Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/d4db03-e8ad-4027-9ce8-55e1ff7f32f9/1/EYQJHr8QLZwKEmO7xTwewRW51fg.roa
File: EYQJHr8QLZwKEmO7xTwewRW51fg.roa (raw, json)
Hash identifier: jHi31db3cHJLib/XHLxafVwJSe/8FPXM3f++0yDOz4g=
Subject key identifier: 11:84:09:1E:BF:10:2D:9C:0A:12:63:BB:C5:3C:1E:C1:15:B9:D5:F8
Certificate issuer: /CN=2b0e759c0ea67d8ff722aac887c7eccecded3ec7
Certificate serial: 018CC3B68FD587CC33CAAECF953FA931870F
Authority key identifier: 2B:0E:75:9C:0E:A6:7D:8F:F7:22:AA:C8:87:C7:EC:CE:CD:ED:3E:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kw51nA6mfY_3IqrIh8fszs3tPsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/d4db03-e8ad-4027-9ce8-55e1ff7f32f9/1/EYQJHr8QLZwKEmO7xTwewRW51fg.roa
Signing time: Mon 01 Jan 2024 06:29:30 +0000
ROA not before: Mon 01 Jan 2024 06:29:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31007
IP address blocks: 194.6.249.0/24 maxlen: 24
91.235.114.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/d4db03-e8ad-4027-9ce8-55e1ff7f32f9/1/Kw51nA6mfY_3IqrIh8fszs3tPsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/d4db03-e8ad-4027-9ce8-55e1ff7f32f9/1/Kw51nA6mfY_3IqrIh8fszs3tPsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kw51nA6mfY_3IqrIh8fszs3tPsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 01:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:8f:d5:87:cc:33:ca:ae:cf:95:3f:a9:31:87:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b0e759c0ea67d8ff722aac887c7eccecded3ec7
Validity
Not Before: Jan 1 06:29:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1184091ebf102d9c0a1263bbc53c1ec115b9d5f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f7:c0:e7:c3:05:ea:a0:de:f2:a2:66:78:25:
fe:b1:f2:5d:72:0f:18:a0:8d:31:2d:58:ea:1f:cb:
95:6a:0c:34:48:3a:02:f5:35:f2:57:2e:40:4b:2a:
88:13:38:ff:19:4a:f9:5e:ec:ef:f8:b1:4f:39:8b:
b5:f8:c6:46:62:11:51:44:8a:59:f3:57:d9:8a:bc:
73:a9:c8:1e:2d:43:71:24:90:ba:ab:a5:02:95:3b:
73:79:04:0f:fc:4b:90:8a:96:c4:74:ef:58:db:ab:
92:94:f7:30:e6:67:d5:02:16:24:a2:ed:8c:81:0f:
ad:d7:44:f4:6b:79:b3:95:a7:33:85:25:2b:c7:1a:
eb:6d:6c:66:91:be:d5:c7:41:ee:7c:6a:1e:b5:31:
6f:bd:b5:08:94:3c:ed:8b:b4:8d:2f:0b:0d:65:49:
bb:72:c5:24:d2:47:64:2e:a4:fd:96:d2:10:45:9c:
6a:f2:b7:e6:38:9d:04:68:55:51:4a:e5:18:60:24:
a4:bb:85:38:b2:5b:e9:dd:40:f2:31:5d:bf:3b:fd:
7a:07:37:c1:a3:e0:2e:bc:74:e4:c8:ff:7b:84:29:
fc:bd:00:ce:18:ff:7f:77:12:50:d5:7f:0e:fc:0f:
0e:17:4b:a0:34:f4:3c:a9:89:7f:a0:02:c3:d4:c8:
2a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:84:09:1E:BF:10:2D:9C:0A:12:63:BB:C5:3C:1E:C1:15:B9:D5:F8
X509v3 Authority Key Identifier:
keyid:2B:0E:75:9C:0E:A6:7D:8F:F7:22:AA:C8:87:C7:EC:CE:CD:ED:3E:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kw51nA6mfY_3IqrIh8fszs3tPsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/d4db03-e8ad-4027-9ce8-55e1ff7f32f9/1/EYQJHr8QLZwKEmO7xTwewRW51fg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/d4db03-e8ad-4027-9ce8-55e1ff7f32f9/1/Kw51nA6mfY_3IqrIh8fszs3tPsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.235.114.0/23
194.6.249.0/24
Signature Algorithm: sha256WithRSAEncryption
35:a7:99:aa:e4:bf:f3:9d:4b:03:af:30:f6:93:2a:fc:61:b6:
01:a9:ed:f6:23:f4:52:09:7d:26:9b:78:3e:ba:34:91:da:d4:
75:da:7b:d9:f3:fd:14:42:ee:43:d6:ce:ab:57:8b:52:5c:4e:
49:8f:40:01:b2:13:68:9d:d2:33:f5:2d:a4:58:3e:49:c6:8a:
d5:90:2d:18:bf:46:dc:0f:30:e1:b0:61:d1:1c:f3:14:1f:98:
4d:db:af:3e:ea:6b:b7:3f:6a:b7:98:b2:39:9d:77:c3:ea:fe:
1a:30:d4:10:4d:82:9e:e7:96:32:0f:ff:8e:47:9f:bb:bf:8d:
1b:3b:a5:cb:27:a2:39:c3:f3:9e:62:7d:85:e2:ee:5c:92:48:
3d:0c:9d:0b:32:dc:a9:e5:60:62:8f:78:8d:03:21:d0:b7:3d:
6c:43:f6:90:5a:af:17:54:ed:ec:4b:cb:15:07:e7:b5:d7:3a:
31:c6:13:6e:04:f6:9e:cf:89:fe:10:85:00:38:b2:97:93:9c:
ce:1d:99:18:0f:73:1d:41:92:f1:a6:da:ee:5d:77:39:c3:66:
5e:11:e3:39:e6:cc:4e:4b:98:62:de:a2:31:2e:83:7e:f7:6c:
d8:64:d1:8b:c7:5d:0b:9b:ca:b9:e2:0d:ba:63:45:3e:b9:b8:
13:58:2b:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 08:49:43 2024 by rpki-client on console-ams.rpki-client.org