Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/2aaa49-2823-4ee2-b5d1-e547395d6b47/1/EwQX0r7nuENp4Wlc5bCK1SmDjTs.roa
File: EwQX0r7nuENp4Wlc5bCK1SmDjTs.roa (raw, json)
Hash identifier: Ze/5cvaQN71eWUQ2rYmhdtKZ9CheaO8+Ea4hGz/7LC0=
Subject key identifier: 13:04:17:D2:BE:E7:B8:43:69:E1:69:5C:E5:B0:8A:D5:29:83:8D:3B
Certificate issuer: /CN=76815c7d0e863c21780f8bf4b9ecc3a9c6459298
Certificate serial: 019295999094E2CFE881918B330B7452B75A
Authority key identifier: 76:81:5C:7D:0E:86:3C:21:78:0F:8B:F4:B9:EC:C3:A9:C6:45:92:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/doFcfQ6GPCF4D4v0uezDqcZFkpg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/2aaa49-2823-4ee2-b5d1-e547395d6b47/1/EwQX0r7nuENp4Wlc5bCK1SmDjTs.roa
Signing time: Wed 16 Oct 2024 13:52:02 +0000
ROA not before: Wed 16 Oct 2024 13:52:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12859
IP address blocks: 193.104.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/2aaa49-2823-4ee2-b5d1-e547395d6b47/1/doFcfQ6GPCF4D4v0uezDqcZFkpg.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/2aaa49-2823-4ee2-b5d1-e547395d6b47/1/doFcfQ6GPCF4D4v0uezDqcZFkpg.mft
rsync://rpki.ripe.net/repository/DEFAULT/doFcfQ6GPCF4D4v0uezDqcZFkpg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:95:99:90:94:e2:cf:e8:81:91:8b:33:0b:74:52:b7:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76815c7d0e863c21780f8bf4b9ecc3a9c6459298
Validity
Not Before: Oct 16 13:52:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=130417d2bee7b84369e1695ce5b08ad529838d3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:2f:e6:ad:3d:fc:d4:0b:6f:c7:1b:47:1e:63:
62:ed:ed:00:e9:56:7e:cf:a9:a8:f7:8c:d9:4d:8b:
08:6c:f5:89:65:ab:fc:7c:4f:17:96:16:c8:00:cd:
e4:27:5d:54:28:ca:59:78:51:87:42:8b:02:80:21:
b8:87:dd:4c:2e:c0:fb:70:6a:db:f9:2a:47:d3:6d:
66:fe:ae:e8:69:93:99:b3:4d:a8:0c:bd:93:64:63:
5c:74:f3:95:d9:d2:49:d6:09:c1:fb:7c:dd:25:78:
78:1d:e5:40:d7:88:fe:78:c6:a1:91:37:e0:aa:1e:
89:d1:dd:fb:78:2c:77:df:ce:7a:9d:e7:b7:e3:6e:
0c:96:34:41:94:29:b4:56:7a:3c:e2:06:2b:b5:8e:
8d:a6:94:01:20:a8:a6:ea:6d:99:cc:6e:d5:08:a1:
8e:1b:28:83:05:12:fb:c5:25:93:39:98:e1:66:af:
e4:1f:e7:30:bc:25:97:14:b1:23:bc:28:72:fa:6e:
53:ef:88:a7:c0:19:2f:7e:6d:de:f3:63:e4:24:e1:
33:b6:0c:31:dd:7e:e6:fd:56:b3:95:a4:cd:b2:34:
92:13:03:52:22:64:66:c3:d1:1d:be:82:28:c1:71:
5f:bf:2f:be:0b:db:a4:30:63:9d:49:44:bf:9a:4c:
5c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:04:17:D2:BE:E7:B8:43:69:E1:69:5C:E5:B0:8A:D5:29:83:8D:3B
X509v3 Authority Key Identifier:
keyid:76:81:5C:7D:0E:86:3C:21:78:0F:8B:F4:B9:EC:C3:A9:C6:45:92:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/doFcfQ6GPCF4D4v0uezDqcZFkpg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/2aaa49-2823-4ee2-b5d1-e547395d6b47/1/EwQX0r7nuENp4Wlc5bCK1SmDjTs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/2aaa49-2823-4ee2-b5d1-e547395d6b47/1/doFcfQ6GPCF4D4v0uezDqcZFkpg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.104.0/24
Signature Algorithm: sha256WithRSAEncryption
97:58:59:96:c6:57:ff:b4:de:05:c5:17:69:29:09:5a:5f:eb:
85:b7:f1:b1:62:18:09:1f:b4:23:eb:43:95:d7:f1:a1:10:c7:
2b:0b:b4:bd:19:4c:fa:bd:2c:eb:2f:68:10:77:4b:c9:96:c0:
d3:d2:47:06:5a:99:6a:61:43:ff:bf:ad:0b:81:12:12:1d:d7:
48:a8:7f:9c:89:2a:ec:99:f3:cb:09:04:65:06:25:07:6f:bf:
68:ae:d2:e4:9a:fd:72:8d:4f:09:b1:fd:b1:3c:2a:95:48:80:
23:23:99:a4:99:25:ce:68:89:9e:d6:ff:81:30:84:5c:e4:ba:
b8:47:be:61:49:c5:90:4c:70:2b:e7:6c:8f:cd:e6:be:2d:61:
71:dd:2f:a6:dd:3c:e6:90:61:d3:0a:d7:76:a5:2b:d1:5a:36:
0e:3a:8d:19:1a:6b:68:a6:1d:e7:4f:e6:27:a6:b3:27:a1:73:
7d:ab:72:ec:dd:48:37:31:69:ef:31:81:9e:de:bc:1d:14:6d:
ae:57:b0:a1:e2:1f:15:33:7a:e9:b4:17:9d:9f:a6:9f:fc:c3:
fb:50:13:e0:80:75:a7:ed:2f:17:4a:17:36:0b:77:f4:0c:e1:
c9:71:af:75:89:2f:4e:6e:8b:10:0e:8e:c2:7a:b0:cc:45:5a:
81:a5:86:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:17:50 2024 by rpki-client on console-ams.rpki-client.org