Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/EJSsHLYzJT39mPFyHtwBihZFs18.roa
File: EJSsHLYzJT39mPFyHtwBihZFs18.roa (raw, json)
Hash identifier: M8wt7W2lDiBfSNzt9ymUH/9Ah9RShJYJV/7CQkF8qcQ=
Subject key identifier: 10:94:AC:1C:B6:33:25:3D:FD:98:F1:72:1E:DC:01:8A:16:45:B3:5F
Certificate issuer: /CN=bde636ff523e5f3734227f33c44c2e50ff8d1ee2
Certificate serial: 018CC6B7A53A7099CF08B4C73858BAF11372
Authority key identifier: BD:E6:36:FF:52:3E:5F:37:34:22:7F:33:C4:4C:2E:50:FF:8D:1E:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/veY2_1I-Xzc0In8zxEwuUP-NHuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/EJSsHLYzJT39mPFyHtwBihZFs18.roa
Signing time: Mon 01 Jan 2024 20:29:33 +0000
ROA not before: Mon 01 Jan 2024 20:29:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 33965
IP address blocks: 193.228.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/veY2_1I-Xzc0In8zxEwuUP-NHuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 08:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:a5:3a:70:99:cf:08:b4:c7:38:58:ba:f1:13:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bde636ff523e5f3734227f33c44c2e50ff8d1ee2
Validity
Not Before: Jan 1 20:29:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1094ac1cb633253dfd98f1721edc018a1645b35f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c8:fe:5e:45:71:56:86:6c:b8:80:ee:70:db:
ac:63:7b:87:ec:6b:66:22:e0:2e:16:87:80:b6:b5:
61:7a:34:71:b3:6d:15:d6:bf:f6:b0:ca:6e:75:29:
5c:7a:63:2d:41:2e:4e:79:b4:8b:38:68:a0:7d:fc:
5a:70:54:9e:85:40:aa:62:a2:ae:c1:da:29:ca:24:
d6:8e:3b:56:fb:88:54:55:de:5b:7d:42:fb:f4:9a:
bb:41:2e:09:fa:ac:79:e2:90:08:7b:3c:73:34:04:
16:92:e1:eb:55:d2:7b:6a:df:0e:77:86:d3:50:33:
ec:a7:4b:ee:85:ca:4b:17:e3:b0:bd:18:cd:8b:ab:
f3:0d:1f:00:d1:86:20:81:22:48:62:db:67:6f:4e:
ec:91:15:b5:57:33:d2:d6:5b:72:54:6b:8f:73:ed:
f9:0f:36:7a:78:88:00:7d:27:5d:d0:bd:2c:a3:0c:
de:e2:e4:7e:c6:27:69:75:c3:8a:18:96:db:0b:04:
78:ad:84:03:0e:79:05:3d:e3:78:b3:bb:63:98:d3:
de:f3:f4:98:44:b6:4c:58:84:12:cb:98:06:98:8a:
8b:d0:75:96:c3:84:82:59:d1:43:f0:91:14:98:b1:
f3:fb:48:01:ab:53:cc:cb:93:00:bd:7d:0f:e2:03:
a7:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:94:AC:1C:B6:33:25:3D:FD:98:F1:72:1E:DC:01:8A:16:45:B3:5F
X509v3 Authority Key Identifier:
keyid:BD:E6:36:FF:52:3E:5F:37:34:22:7F:33:C4:4C:2E:50:FF:8D:1E:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/veY2_1I-Xzc0In8zxEwuUP-NHuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/EJSsHLYzJT39mPFyHtwBihZFs18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.228.197.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:af:9c:62:4c:ee:28:65:42:07:d2:34:fe:17:bb:dc:61:c9:
42:5b:6e:a6:a5:f3:30:92:61:15:58:a4:29:7f:59:0c:68:c1:
2a:4a:37:3a:06:9e:bb:43:ca:cc:1b:47:53:dd:7a:2d:b3:cf:
42:33:1f:88:db:14:96:13:3b:cf:94:ba:2d:92:89:52:1b:d5:
51:31:c0:8e:23:a5:77:3b:82:e8:db:de:9e:a2:33:ff:e6:f4:
96:4c:e3:24:d4:d7:3c:52:74:9e:45:57:21:ae:a3:d3:91:17:
a6:c1:fc:47:d0:00:62:ce:54:e4:04:61:1b:a0:c6:a9:82:67:
87:48:f7:2f:7b:9f:45:64:a0:cf:01:85:b0:4a:ff:63:f0:5c:
ee:50:22:9c:12:1b:9f:51:9e:90:11:43:98:54:b6:b6:04:5e:
e2:f9:b3:12:dc:71:89:0d:f8:86:24:2d:50:42:f9:07:5b:07:
db:70:0c:98:7f:04:24:75:63:63:41:ee:7f:2f:fc:b9:c4:0e:
a6:33:c9:b9:77:2e:b9:24:91:46:0f:6e:14:62:3a:70:56:73:
09:b7:cd:ca:46:85:f2:17:f4:15:8b:cf:b1:37:8e:f2:59:b8:
d8:96:af:48:46:7a:f8:30:ba:68:82:db:3a:66:df:82:94:bd:
08:4e:b3:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:54:24 2024 by rpki-client on console-ams.rpki-client.org