Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/05881c-2aa5-42e4-84b8-7ac3ca1f357d/1/EcTg3dEN8RDARjIY5GSRnEFZcpY.roa
File: EcTg3dEN8RDARjIY5GSRnEFZcpY.roa (raw, json)
Hash identifier: yxX/MPRefpLCoD9oURO/PwhSPYPUVYypHQyfNenx4Ao=
Subject key identifier: 11:C4:E0:DD:D1:0D:F1:10:C0:46:32:18:E4:64:91:9C:41:59:72:96
Certificate issuer: /CN=6e409def4a8a89ca88f57182c52ed6d70fb91976
Certificate serial: 018CC86F4754D6A772F15458CBBC59D352D3
Authority key identifier: 6E:40:9D:EF:4A:8A:89:CA:88:F5:71:82:C5:2E:D6:D7:0F:B9:19:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bkCd70qKicqI9XGCxS7W1w-5GXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/05881c-2aa5-42e4-84b8-7ac3ca1f357d/1/EcTg3dEN8RDARjIY5GSRnEFZcpY.roa
Signing time: Tue 02 Jan 2024 04:29:45 +0000
ROA not before: Tue 02 Jan 2024 04:29:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210247
IP address blocks: 192.166.38.0/24 maxlen: 24
192.166.36.0/22 maxlen: 22
192.166.36.0/24 maxlen: 24
192.166.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/05881c-2aa5-42e4-84b8-7ac3ca1f357d/1/bkCd70qKicqI9XGCxS7W1w-5GXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/05881c-2aa5-42e4-84b8-7ac3ca1f357d/1/bkCd70qKicqI9XGCxS7W1w-5GXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/bkCd70qKicqI9XGCxS7W1w-5GXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:47:54:d6:a7:72:f1:54:58:cb:bc:59:d3:52:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e409def4a8a89ca88f57182c52ed6d70fb91976
Validity
Not Before: Jan 2 04:29:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=11c4e0ddd10df110c0463218e464919c41597296
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:b5:11:d5:1d:bd:74:30:21:c7:73:13:06:2f:
11:cd:e0:98:65:19:44:05:af:ad:5f:59:da:34:44:
ef:ee:f6:11:f1:c5:ba:c9:5f:af:c3:d7:de:06:59:
e8:11:f8:fc:6d:31:33:5f:5f:0c:cf:c8:08:8d:1c:
24:8d:24:bc:0b:7d:45:f1:b5:81:c9:64:d6:b1:bb:
eb:78:f3:93:59:54:88:66:b5:07:44:6f:1f:2d:10:
7d:78:a7:dd:5b:c2:b0:4f:17:ba:cc:2f:be:a9:79:
73:82:fd:36:67:d7:de:c2:2a:b1:5c:7d:47:13:19:
08:f4:f9:71:25:d2:b6:c9:b5:cd:4a:8c:75:18:bf:
29:e8:7d:2a:8a:8d:ac:a7:eb:b6:aa:f6:0e:de:47:
d9:06:c6:9f:8e:7e:f1:9e:78:2f:d2:55:eb:03:a7:
4b:e7:80:90:0d:50:ae:c3:f4:00:0f:ee:8d:ab:f6:
b4:75:91:8b:97:77:ae:96:0a:63:c7:2e:b1:6f:ae:
fc:fb:03:90:46:67:40:70:51:b2:79:c6:e5:6e:60:
1d:ef:00:1f:7e:a6:67:09:5f:9c:74:0f:e8:cc:79:
b8:a4:40:4b:11:83:d5:cf:91:b7:2c:3f:c5:b7:6c:
58:e7:d8:f1:59:a7:30:fb:97:99:f9:92:94:c5:86:
9e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:C4:E0:DD:D1:0D:F1:10:C0:46:32:18:E4:64:91:9C:41:59:72:96
X509v3 Authority Key Identifier:
keyid:6E:40:9D:EF:4A:8A:89:CA:88:F5:71:82:C5:2E:D6:D7:0F:B9:19:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bkCd70qKicqI9XGCxS7W1w-5GXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/05881c-2aa5-42e4-84b8-7ac3ca1f357d/1/EcTg3dEN8RDARjIY5GSRnEFZcpY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/05881c-2aa5-42e4-84b8-7ac3ca1f357d/1/bkCd70qKicqI9XGCxS7W1w-5GXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.166.36.0/22
Signature Algorithm: sha256WithRSAEncryption
c2:34:34:9c:6c:03:4e:cd:18:91:1a:a0:f8:29:f1:e1:52:ac:
3b:d3:b6:d7:ef:cd:cf:3a:9f:97:78:bb:31:05:be:35:c6:66:
4b:a2:fe:1b:ba:c7:1c:cb:d1:ca:77:79:99:79:af:8d:cf:20:
fe:d2:e4:75:52:7b:49:4d:47:11:7b:20:90:de:a7:04:a0:da:
0c:a7:52:f5:0b:0c:3b:a4:c0:ee:93:af:94:56:f0:c5:ea:c9:
6b:ba:62:da:8d:c9:53:97:9b:40:c0:2f:61:94:d4:d5:27:3c:
37:14:9e:0e:a5:97:3e:eb:15:3a:df:66:6b:d3:ff:89:4b:36:
17:3a:53:59:da:ad:e5:cd:6c:73:dd:d1:94:ab:0e:5e:29:0b:
37:21:89:1a:5f:56:e9:bd:a4:af:af:d6:6a:ec:51:04:9f:ec:
41:1f:c5:b4:31:23:1f:b0:f7:d4:98:d8:3b:f7:b4:75:a2:c8:
43:22:ff:07:46:33:3b:1a:27:96:79:cb:27:3a:95:24:9c:3f:
ab:1b:75:d6:69:ca:f2:b3:52:20:6d:12:63:ab:f9:e5:91:a0:
c7:45:bb:a3:d4:95:dc:5b:6d:9a:c7:54:44:62:d5:dd:11:d1:
ac:89:42:db:0a:3f:74:d6:74:51:3b:e7:be:fb:ad:de:26:44:
5d:94:86:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 23:10:40 2024 by rpki-client on console-fra.rpki-client.org