2a:41:50:64:
91:cb:72:c7:11:b3:fa:34:5b:f9:75:3f:78:86:7e:6c:8b:f6:
3c:ca:64:a1:61:c9:18:f0:11:6b:02:62:fe:f1:e7:5c:fd:a1:
2f:84:9e:f1:94:0b:f3:51:0f:f0:94:36:a3:73:84:f2:cc:8b:
85:00:f8:4c:9c:29:40:5f:55:e5:18:4b:bc:d8:23:11:06:d1:
95:7f:03:d3:0a:78:ce:a2:4b:a5:db:ef:2c:e8:9f:bb:2d:3b:
87:6d:7f:d1:24:9a:27:93:75:90:ee:28:9b:38:5d:33:ac:c3:
f4:e0:bd:69:90:e2:61:f1:a8:8c:96:39:55:03:2d:e3:51:8b:
e5:48:e9:92:76:9d:6a:6d:59:b1:72:50:4f:46:1c:78:c3:b2:
2f:be:57:ef:7a:59:78:e2:a7:cb:e2:61:aa:06:f2:92:41:9e:
19:d6:05:d5:66:33:94:47:07:f3:39:c9:16:40:63:4a:24:43:
eb:8d:a1:bf:7b:b9:28:ab:b6:0b:af:5e:5c:66:0d:56:18:8a:
c8:2c:67:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 16:46:53 2024 by rpki-client on console-ams.rpki-client.org