Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/E1Neqv8xQBn3BfjxhPqbUqbt6ro.roa
File: E1Neqv8xQBn3BfjxhPqbUqbt6ro.roa (raw, json)
Hash identifier: 2wPXg13daF7F8Z4bsyuRpFpJw3G4DZfxFp93KZpk7Us=
Subject key identifier: 13:53:5E:AA:FF:31:40:19:F7:05:F8:F1:84:FA:9B:52:A6:ED:EA:BA
Certificate issuer: /CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933
Certificate serial: 018CC72767790E80B2DB110227B01E68EBE4
Authority key identifier: 1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/E1Neqv8xQBn3BfjxhPqbUqbt6ro.roa
Signing time: Mon 01 Jan 2024 22:31:37 +0000
ROA not before: Mon 01 Jan 2024 22:31:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61338
IP address blocks: 89.174.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 19:51:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:67:79:0e:80:b2:db:11:02:27:b0:1e:68:eb:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933
Validity
Not Before: Jan 1 22:31:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=13535eaaff314019f705f8f184fa9b52a6edeaba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:bd:5d:5c:ac:e4:3f:18:22:41:bb:92:a5:41:
09:79:ec:3e:be:19:64:90:b3:02:56:6d:b0:84:16:
0d:ae:0f:73:0f:8a:ef:d3:fb:97:49:cd:cb:79:6d:
ae:31:32:69:2b:7f:b8:bf:9d:08:9d:fc:53:d4:8a:
2e:f1:94:30:2c:87:22:56:45:6c:fb:04:ec:5c:2f:
84:81:bb:24:e0:da:cb:3c:f2:a6:17:06:59:0c:bb:
31:e0:c1:b2:ee:af:be:07:d4:ed:42:0a:d5:a7:e8:
e3:34:ff:d8:9f:6f:91:85:69:df:0c:7a:39:33:3e:
ac:96:fe:f6:81:59:3a:1a:0b:83:b8:8a:89:46:b6:
ff:ca:a5:5b:2d:e6:dc:f9:96:e7:77:7e:4a:a1:f9:
27:fb:74:f2:01:c2:96:ea:d9:eb:ab:e2:a4:58:5c:
1b:89:c4:60:a2:70:5f:c0:d0:01:ad:87:3f:38:5b:
a3:b5:c4:33:f7:98:e5:e6:4f:71:e4:e9:0d:32:91:
17:a0:74:e7:ac:f6:75:f5:d5:3d:13:8d:af:29:20:
9c:39:ca:09:7a:e0:84:72:19:d4:ad:92:20:f8:ac:
19:11:21:90:40:cc:5e:45:a4:c2:33:fa:19:4e:4b:
0e:03:a5:17:2c:7c:09:4b:7c:1c:db:8a:08:b9:32:
0e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:53:5E:AA:FF:31:40:19:F7:05:F8:F1:84:FA:9B:52:A6:ED:EA:BA
X509v3 Authority Key Identifier:
keyid:1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/E1Neqv8xQBn3BfjxhPqbUqbt6ro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.174.163.0/24
Signature Algorithm: sha256WithRSAEncryption
22:8c:e8:9c:d3:42:9d:d1:30:f1:47:d6:60:99:15:fd:2d:72:
f2:b2:30:6b:ab:05:3a:4b:ae:ed:15:00:56:53:8f:30:21:18:
ad:ea:f3:d6:c6:ae:7e:0c:98:ee:69:dd:1a:5f:8f:f2:be:37:
2d:21:e5:ab:22:58:98:2f:6a:34:d7:69:b2:a4:f4:f2:27:8e:
a2:8d:a8:17:73:25:9d:92:47:09:96:c3:96:75:d9:31:e7:d2:
db:9a:ee:7a:8e:15:98:75:25:60:81:e1:7a:80:ad:ae:11:fc:
e8:55:39:e8:dc:b1:af:dc:89:50:f1:12:ab:81:d3:77:70:47:
34:2e:d6:70:76:e3:e8:ac:0e:6b:d3:7f:84:a1:6d:f0:64:c2:
e4:b1:22:8e:11:d2:22:80:93:2f:ad:9c:f2:9e:0b:1f:f4:02:
4b:8a:a5:95:33:8b:ad:04:a3:bf:20:c8:db:92:a6:de:57:cf:
75:f9:f0:0b:d6:60:f3:90:5e:69:5b:49:f4:0b:c2:7b:fa:76:
f9:a1:85:b5:87:e2:0b:2c:6a:16:45:63:9f:fa:70:80:03:c1:
98:0c:8e:fa:ce:69:72:0a:a7:bf:7e:a7:9a:66:fe:be:0a:11:
e7:1b:b2:11:a7:87:0d:28:47:e2:7f:bf:88:2f:87:00:af:32:
56:41:9a:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 01:56:05 2024 by rpki-client on console-fra.rpki-client.org