Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/13d49f-5e0f-422b-bcf1-e172d6a01e03/1/eQm2-Cdcdo9KOeNEyyjjcPLoQdI.roa
File: eQm2-Cdcdo9KOeNEyyjjcPLoQdI.roa (raw, json)
Hash identifier: b73RjAAgibx9UhxX6QMh5GwDV7Trou8uK/oEig2JMKw=
Subject key identifier: 79:09:B6:F8:27:5C:76:8F:4A:39:E3:44:CB:28:E3:70:F2:E8:41:D2
Certificate issuer: /CN=da0b6d9bed7da6d42207b90064d3e13efd3254ac
Certificate serial: 018D649582CEE44B3578F9F93B034EF35FC8
Authority key identifier: DA:0B:6D:9B:ED:7D:A6:D4:22:07:B9:00:64:D3:E1:3E:FD:32:54:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gttm-19ptQiB7kAZNPhPv0yVKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/13d49f-5e0f-422b-bcf1-e172d6a01e03/1/eQm2-Cdcdo9KOeNEyyjjcPLoQdI.roa
Signing time: Thu 01 Feb 2024 12:12:16 +0000
ROA not before: Thu 01 Feb 2024 12:12:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215694
IP address blocks: 2.59.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/13d49f-5e0f-422b-bcf1-e172d6a01e03/1/2gttm-19ptQiB7kAZNPhPv0yVKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/13d49f-5e0f-422b-bcf1-e172d6a01e03/1/2gttm-19ptQiB7kAZNPhPv0yVKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2gttm-19ptQiB7kAZNPhPv0yVKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 May 2024 02:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:64:95:82:ce:e4:4b:35:78:f9:f9:3b:03:4e:f3:5f:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da0b6d9bed7da6d42207b90064d3e13efd3254ac
Validity
Not Before: Feb 1 12:12:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7909b6f8275c768f4a39e344cb28e370f2e841d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:9d:f4:b3:a2:aa:06:40:7d:15:a8:d5:66:8f:
35:35:a2:82:e8:3a:61:e6:ea:ab:cd:ef:4b:49:6a:
b1:cc:2e:67:05:be:b0:66:81:f3:0c:9e:8d:a9:f5:
81:84:fa:b9:49:c6:f7:93:70:f0:6d:62:70:48:31:
54:ad:d2:a9:56:52:78:5a:0f:0b:26:9e:07:04:d4:
e5:f2:6b:b6:cb:20:98:d0:75:af:95:8a:cb:d9:1a:
84:33:4c:ca:27:94:98:e4:e9:25:7b:ec:b6:3c:80:
39:32:2b:2e:52:ff:2b:e9:89:e4:d9:e4:7a:d9:15:
6e:2a:3b:41:5a:6f:90:f2:0d:45:bb:6d:b1:63:d3:
3a:59:a8:f1:df:1a:b3:ad:72:db:bd:60:7f:03:26:
37:cd:c0:4e:ed:32:f0:25:74:5c:a9:5a:74:16:0e:
bf:bd:38:7d:6c:d0:f3:95:a8:70:87:b4:ce:c1:15:
39:fc:33:2c:d9:7a:9e:37:72:72:1c:be:55:d4:ff:
15:9b:d0:96:ee:e4:58:ab:3e:10:4e:7d:ef:27:b2:
14:cc:dd:8e:96:e2:b8:5a:f7:4c:42:c6:bc:27:b7:
53:cb:ec:b0:fd:44:7d:d7:62:01:bf:a3:38:37:7c:
1f:c0:7a:70:b2:46:a4:7f:70:69:9f:57:fc:3e:61:
0d:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:09:B6:F8:27:5C:76:8F:4A:39:E3:44:CB:28:E3:70:F2:E8:41:D2
X509v3 Authority Key Identifier:
keyid:DA:0B:6D:9B:ED:7D:A6:D4:22:07:B9:00:64:D3:E1:3E:FD:32:54:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gttm-19ptQiB7kAZNPhPv0yVKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/13d49f-5e0f-422b-bcf1-e172d6a01e03/1/eQm2-Cdcdo9KOeNEyyjjcPLoQdI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/13d49f-5e0f-422b-bcf1-e172d6a01e03/1/2gttm-19ptQiB7kAZNPhPv0yVKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.67.0/24
Signature Algorithm: sha256WithRSAEncryption
40:3f:4e:ef:a6:28:cf:0e:7e:4a:6c:e8:5c:9f:5e:59:43:f8:
f3:6b:8f:ed:7d:00:d0:e5:12:4b:f2:09:e0:d1:f2:4d:5b:fb:
97:64:83:ff:67:9e:1c:bf:89:cb:67:15:3d:70:5d:4f:47:17:
93:76:53:e3:56:ee:92:96:bf:aa:d5:4b:e1:0e:88:e6:c3:b3:
82:53:7d:11:24:9b:dc:58:71:ac:fd:0d:f6:75:06:b8:da:98:
f2:8a:72:c0:84:59:16:b8:2e:5c:54:af:39:2f:ec:40:50:3e:
da:40:93:3e:2f:d9:e4:d8:b1:4b:82:d7:c2:62:0d:f8:29:58:
ce:03:f6:ac:dc:fe:50:6e:75:79:71:30:91:37:61:41:3c:67:
07:ee:c6:77:04:4c:0e:99:e2:68:f6:04:f3:6e:4f:2b:da:c9:
94:42:f2:83:55:31:9a:e5:b6:ef:ff:d9:34:c1:c2:9a:17:9f:
4e:88:85:6f:2e:b7:9d:9b:87:2f:33:91:96:ce:cf:0c:9d:05:
fb:14:85:db:37:98:1c:18:19:31:e2:e9:6e:38:18:c1:7e:45:
04:66:f0:db:a5:81:d4:69:85:a6:78:fb:fa:1f:dd:1e:4b:fb:
fe:36:80:3a:47:70:cc:83:30:99:36:41:00:66:b0:b2:10:24:
b3:0a:cb:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 24 09:47:16 2024 by rpki-client on console-fra.rpki-client.org