Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/64f539-feda-49fc-a922-201d5a9bb8aa/1/eslv8uAl8GrHJm6zRkjM4o4I8Fo.roa
File: eslv8uAl8GrHJm6zRkjM4o4I8Fo.roa (raw, json)
Hash identifier: AhGLjbkivIvKiyJBY8bZR41y7G9BWCXdRzR5HLr5SoU=
Subject key identifier: 7A:C9:6F:F2:E0:25:F0:6A:C7:26:6E:B3:46:48:CC:E2:8E:08:F0:5A
Certificate issuer: /CN=1d1c52f1552f6ea0f064d7a3b79db5c1cf166bd0
Certificate serial: 018CC2DACE98A539127F628C8D4EF532678E
Authority key identifier: 1D:1C:52:F1:55:2F:6E:A0:F0:64:D7:A3:B7:9D:B5:C1:CF:16:6B:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HRxS8VUvbqDwZNejt521wc8Wa9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/64f539-feda-49fc-a922-201d5a9bb8aa/1/eslv8uAl8GrHJm6zRkjM4o4I8Fo.roa
Signing time: Mon 01 Jan 2024 02:29:28 +0000
ROA not before: Mon 01 Jan 2024 02:29:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2202
IP address blocks: 193.56.111.0/24 maxlen: 24
193.56.108.0/24 maxlen: 24
193.56.109.0/24 maxlen: 24
193.56.110.0/24 maxlen: 24
193.56.229.0/24 maxlen: 24
193.56.230.0/24 maxlen: 24
193.56.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/64f539-feda-49fc-a922-201d5a9bb8aa/1/HRxS8VUvbqDwZNejt521wc8Wa9A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/64f539-feda-49fc-a922-201d5a9bb8aa/1/HRxS8VUvbqDwZNejt521wc8Wa9A.mft
rsync://rpki.ripe.net/repository/DEFAULT/HRxS8VUvbqDwZNejt521wc8Wa9A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 May 2024 17:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:ce:98:a5:39:12:7f:62:8c:8d:4e:f5:32:67:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d1c52f1552f6ea0f064d7a3b79db5c1cf166bd0
Validity
Not Before: Jan 1 02:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7ac96ff2e025f06ac7266eb34648cce28e08f05a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e2:e3:1a:87:bb:1b:e4:cb:32:86:df:12:bb:
26:d8:26:28:35:44:c4:2e:0f:81:57:8d:63:6e:df:
bd:81:b8:fa:74:8f:48:24:07:8d:5f:05:9b:ab:dc:
e6:b1:cc:a6:0a:5d:63:da:8b:3f:13:f2:a3:fc:58:
2e:4e:1f:31:cb:bb:51:03:23:ce:a8:a1:eb:3e:c8:
84:de:01:e9:4b:f5:57:2a:2b:29:4d:e8:4f:20:9e:
90:2c:85:6c:2d:8c:39:84:80:fa:26:b4:51:b5:14:
da:1c:9b:e1:fc:3b:ca:9c:00:93:80:2a:bf:7e:e3:
2b:ca:47:54:58:90:de:f4:4f:0b:a5:34:05:aa:a9:
9e:33:f9:48:13:3f:9a:6f:a2:8a:2b:cc:9b:68:e5:
f7:43:b2:c2:6a:47:26:fb:8c:87:ff:59:f5:53:76:
bd:80:76:6d:06:86:4f:02:dc:df:7d:1c:31:00:89:
56:b9:c9:36:94:74:04:49:ff:07:63:a1:3c:11:3c:
62:80:c8:ad:9b:ae:75:6f:46:68:fb:57:31:d2:e9:
0f:3b:35:73:b8:44:a3:05:e6:31:ce:b6:b6:e1:1f:
25:6e:1e:6d:8b:ee:22:39:ea:63:65:79:d7:88:07:
01:f4:3f:fc:be:0d:d3:eb:98:3a:2a:f3:d6:ce:56:
a1:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:C9:6F:F2:E0:25:F0:6A:C7:26:6E:B3:46:48:CC:E2:8E:08:F0:5A
X509v3 Authority Key Identifier:
keyid:1D:1C:52:F1:55:2F:6E:A0:F0:64:D7:A3:B7:9D:B5:C1:CF:16:6B:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HRxS8VUvbqDwZNejt521wc8Wa9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/64f539-feda-49fc-a922-201d5a9bb8aa/1/eslv8uAl8GrHJm6zRkjM4o4I8Fo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/64f539-feda-49fc-a922-201d5a9bb8aa/1/HRxS8VUvbqDwZNejt521wc8Wa9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.56.108.0/22
193.56.228.0-193.56.230.255
Signature Algorithm: sha256WithRSAEncryption
62:ec:71:c8:18:a2:93:a4:ab:3f:b5:19:43:ea:83:45:f2:93:
32:1f:36:0e:43:0d:ff:62:f2:9b:1d:88:aa:23:38:bd:d2:b7:
21:b9:ff:39:d9:16:9c:e6:f4:54:72:9a:2d:27:c5:36:5b:8f:
51:3b:2c:d1:61:78:ce:76:aa:0a:ff:c3:23:7d:65:d5:a5:6b:
60:fd:cf:0f:a6:15:8a:9a:90:c8:67:57:5e:36:17:13:90:7e:
77:71:7e:d8:e5:70:8f:b7:48:03:b5:39:99:79:82:9e:11:0f:
d7:99:ab:45:f7:35:5a:a1:a9:85:d6:09:f3:3e:f0:42:0e:a6:
9d:90:f0:c6:f9:a4:16:2c:3c:42:91:9d:0f:75:54:c4:be:77:
f1:6f:4c:a1:7f:59:bd:80:a1:60:d9:08:86:55:93:60:8d:41:
ee:e7:3c:d6:fa:0f:17:86:9e:fe:56:97:d1:aa:b4:3b:5c:da:
aa:12:b4:5f:38:7f:5b:18:86:f3:72:b0:e7:b4:7f:bb:94:15:
af:22:2f:6f:0d:b4:f4:66:52:1e:63:d0:e8:48:ee:04:b7:ed:
8b:bb:cc:66:ef:7f:6c:1e:cf:13:a2:1d:96:a6:5c:c6:00:76:
a3:62:62:70:63:c6:70:59:17:1c:2f:a6:16:dd:92:26:1f:7f:
0f:57:5e:85
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon May 27 02:13:53 2024 by rpki-client on console-fra.rpki-client.org