Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/ekiSWTuvT1_BXdaMGPSlfya8tIA.roa
File: ekiSWTuvT1_BXdaMGPSlfya8tIA.roa (raw, json)
Hash identifier: 8ReFt2setwXyAus2R65oML27BHNFA2UVVIPXMeAN1Cg=
Subject key identifier: 7A:48:92:59:3B:AF:4F:5F:C1:5D:D6:8C:18:F4:A5:7F:26:BC:B4:80
Certificate issuer: /CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933
Certificate serial: 018CC72764F9ABC6FD52829BB87696C50C2D
Authority key identifier: 1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/ekiSWTuvT1_BXdaMGPSlfya8tIA.roa
Signing time: Mon 01 Jan 2024 22:31:36 +0000
ROA not before: Mon 01 Jan 2024 22:31:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42402
IP address blocks: 195.94.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 04:53:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:64:f9:ab:c6:fd:52:82:9b:b8:76:96:c5:0c:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933
Validity
Not Before: Jan 1 22:31:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7a4892593baf4f5fc15dd68c18f4a57f26bcb480
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ed:0b:d3:d6:f6:9b:89:fb:ad:ed:c9:b4:b4:
07:1e:ca:af:1d:97:5b:63:28:8b:32:d0:7f:3c:c7:
4f:75:8f:de:b8:7f:97:f9:7e:32:79:5d:96:24:6a:
6b:85:a6:14:87:48:d0:ba:f8:82:bf:b6:4a:d3:1d:
df:46:af:5e:fa:03:76:28:03:68:31:c6:52:e1:f1:
2a:b7:d9:68:1b:91:13:e3:f9:af:0c:ae:92:ee:d7:
9a:54:3c:dd:1b:cf:0f:cb:40:6f:8a:49:87:90:58:
22:ac:74:5a:12:ec:c9:8d:2c:92:1c:b6:39:08:9c:
35:d1:fc:97:d1:fa:11:80:53:53:4e:58:40:54:32:
e2:a2:fe:a4:03:29:bf:9a:b3:bc:18:e0:22:db:14:
d4:7e:0c:48:fb:b2:9c:f4:ab:25:aa:18:b9:9a:47:
7a:4b:24:d9:0b:f4:02:24:56:e9:88:af:c1:90:f7:
60:43:dd:f6:35:a0:80:fe:cc:5a:f8:74:3c:c6:29:
f0:14:64:2a:9d:d5:58:e7:e2:56:69:80:f7:b4:d3:
0b:5e:99:3e:fa:1c:10:6f:06:01:ff:f1:5b:3a:29:
40:e5:7e:4f:44:a6:8a:af:87:f6:40:f4:ff:25:fa:
b4:60:16:ee:f7:dc:14:a9:3b:af:0b:32:0d:33:f3:
f6:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:48:92:59:3B:AF:4F:5F:C1:5D:D6:8C:18:F4:A5:7F:26:BC:B4:80
X509v3 Authority Key Identifier:
keyid:1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/ekiSWTuvT1_BXdaMGPSlfya8tIA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.94.202.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:eb:07:8d:a2:7f:38:10:73:ad:f0:dc:a7:02:16:b5:f4:e7:
e1:f2:17:86:c3:a3:3a:5a:a1:15:35:0f:81:04:c3:13:a6:52:
b7:95:ae:3f:1d:9b:21:09:25:31:a4:c8:35:e4:77:ff:e7:7a:
16:8a:17:c4:bd:1a:ef:04:6a:48:20:0a:4a:30:dc:51:a0:cf:
77:a2:f9:7d:a4:aa:73:ff:8e:bf:89:8e:ac:06:ff:36:a8:a1:
02:78:e3:a4:a1:3b:5e:85:b5:b3:67:ac:aa:8e:74:94:6a:5b:
33:ce:f4:97:71:ed:fd:7c:d9:af:b8:ed:4d:2e:c4:08:45:3b:
e7:11:38:b1:2b:54:0d:c9:c6:1e:03:a0:48:08:4a:f9:6b:8b:
0e:2b:9c:b5:81:e5:fd:92:3e:bc:80:fe:df:86:10:c2:fa:23:
67:29:d0:3d:e7:b0:69:3e:30:49:75:98:c4:88:ff:31:48:2c:
7a:8b:8e:23:89:2c:f8:62:4a:1b:3e:95:7e:62:7c:b8:1a:a2:
97:bf:19:20:cb:63:42:d7:43:97:98:d4:a3:75:18:be:12:b8:
4e:99:23:98:fd:dd:35:c7:df:21:b3:d8:e4:ac:8b:eb:ef:e9:
d8:4c:06:6d:59:f0:8d:50:93:13:27:05:df:e7:82:29:8e:40:
9a:44:f3:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 07:49:19 2024 by rpki-client on console-fra.rpki-client.org