Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/914749-8c02-4660-a871-0178227e09c2/1/EJtFWzIPN3fv0jZwFuwFytz3yBg.roa
File: EJtFWzIPN3fv0jZwFuwFytz3yBg.roa (raw, json)
Hash identifier: XaSRWuFQqw1JoEtpFfPGUX1CVjx68jd2rbTprd006go=
Subject key identifier: 10:9B:45:5B:32:0F:37:77:EF:D2:36:70:16:EC:05:CA:DC:F7:C8:18
Certificate issuer: /CN=56978809c50f0141c2591549ba0727fdf60b1850
Certificate serial: 018CC425331E82BD157F838F137B80B5B84E
Authority key identifier: 56:97:88:09:C5:0F:01:41:C2:59:15:49:BA:07:27:FD:F6:0B:18:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VpeICcUPAUHCWRVJugcn_fYLGFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/914749-8c02-4660-a871-0178227e09c2/1/EJtFWzIPN3fv0jZwFuwFytz3yBg.roa
Signing time: Mon 01 Jan 2024 08:30:21 +0000
ROA not before: Mon 01 Jan 2024 08:30:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212552
IP address blocks: 146.19.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/914749-8c02-4660-a871-0178227e09c2/1/VpeICcUPAUHCWRVJugcn_fYLGFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/914749-8c02-4660-a871-0178227e09c2/1/VpeICcUPAUHCWRVJugcn_fYLGFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VpeICcUPAUHCWRVJugcn_fYLGFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 10:02:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:33:1e:82:bd:15:7f:83:8f:13:7b:80:b5:b8:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56978809c50f0141c2591549ba0727fdf60b1850
Validity
Not Before: Jan 1 08:30:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=109b455b320f3777efd2367016ec05cadcf7c818
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:6c:45:cb:f9:02:c5:b3:06:db:29:eb:40:da:
1c:af:26:46:15:96:fa:53:18:b1:0f:cf:29:8c:18:
35:d6:96:91:91:3f:5e:e1:a4:e5:f2:5f:d1:fa:67:
2f:ef:18:79:88:48:eb:dc:02:c2:13:0a:ab:31:2e:
43:34:78:33:4e:71:10:19:a1:d2:eb:7a:2e:0b:2d:
ad:6f:10:4c:02:f0:38:d4:d4:f0:30:c3:67:d0:36:
d2:99:f1:a8:bb:4a:9e:e0:04:bf:b6:a6:6e:0d:d5:
55:06:ca:ab:eb:6f:c7:c4:70:73:1a:74:35:1b:a1:
15:74:89:b6:fe:70:34:7a:0d:47:54:79:35:65:31:
31:ab:d4:41:80:51:af:a2:e6:1e:51:bb:03:b4:f4:
ab:18:65:8e:d9:98:d7:e8:fa:a2:88:55:a6:5b:32:
ca:8b:d0:6d:5d:c6:e2:4e:e8:d1:b3:9f:0b:5b:d1:
97:7a:45:8b:d7:db:8e:47:b0:d9:8b:a8:fb:1c:1f:
4b:88:79:5f:02:70:72:83:97:75:e5:91:6c:78:25:
33:65:48:88:3e:4d:a4:95:f7:d8:2f:f8:bf:b8:66:
03:2a:18:b3:8e:a4:b4:de:bc:9a:eb:5d:a9:fb:e8:
b9:b2:fa:3a:d2:f3:fe:d8:cf:1c:ce:db:4d:21:5c:
87:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:9B:45:5B:32:0F:37:77:EF:D2:36:70:16:EC:05:CA:DC:F7:C8:18
X509v3 Authority Key Identifier:
keyid:56:97:88:09:C5:0F:01:41:C2:59:15:49:BA:07:27:FD:F6:0B:18:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VpeICcUPAUHCWRVJugcn_fYLGFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/914749-8c02-4660-a871-0178227e09c2/1/EJtFWzIPN3fv0jZwFuwFytz3yBg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/914749-8c02-4660-a871-0178227e09c2/1/VpeICcUPAUHCWRVJugcn_fYLGFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.130.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:10:1a:d3:d1:4e:45:39:25:75:88:de:bb:18:b9:be:d7:22:
fe:7b:48:50:a9:66:bd:dc:11:be:1b:98:b6:63:b7:79:be:dd:
26:10:d3:78:65:2e:4c:eb:36:c1:21:a3:25:d8:9b:a7:ab:2e:
32:22:c9:30:3c:31:2d:a0:01:24:47:a4:52:d6:bf:37:60:4e:
e1:af:a7:1d:d3:b3:69:72:f7:b4:f4:70:02:da:38:e1:d7:70:
35:48:6d:df:90:e3:cf:28:c2:b7:44:2c:86:7b:17:db:6f:6d:
82:4d:12:5d:57:17:e5:82:44:5e:01:53:23:39:e4:5d:76:9b:
fd:4c:01:2f:26:4b:9a:1e:89:72:23:1d:57:f4:0a:d9:39:a0:
9e:1b:21:93:a5:2a:43:f7:be:a8:9a:72:2d:6b:9d:3d:d2:58:
92:2f:fd:0c:4e:cc:89:8e:91:34:69:cb:84:e4:92:0f:81:29:
fd:bc:71:9d:08:00:c2:cf:e5:ba:bc:76:2f:91:2a:29:bc:23:
ac:81:e9:16:94:31:1f:26:6f:2e:88:b6:fb:86:0b:af:e4:4c:
6e:b6:8b:a0:7c:a9:40:2c:87:b5:77:ba:63:e3:02:27:cc:e7:
04:9c:c8:cd:4d:a5:0d:28:09:d4:75:f5:3f:81:da:d2:a0:42:
e7:5b:20:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 12:45:08 2024 by rpki-client on console-fra.rpki-client.org