Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/fcf157-4e58-4f39-90fd-ef83b359b37f/1/eg-HI8jaAy3BfHTfXnOXa5oscaw.roa
File: eg-HI8jaAy3BfHTfXnOXa5oscaw.roa (raw, json)
Hash identifier: z/XVp9coe5OjphBtucpYzX7BCWzwjTgoSzNRVkqmSv4=
Subject key identifier: 7A:0F:87:23:C8:DA:03:2D:C1:7C:74:DF:5E:73:97:6B:9A:2C:71:AC
Certificate issuer: /CN=c6165ef13707cf5a7c3bca9de6da5f13ff015f1a
Certificate serial: 018CC94CB60948FAD670A71578FD87909EBF
Authority key identifier: C6:16:5E:F1:37:07:CF:5A:7C:3B:CA:9D:E6:DA:5F:13:FF:01:5F:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhZe8TcHz1p8O8qd5tpfE_8BXxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/fcf157-4e58-4f39-90fd-ef83b359b37f/1/eg-HI8jaAy3BfHTfXnOXa5oscaw.roa
Signing time: Tue 02 Jan 2024 08:31:36 +0000
ROA not before: Tue 02 Jan 2024 08:31:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209279
IP address blocks: 185.188.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/fcf157-4e58-4f39-90fd-ef83b359b37f/1/xhZe8TcHz1p8O8qd5tpfE_8BXxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/fcf157-4e58-4f39-90fd-ef83b359b37f/1/xhZe8TcHz1p8O8qd5tpfE_8BXxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhZe8TcHz1p8O8qd5tpfE_8BXxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4c:b6:09:48:fa:d6:70:a7:15:78:fd:87:90:9e:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6165ef13707cf5a7c3bca9de6da5f13ff015f1a
Validity
Not Before: Jan 2 08:31:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7a0f8723c8da032dc17c74df5e73976b9a2c71ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:60:8c:51:66:d3:b7:29:f2:0d:1c:c3:bb:a7:
8f:cf:bf:04:47:4a:4a:83:28:11:14:eb:82:7d:08:
17:e0:1e:42:0f:03:14:8b:75:0d:12:5d:39:04:ac:
77:ae:76:8d:47:91:51:8d:1e:d7:0d:c9:5b:85:c8:
f9:51:d5:65:59:ac:cd:e7:26:e5:bc:c0:1a:31:04:
44:c3:17:d9:99:7c:57:97:8e:a2:3b:29:7d:e7:43:
bb:43:b9:e8:db:47:9d:33:6e:f2:74:c7:16:86:56:
a1:9b:3d:a0:9a:22:66:c3:fc:3f:f7:95:59:38:9a:
82:bc:2c:b5:27:b3:88:e5:ff:43:dc:cb:0c:26:d6:
c2:6d:85:9f:93:bb:03:79:70:c1:77:3b:df:5a:c2:
7c:cc:12:fd:be:5c:85:c2:0e:0c:39:b5:c1:27:db:
56:48:90:c5:ce:ac:ef:63:78:5b:78:4f:06:52:f8:
3e:db:92:05:e9:f5:dc:a2:94:60:fa:37:dd:e6:b0:
fe:53:e0:52:73:fb:23:76:a6:75:b7:98:8f:5a:d4:
e3:3c:07:65:06:a6:5d:ed:69:c3:aa:77:75:c5:8d:
1d:c6:0c:9d:4d:a4:96:95:40:20:d7:f5:72:7e:e5:
f6:56:38:d8:23:7e:6f:8a:18:26:17:1d:c2:f5:38:
f4:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:0F:87:23:C8:DA:03:2D:C1:7C:74:DF:5E:73:97:6B:9A:2C:71:AC
X509v3 Authority Key Identifier:
keyid:C6:16:5E:F1:37:07:CF:5A:7C:3B:CA:9D:E6:DA:5F:13:FF:01:5F:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhZe8TcHz1p8O8qd5tpfE_8BXxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/fcf157-4e58-4f39-90fd-ef83b359b37f/1/eg-HI8jaAy3BfHTfXnOXa5oscaw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/fcf157-4e58-4f39-90fd-ef83b359b37f/1/xhZe8TcHz1p8O8qd5tpfE_8BXxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.188.31.0/24
Signature Algorithm: sha256WithRSAEncryption
23:f1:cb:a2:0a:1d:d3:b5:79:be:d7:21:67:19:1f:1a:b6:32:
7d:13:d2:c0:5d:4d:fe:00:60:50:a3:f8:3a:c9:4c:1d:1b:b7:
04:b2:ce:4f:7d:64:f0:87:e6:67:3f:0e:59:2a:a7:09:b1:3e:
63:de:98:22:d9:16:6b:03:05:ad:c9:54:d6:a8:ca:91:8b:4e:
35:9a:10:3d:b3:a9:20:f5:4e:4b:41:a8:39:2a:bb:3c:a6:51:
c3:3c:39:fe:74:d9:e7:1f:ef:97:2b:5d:3c:71:17:36:74:d7:
4a:db:d3:fc:c3:c0:4d:db:31:ca:02:06:a8:d5:b0:63:fa:1e:
40:be:d7:6c:dc:cb:c8:dd:50:76:42:87:88:7a:04:25:c4:22:
fd:80:a7:2a:44:ab:3d:a2:c3:1c:4d:d1:e9:d5:6c:dd:57:a6:
17:ab:1a:38:e5:c3:6e:3d:35:83:50:15:8b:19:d1:03:68:18:
d8:16:fb:77:33:05:51:8f:1d:8f:55:be:f2:79:18:f5:b2:45:
d2:b0:d8:7b:d2:52:e7:a9:2d:f5:0b:f4:ad:1d:44:25:aa:4f:
d5:6d:5c:71:a6:c3:18:fd:68:0b:08:8b:de:4a:b4:f2:19:05:
c3:ec:31:30:ee:37:64:7d:cf:05:e8:52:fa:75:dd:8f:ed:3b:
d3:35:eb:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 17:46:08 2024 by rpki-client on console-fra.rpki-client.org