Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/EjaKu9A8ytJrDZBb5RSqEGM4RQg.roa
File: EjaKu9A8ytJrDZBb5RSqEGM4RQg.roa (raw, json)
Hash identifier: ksBqabwMkSHN5pHlTf/c6t4+5eBxDWXI9QfkIMb6xh0=
Subject key identifier: 12:36:8A:BB:D0:3C:CA:D2:6B:0D:90:5B:E5:14:AA:10:63:38:45:08
Certificate issuer: /CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Certificate serial: 018EA3DABC48F8A3EE63E9956D9286C1A913
Authority key identifier: E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/EjaKu9A8ytJrDZBb5RSqEGM4RQg.roa
Signing time: Wed 03 Apr 2024 12:06:44 +0000
ROA not before: Wed 03 Apr 2024 12:06:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215702
IP address blocks: 78.28.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:a3:da:bc:48:f8:a3:ee:63:e9:95:6d:92:86:c1:a9:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Validity
Not Before: Apr 3 12:06:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=12368abbd03ccad26b0d905be514aa1063384508
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:2a:b2:17:48:71:2f:48:a0:f8:4b:6a:c0:d6:
92:33:51:3b:4a:5b:00:cf:3c:62:e1:70:40:7b:66:
14:cf:8b:5b:70:d5:a9:6d:68:28:32:94:c8:cb:b0:
8a:0f:65:46:28:4b:31:fb:ce:59:72:1b:4b:6f:1e:
25:2f:35:d5:c7:e0:fe:90:54:96:91:73:43:72:14:
d9:41:6d:30:40:95:34:5d:a2:49:ac:6b:c0:a5:f3:
d8:eb:26:ea:f8:62:4f:b9:ad:05:92:e7:d0:41:95:
67:60:86:3f:b6:81:80:46:f9:09:82:1f:c7:1d:16:
6f:01:2b:3e:47:95:57:39:73:fa:a4:45:a1:42:42:
8c:fe:a4:a3:a3:95:3a:f1:25:6c:72:35:6c:90:8b:
2c:6a:48:2c:11:19:c5:6a:39:cd:f8:99:e3:1b:29:
1b:b4:07:c8:de:78:26:9e:96:2b:cf:0a:30:9f:a5:
91:03:97:80:38:61:45:72:d3:24:c0:36:58:5a:b8:
cf:80:94:1d:ce:f3:25:7a:b1:39:69:cb:7f:d8:31:
78:ba:7f:9a:b3:22:92:85:15:49:bd:84:8b:80:51:
12:c9:7b:d8:b9:f7:e4:c8:08:ae:23:54:fd:4c:0c:
e3:53:fd:70:4f:06:42:b9:62:08:f4:d1:a7:43:6d:
8c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:36:8A:BB:D0:3C:CA:D2:6B:0D:90:5B:E5:14:AA:10:63:38:45:08
X509v3 Authority Key Identifier:
keyid:E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/EjaKu9A8ytJrDZBb5RSqEGM4RQg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.28.234.0/24
Signature Algorithm: sha256WithRSAEncryption
88:bb:de:0b:94:3f:40:79:ee:d5:b7:15:8f:dd:eb:dc:2d:61:
72:be:d0:b6:3d:fd:d5:18:4c:b9:52:8e:0f:90:6a:2a:91:2c:
bb:cf:3a:bf:b3:a7:13:ff:75:26:d4:2e:fa:01:b4:8d:c1:2e:
26:86:03:4d:d5:8a:fe:43:08:cd:20:33:24:bd:9b:ec:8c:05:
f7:60:33:54:7f:52:49:06:6f:cd:b4:c9:65:e9:6a:d3:91:4e:
ec:6c:bf:3a:74:d9:bf:49:8b:fe:f7:33:bf:ed:24:b6:68:c3:
c7:c4:28:a4:9e:d7:15:0b:01:ee:87:b8:91:d0:bb:7c:1a:57:
be:85:77:e2:b9:be:7f:6c:94:81:79:08:c7:3f:c5:80:59:c8:
94:a6:f6:87:1c:fd:72:b2:c9:3b:bf:f0:08:a5:63:b0:c5:01:
5a:b4:95:da:27:1e:f7:0a:66:cf:1d:68:2a:da:dc:3a:72:3d:
89:6a:71:cd:af:6b:bd:43:88:28:2d:3d:3c:eb:ad:a0:4e:0a:
25:6b:47:fb:7c:2d:d2:c2:f1:bb:8c:0d:6e:e4:fd:bb:18:3a:
7f:56:d4:c7:7a:1e:97:ba:e0:0b:44:b6:05:8e:a6:16:f8:bd:
0d:59:75:2b:0c:16:ec:fe:ec:38:11:2c:e6:bc:2f:62:93:9b:
b4:e2:e8:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 20:24:49 2024 by rpki-client on console-ams.rpki-client.org