Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/EcaO1c3XlY2eOSjBVYYIVia73HE.roa
File: EcaO1c3XlY2eOSjBVYYIVia73HE.roa (raw, json)
Hash identifier: DGRzc/pulNvDEfEq1lgkSnuGnuGwIR+wJRZXhfj8VEk=
Subject key identifier: 11:C6:8E:D5:CD:D7:95:8D:9E:39:28:C1:55:86:08:56:26:BB:DC:71
Certificate issuer: /CN=9301ea05963c9756f28ee2e98b8f3cc479dc9f58
Certificate serial: 018CC79544653D0EDD5DF3F82AE1E41E806C
Authority key identifier: 93:01:EA:05:96:3C:97:56:F2:8E:E2:E9:8B:8F:3C:C4:79:DC:9F:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kwHqBZY8l1byjuLpi488xHncn1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/EcaO1c3XlY2eOSjBVYYIVia73HE.roa
Signing time: Tue 02 Jan 2024 00:31:37 +0000
ROA not before: Tue 02 Jan 2024 00:31:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 185.176.101.0/24 maxlen: 24
185.176.100.0/24 maxlen: 24
185.176.103.0/24 maxlen: 24
185.176.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/kwHqBZY8l1byjuLpi488xHncn1g.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/kwHqBZY8l1byjuLpi488xHncn1g.mft
rsync://rpki.ripe.net/repository/DEFAULT/kwHqBZY8l1byjuLpi488xHncn1g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 16:59:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:44:65:3d:0e:dd:5d:f3:f8:2a:e1:e4:1e:80:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9301ea05963c9756f28ee2e98b8f3cc479dc9f58
Validity
Not Before: Jan 2 00:31:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=11c68ed5cdd7958d9e3928c15586085626bbdc71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:4e:41:53:fc:af:a7:ca:ef:e1:2d:2a:92:13:
80:df:fb:59:cf:b5:df:73:33:ee:f5:71:58:a2:05:
d6:50:50:9e:ae:ac:b5:4b:11:90:61:40:ab:93:72:
0a:21:cf:5b:4d:e0:ff:e8:47:69:82:2c:90:a1:d9:
bf:e7:75:04:59:bd:3f:18:ce:5a:ca:5a:fb:80:ac:
ac:f3:8b:00:ab:a6:e1:2c:92:cb:ef:2f:56:a4:02:
7f:6a:ed:dc:2e:ca:24:30:58:2f:de:95:74:ae:05:
17:f1:e4:17:32:63:bb:d5:b1:6d:e7:7a:a4:30:58:
d6:f6:c1:f7:1a:cb:88:77:1c:c2:e4:1b:c6:46:9e:
dd:4a:05:c5:5e:00:28:41:a9:2d:a4:a1:5b:74:38:
fb:3b:6a:2e:04:63:94:5d:a7:9c:a4:6e:ae:e9:23:
c0:21:eb:87:0a:20:23:f8:de:b1:15:20:f8:db:f2:
9e:d3:e6:9d:62:d3:b1:9b:a6:c3:e8:af:4a:87:b3:
4e:00:4c:e1:44:32:f0:d5:71:dd:04:0f:8c:8a:f5:
43:66:58:ba:c4:52:a2:e0:9a:5f:1f:bf:ac:3e:6e:
e8:f0:2f:3f:6a:a8:b5:93:21:6f:68:ba:97:3a:3e:
eb:ff:44:0e:99:7d:08:5d:ea:dd:81:e4:50:d8:87:
cf:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:C6:8E:D5:CD:D7:95:8D:9E:39:28:C1:55:86:08:56:26:BB:DC:71
X509v3 Authority Key Identifier:
keyid:93:01:EA:05:96:3C:97:56:F2:8E:E2:E9:8B:8F:3C:C4:79:DC:9F:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwHqBZY8l1byjuLpi488xHncn1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/EcaO1c3XlY2eOSjBVYYIVia73HE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/kwHqBZY8l1byjuLpi488xHncn1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.176.100.0/22
Signature Algorithm: sha256WithRSAEncryption
63:a4:a4:2f:dc:f5:9d:eb:66:78:4f:5f:14:aa:43:98:a1:5a:
8c:e6:d4:dd:b6:bf:b7:19:dd:2b:d5:2a:d9:67:96:9d:f7:de:
e0:75:3c:fa:fd:56:4b:3a:81:bf:3b:96:47:9b:e9:61:df:3f:
52:53:ea:66:ee:bc:3c:84:b8:6b:29:15:30:43:73:47:3b:aa:
e8:56:8e:70:f9:cb:cd:dd:dd:27:27:95:55:ab:d1:4b:20:0a:
1e:23:d1:ee:12:a6:d4:3e:05:eb:5c:91:d8:86:56:4a:5f:d0:
cd:17:be:b1:56:b4:e5:81:20:b0:68:cb:f4:37:97:52:49:e0:
81:35:3e:ee:72:21:9a:ca:6c:35:a0:46:35:20:d3:94:ef:af:
63:a5:60:e1:f9:37:79:5c:f9:3c:2a:78:b9:b6:94:38:42:2d:
ca:39:1a:90:02:24:8a:6e:4a:79:10:41:8a:06:db:ab:db:57:
37:8a:ef:fa:0a:b7:64:71:f6:ad:d3:0f:72:9a:c8:2d:83:80:
c8:51:80:65:c1:78:22:b2:79:56:6e:80:21:ed:fe:ea:93:0c:
c0:e3:c9:a8:ad:05:e9:b9:dd:cc:da:59:81:96:d0:30:6d:a0:
05:6b:4c:df:91:00:d5:71:ef:47:7e:fe:5c:3c:59:95:4d:7a:
2b:3d:73:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 22:21:01 2024 by rpki-client on console-fra.rpki-client.org