Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/7eb683-e218-4382-bfd9-28da6a1ba128/1/JEs4lU6HXC3thRY75NY8E2U3W2s.roa
File: JEs4lU6HXC3thRY75NY8E2U3W2s.roa (raw, json)
Hash identifier: y3pjfV6sFxi4Jw1tqQFoeL69BdrSEY5op46pPE4JOjI=
Subject key identifier: 24:4B:38:95:4E:87:5C:2D:ED:85:16:3B:E4:D6:3C:13:65:37:5B:6B
Certificate issuer: /CN=e9e415ed5c0c7759981001b8db262da779a04b3d
Certificate serial: 018CC6B77AE28105F6D78525C202FDFFE31F
Authority key identifier: E9:E4:15:ED:5C:0C:77:59:98:10:01:B8:DB:26:2D:A7:79:A0:4B:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6eQV7VwMd1mYEAG42yYtp3mgSz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/7eb683-e218-4382-bfd9-28da6a1ba128/1/JEs4lU6HXC3thRY75NY8E2U3W2s.roa
Signing time: Mon 01 Jan 2024 20:29:22 +0000
ROA not before: Mon 01 Jan 2024 20:29:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3225
IP address blocks: 213.132.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/7eb683-e218-4382-bfd9-28da6a1ba128/1/6eQV7VwMd1mYEAG42yYtp3mgSz0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/7eb683-e218-4382-bfd9-28da6a1ba128/1/6eQV7VwMd1mYEAG42yYtp3mgSz0.mft
rsync://rpki.ripe.net/repository/DEFAULT/6eQV7VwMd1mYEAG42yYtp3mgSz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:7a:e2:81:05:f6:d7:85:25:c2:02:fd:ff:e3:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9e415ed5c0c7759981001b8db262da779a04b3d
Validity
Not Before: Jan 1 20:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=244b38954e875c2ded85163be4d63c1365375b6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:cd:a0:a7:d7:33:eb:25:91:ad:e7:4e:45:cc:
a3:31:3c:ce:e1:30:e2:31:65:52:3a:9a:97:60:9e:
39:62:76:bd:e2:47:0a:fe:68:30:c7:ed:c4:99:48:
ed:39:66:bb:c9:81:ed:24:ef:4b:19:d0:f9:ef:cf:
42:eb:02:96:81:4e:16:ec:9e:f1:6a:1e:64:fe:72:
c3:ff:c6:2f:b3:05:b9:6a:8b:81:ca:31:be:27:ee:
b2:54:86:db:70:59:ef:d1:e7:73:b6:b4:44:42:2d:
9d:75:ee:4f:d4:1d:de:1c:8d:2c:f4:8b:60:0a:d4:
6b:bb:51:dc:68:82:af:84:74:44:40:a0:49:ed:68:
61:f5:65:9c:ab:ce:cb:14:0d:87:e8:72:c0:fc:7d:
b1:6b:c4:b9:bd:1b:31:5d:ad:b4:92:91:d9:fe:78:
a2:47:d3:3e:4d:2e:c5:ba:74:f9:84:01:d1:d9:ab:
06:4b:c5:18:08:b9:25:b2:0d:63:17:70:7e:48:76:
44:4f:c9:a2:35:7a:e5:9b:b9:dd:fe:f1:1c:3e:6e:
37:68:ad:1c:26:d4:58:d6:22:a4:15:9b:5a:9f:f6:
33:a6:8d:e5:6a:10:2f:b3:d0:93:c4:10:85:c4:a0:
e9:88:dd:69:7e:29:2f:ad:01:9c:7e:07:3e:6d:87:
fb:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:4B:38:95:4E:87:5C:2D:ED:85:16:3B:E4:D6:3C:13:65:37:5B:6B
X509v3 Authority Key Identifier:
keyid:E9:E4:15:ED:5C:0C:77:59:98:10:01:B8:DB:26:2D:A7:79:A0:4B:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6eQV7VwMd1mYEAG42yYtp3mgSz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/7eb683-e218-4382-bfd9-28da6a1ba128/1/JEs4lU6HXC3thRY75NY8E2U3W2s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/7eb683-e218-4382-bfd9-28da6a1ba128/1/6eQV7VwMd1mYEAG42yYtp3mgSz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.132.251.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:c9:87:ef:d7:d3:e5:18:ce:c1:fa:69:34:08:aa:df:63:7f:
36:06:0c:a3:98:5e:c5:79:25:7a:bc:d9:a1:8b:c2:d5:5d:56:
4a:a9:3a:66:a9:cc:cf:16:73:ad:a4:1c:6f:2e:4e:54:95:ec:
3c:da:f1:c4:98:b9:aa:75:18:91:df:83:1a:98:7d:34:54:a0:
a6:3f:ec:a9:25:8b:d9:f9:a2:a8:ee:21:48:3b:b2:83:99:9e:
4a:51:d4:0b:23:77:5d:e4:34:3f:7e:ff:4c:51:ba:38:03:aa:
00:09:fb:07:b7:90:d6:b4:5e:c9:23:64:c5:0b:fc:cc:07:c8:
90:bc:57:c1:93:49:92:7c:ee:3e:2f:f5:4c:43:2d:c6:12:42:
2f:8c:23:11:01:91:c0:db:69:b5:9d:3f:d9:dc:cf:d0:06:1d:
39:30:9c:c0:49:be:12:37:89:36:d2:ed:71:17:8f:3a:61:ad:
66:b0:14:bd:d8:86:3b:78:39:b4:28:8f:79:4f:a2:88:1f:c3:
91:25:ae:6b:3c:c4:08:be:52:af:1c:b8:15:0e:58:30:fe:d3:
06:49:58:c2:ad:54:bd:74:de:10:bc:e1:90:9c:01:dd:69:34:
e9:32:e7:e1:10:0a:ae:ca:a0:cb:aa:41:89:0f:c7:f9:c3:64:
ad:c1:1b:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:37:54 2024 by rpki-client on console-fra.rpki-client.org