Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/e94652-1564-4d1b-8198-1ac5d8863082/1/EeK6cauICbjiVCSXw89JJKbgWuI.roa
File: EeK6cauICbjiVCSXw89JJKbgWuI.roa (raw, json)
Hash identifier: dQibGt3eUNBx7bxOeGKDFYcaj4qO4S1imLS16SxshcI=
Subject key identifier: 11:E2:BA:71:AB:88:09:B8:E2:54:24:97:C3:CF:49:24:A6:E0:5A:E2
Certificate issuer: /CN=7c8c1371dd6afd5fd79ea984da3fbda1b94afe23
Certificate serial: 0194258FB9E611ECF29E34A3B97E001A9A2E
Authority key identifier: 7C:8C:13:71:DD:6A:FD:5F:D7:9E:A9:84:DA:3F:BD:A1:B9:4A:FE:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fIwTcd1q_V_XnqmE2j-9oblK_iM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/e94652-1564-4d1b-8198-1ac5d8863082/1/EeK6cauICbjiVCSXw89JJKbgWuI.roa
Signing time: Thu 02 Jan 2025 05:49:23 +0000
ROA not before: Thu 02 Jan 2025 05:49:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210252
IP address blocks: 193.23.20.0/22 maxlen: 24
2a0d:5bc0::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/e94652-1564-4d1b-8198-1ac5d8863082/1/fIwTcd1q_V_XnqmE2j-9oblK_iM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/e94652-1564-4d1b-8198-1ac5d8863082/1/fIwTcd1q_V_XnqmE2j-9oblK_iM.mft
rsync://rpki.ripe.net/repository/DEFAULT/fIwTcd1q_V_XnqmE2j-9oblK_iM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:b9:e6:11:ec:f2:9e:34:a3:b9:7e:00:1a:9a:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c8c1371dd6afd5fd79ea984da3fbda1b94afe23
Validity
Not Before: Jan 2 05:49:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=11e2ba71ab8809b8e2542497c3cf4924a6e05ae2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ed:ec:63:aa:48:15:cb:69:43:a9:4b:df:da:
31:25:ba:15:ea:90:6a:53:fb:27:88:34:52:53:73:
9b:6f:24:3e:ad:82:5a:f3:46:69:b8:8f:5c:3a:06:
89:f1:4f:16:61:8a:56:e3:df:c7:31:15:15:21:58:
19:e4:81:27:55:23:8b:6b:d2:78:3e:5b:d3:45:49:
da:80:26:97:d2:99:09:78:83:2b:1f:0e:58:55:41:
52:f5:13:f8:eb:8e:9e:8f:f8:9b:56:8d:7e:bb:ab:
71:06:45:a9:29:d5:3e:46:e2:c7:0d:37:b9:2b:be:
cf:70:43:7b:45:1e:bb:93:74:38:51:c9:c4:37:02:
36:2f:93:c5:f9:77:9d:05:1c:6c:d9:ca:43:10:e1:
6f:44:6f:30:ad:ad:39:6a:e4:e3:73:6a:61:3d:1d:
e8:5d:6d:06:e7:3f:1f:64:e9:95:64:7a:a6:3d:3c:
de:4f:7e:a5:80:bd:c8:89:a3:68:13:db:dd:cb:df:
70:c4:c9:b1:a9:91:a0:1b:0a:7e:e4:c4:c4:f6:15:
cf:23:ea:2a:0d:9f:9a:2a:41:21:ea:34:8e:1c:91:
98:1b:6e:f4:4a:6b:40:23:05:d3:96:e1:db:9b:b4:
fd:30:f0:0e:57:35:a8:78:41:d9:15:3f:87:7f:1b:
5b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:E2:BA:71:AB:88:09:B8:E2:54:24:97:C3:CF:49:24:A6:E0:5A:E2
X509v3 Authority Key Identifier:
keyid:7C:8C:13:71:DD:6A:FD:5F:D7:9E:A9:84:DA:3F:BD:A1:B9:4A:FE:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fIwTcd1q_V_XnqmE2j-9oblK_iM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e94652-1564-4d1b-8198-1ac5d8863082/1/EeK6cauICbjiVCSXw89JJKbgWuI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e94652-1564-4d1b-8198-1ac5d8863082/1/fIwTcd1q_V_XnqmE2j-9oblK_iM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.23.20.0/22
IPv6:
2a0d:5bc0::/29
Signature Algorithm: sha256WithRSAEncryption
5b:dc:d9:98:14:08:1d:ff:ad:d1:9b:0a:7a:fe:91:83:30:a0:
73:4b:2c:b8:e1:f9:fc:a1:eb:c5:fb:92:22:80:56:07:10:dd:
d2:27:d8:bd:ed:e7:18:f1:40:94:af:a7:5b:1e:9c:32:68:64:
25:bd:96:e6:db:3c:bb:d3:f2:65:b3:7c:68:cd:ae:52:a2:9d:
f9:12:f0:2d:82:b0:bb:f9:21:d1:77:79:bf:21:f7:62:bb:3b:
3b:30:99:2d:78:72:20:2a:62:c4:ab:a2:fa:5e:42:f8:69:07:
36:3c:d8:04:a3:3d:24:67:f3:f2:88:c3:f0:14:60:4d:67:66:
40:04:a3:cb:34:4e:83:cb:8f:6c:87:31:09:05:3c:6d:a9:ea:
68:cb:78:1b:3f:7a:15:80:b4:d6:6f:c3:28:97:d4:a2:57:16:
a4:82:a2:bb:1a:67:6e:a3:d2:0e:e6:3f:f1:d1:04:6e:ef:e8:
47:0e:81:f8:8f:da:a7:f4:0b:e1:94:80:3d:48:ed:7b:04:39:
82:87:ed:9f:2d:0a:a1:fb:b0:3f:16:25:a1:e7:18:38:20:a6:
02:62:9d:a1:e4:65:8d:db:c7:5e:f6:e4:f1:69:48:70:6d:a0:
7e:7e:bb:ca:19:d8:ca:13:77:42:6a:46:77:a1:9d:e0:12:71:
00:7d:1b:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:49:38 2025 by rpki-client