Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/E84j8zlDFeHPRR1U-FW-8sDIBi8.roa
File: E84j8zlDFeHPRR1U-FW-8sDIBi8.roa (raw, json)
Hash identifier: mDPqhvWRsekUtRnUYMsW6fJGjHkpksziipfGCk1Goko=
Subject key identifier: 13:CE:23:F3:39:43:15:E1:CF:45:1D:54:F8:55:BE:F2:C0:C8:06:2F
Certificate issuer: /CN=02cc691476a6e7895b0e456116444f91937bf01e
Certificate serial: 018CC8013BBCAF33B45777E62E3CBF6583B0
Authority key identifier: 02:CC:69:14:76:A6:E7:89:5B:0E:45:61:16:44:4F:91:93:7B:F0:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AsxpFHam54lbDkVhFkRPkZN78B4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/E84j8zlDFeHPRR1U-FW-8sDIBi8.roa
Signing time: Tue 02 Jan 2024 02:29:33 +0000
ROA not before: Tue 02 Jan 2024 02:29:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8319
IP address blocks: 195.158.32.0/19 maxlen: 24
194.153.151.0/24 maxlen: 24
212.218.0.0/16 maxlen: 24
195.250.48.0/24 maxlen: 24
2001:4cd8::/32 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.mft
rsync://rpki.ripe.net/repository/DEFAULT/AsxpFHam54lbDkVhFkRPkZN78B4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:3b:bc:af:33:b4:57:77:e6:2e:3c:bf:65:83:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02cc691476a6e7895b0e456116444f91937bf01e
Validity
Not Before: Jan 2 02:29:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=13ce23f3394315e1cf451d54f855bef2c0c8062f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:47:77:e3:2c:e0:92:8d:b7:88:72:01:e6:14:
fe:8a:30:ff:90:62:e9:eb:6d:99:c9:de:f8:44:19:
a4:55:25:b9:e5:3f:1e:35:d3:57:c8:5d:9f:c3:e2:
f1:67:5c:5f:5b:4e:59:53:89:74:ad:b5:12:4c:c6:
e5:10:38:e8:dc:0b:d3:0a:15:62:b4:5d:69:30:2d:
e5:80:d0:6b:ec:6a:b9:06:4a:6e:04:69:b5:fd:04:
66:fd:0e:64:c2:20:15:77:a3:09:fd:61:25:6a:51:
b3:65:88:02:c8:c6:37:63:10:84:c3:04:1d:14:e4:
3c:98:c3:b7:f4:36:98:59:f3:a3:59:29:80:67:bf:
de:7a:35:58:73:ff:ad:89:b2:66:c4:09:a4:d4:8a:
85:87:b7:9b:b9:7c:f1:e6:dd:3d:30:e6:d9:22:a5:
c7:a7:c5:25:de:ca:f2:e6:33:29:64:e6:4e:ee:b4:
a2:71:86:60:3f:76:f6:95:8e:05:7d:11:4f:08:5a:
53:65:e6:ed:bc:7e:80:10:8d:cc:55:74:1c:3a:92:
4f:e8:c0:09:fb:71:99:86:44:5d:c4:92:a6:26:76:
d9:68:61:be:c7:02:0d:77:f8:d7:3d:b2:c3:0b:c2:
8e:5b:c9:60:f3:1c:c3:84:41:1e:86:da:7e:22:b2:
ff:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:CE:23:F3:39:43:15:E1:CF:45:1D:54:F8:55:BE:F2:C0:C8:06:2F
X509v3 Authority Key Identifier:
keyid:02:CC:69:14:76:A6:E7:89:5B:0E:45:61:16:44:4F:91:93:7B:F0:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AsxpFHam54lbDkVhFkRPkZN78B4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/E84j8zlDFeHPRR1U-FW-8sDIBi8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.153.151.0/24
195.158.32.0/19
195.250.48.0/24
212.218.0.0/16
IPv6:
2001:4cd8::/32
Signature Algorithm: sha256WithRSAEncryption
80:5b:75:d7:c3:41:1a:0a:44:8b:53:64:e9:1c:f4:22:40:a8:
4e:8b:49:f2:56:49:03:cb:06:f2:c3:48:53:7d:79:8b:ed:06:
67:c7:c1:9d:95:c2:8f:c8:c0:0c:8d:f3:21:6b:1a:81:3d:a0:
d4:e6:83:8c:71:ec:9c:7f:a6:9a:2c:5f:b5:33:df:36:9a:fd:
55:4e:10:5e:e5:bf:51:ab:be:7f:6b:c3:a0:f8:4c:9e:a9:4f:
e3:de:c2:7c:a4:45:a5:f0:5e:e9:34:ba:0d:22:1c:13:4d:18:
0f:65:33:53:80:e0:93:be:d4:3e:80:e1:49:e0:a8:2f:ce:fa:
88:78:53:d9:a7:77:0c:e4:d3:5a:78:3c:47:87:48:c4:c3:21:
c9:85:1a:42:d9:cf:64:3f:80:47:22:8c:32:5e:d3:77:a3:dd:
50:9d:d1:21:57:ea:e6:dd:83:23:59:0c:6c:79:8b:ff:77:79:
69:0b:45:9c:9a:16:27:21:2c:7a:d8:21:52:bd:14:9a:c5:7c:
16:3c:02:11:f6:08:f3:5f:f0:0f:28:4b:00:0d:3c:c7:2f:17:
a4:8c:0f:4f:4b:21:29:ce:50:7f:f9:8b:30:83:94:39:fa:c4:
dc:bd:5e:b2:9b:81:3a:c4:57:76:4c:41:0f:81:48:0c:b4:06:
b4:a9:41:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:32:08 2024 by rpki-client on console-ams.rpki-client.org