Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/EdPMmLmtrGQ9br2nzAsAPYcrDM8.roa
File: EdPMmLmtrGQ9br2nzAsAPYcrDM8.roa (raw, json)
Hash identifier: RZUWyY2I5X7CUWRc5zmBtDM6HoVR6l0KRa6YDD1jPN4=
Subject key identifier: 11:D3:CC:98:B9:AD:AC:64:3D:6E:BD:A7:CC:0B:00:3D:87:2B:0C:CF
Certificate issuer: /CN=e7f881401abacc88c941fdf740f1ab1536f05dba
Certificate serial: 018CCA2BB4BB9BE3BE67BCE8398177B911CC
Authority key identifier: E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/EdPMmLmtrGQ9br2nzAsAPYcrDM8.roa
Signing time: Tue 02 Jan 2024 12:35:11 +0000
ROA not before: Tue 02 Jan 2024 12:35:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34521
IP address blocks: 213.215.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 May 2024 02:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:b4:bb:9b:e3:be:67:bc:e8:39:81:77:b9:11:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7f881401abacc88c941fdf740f1ab1536f05dba
Validity
Not Before: Jan 2 12:35:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=11d3cc98b9adac643d6ebda7cc0b003d872b0ccf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:35:39:78:a9:d6:58:93:c0:07:a9:c8:36:29:
3a:26:b3:8b:96:71:42:d4:bf:9c:ad:01:cf:22:e9:
20:97:9a:74:d7:83:ee:c1:e1:71:14:0d:3e:92:67:
d1:9b:f4:d4:1e:7f:43:4f:d8:70:62:99:7b:a8:72:
f5:af:06:ef:18:58:f6:b1:15:8d:25:25:0d:28:17:
fe:47:68:81:89:91:bf:6d:5b:11:c0:35:62:25:f9:
f0:28:47:65:64:3c:c7:5d:d0:ea:54:3a:39:34:1a:
7d:b7:4b:07:73:9f:68:e9:c8:fe:16:59:0b:ce:89:
90:b8:83:63:2b:4f:8c:fc:ad:76:2a:d1:bb:8f:40:
37:07:ad:41:51:4c:76:7a:03:a3:89:c9:51:e1:eb:
0e:c5:53:c8:73:cc:fd:55:0d:11:83:a3:ee:bb:eb:
d7:24:c8:53:ab:da:28:6c:5f:d4:10:81:e8:4b:21:
0f:ef:a1:c4:57:d1:96:38:98:48:2c:4a:5e:a9:b1:
f5:82:e3:f3:0f:cc:2e:24:c0:7f:2a:c7:d0:20:ee:
5b:3f:ac:10:e2:bd:43:46:df:99:ea:69:07:0f:2d:
eb:9d:86:a2:24:4f:10:f5:7a:77:71:04:0f:59:b4:
bb:5d:63:52:8e:dd:31:02:25:68:82:43:9a:bb:bf:
63:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:D3:CC:98:B9:AD:AC:64:3D:6E:BD:A7:CC:0B:00:3D:87:2B:0C:CF
X509v3 Authority Key Identifier:
keyid:E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/EdPMmLmtrGQ9br2nzAsAPYcrDM8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.215.69.0/24
Signature Algorithm: sha256WithRSAEncryption
08:cd:53:fa:0a:b8:89:59:ef:e4:6c:ea:97:19:5c:6e:9c:cc:
2a:e2:68:15:e0:68:65:7c:e6:e4:54:55:01:ab:c7:bc:9f:9a:
90:bb:91:34:59:49:bf:f0:6c:8f:fd:b1:59:57:ba:66:ad:be:
c9:8c:de:79:1e:b8:04:4a:fd:03:c2:3f:16:42:33:e6:7b:d3:
65:f5:9d:ea:b4:68:ec:45:0e:af:c5:f2:b1:66:5b:e4:dd:19:
38:3d:2d:bb:37:39:54:b0:7c:f9:18:fa:e7:7f:82:48:89:c6:
c9:05:27:22:e3:bf:88:38:7d:ac:f5:40:27:51:74:1f:9c:60:
16:03:a9:37:4a:2a:dd:c3:c9:77:75:80:57:1d:4b:f8:83:d0:
e8:55:1b:a6:10:cd:b1:f9:c9:da:06:08:b0:f0:cc:8e:35:5d:
5b:49:10:dc:c5:4c:11:df:a3:f4:6d:16:4b:9b:70:9f:58:0a:
ff:da:a8:ba:28:9e:46:35:ac:8d:b3:91:a3:fc:51:8b:9c:c1:
37:ac:3f:8e:5a:95:92:4c:82:ae:35:94:97:6e:59:76:a1:9a:
02:93:54:86:e6:66:84:2a:a7:c6:bd:a6:a3:46:4e:a7:43:fa:
09:f9:17:71:35:9a:f4:e7:9a:ad:61:d5:5e:6c:83:70:09:4f:
27:dd:e7:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 27 12:26:08 2024 by rpki-client on console-ams.rpki-client.org