Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/EXAL6pHTAjBcMxmYS7wzSWm5EYs.roa
File: EXAL6pHTAjBcMxmYS7wzSWm5EYs.roa (raw, json)
Hash identifier: NY75d627bfyxCk+D/5EBDbxcYkLvIe5m+EZkfqct2d8=
Subject key identifier: 11:70:0B:EA:91:D3:02:30:5C:33:19:98:4B:BC:33:49:69:B9:11:8B
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 01929A2741E7975B9C2B19024C4476926A7A
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/EXAL6pHTAjBcMxmYS7wzSWm5EYs.roa
Signing time: Thu 17 Oct 2024 11:05:16 +0000
ROA not before: Thu 17 Oct 2024 11:05:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214348
IP address blocks: 213.226.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:9a:27:41:e7:97:5b:9c:2b:19:02:4c:44:76:92:6a:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Oct 17 11:05:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=11700bea91d302305c3319984bbc334969b9118b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ad:98:6d:af:5a:0a:20:32:ab:5b:ad:c6:1d:
3d:a8:e1:77:f5:d8:3a:43:f4:e7:52:64:bc:7d:5b:
e5:f4:90:9c:92:ee:51:70:4a:1c:ff:1c:5f:95:5f:
bd:fd:1d:af:d0:ce:1e:35:37:f8:68:05:30:ea:a2:
ae:51:02:23:cb:e6:b2:f7:b7:1e:d5:6b:ab:42:73:
ad:d8:43:c1:76:83:cd:69:02:6f:24:ca:5e:67:f8:
00:51:a1:78:4c:0d:96:4c:8f:08:af:0a:fe:2c:22:
38:f6:67:00:86:47:d1:e0:6c:0a:0d:24:99:0f:85:
33:43:e5:b9:bf:44:0c:13:6b:3a:78:db:ea:9a:11:
f7:32:3f:69:92:a8:45:0e:92:51:e9:fe:7e:7c:5d:
92:01:f9:ed:c9:ac:2c:00:32:be:71:df:a4:fa:fb:
f2:89:ab:ac:2a:b2:5a:9a:13:2b:89:da:98:ac:93:
a4:5d:13:98:ae:93:f8:01:bc:a0:66:80:f7:bf:60:
3f:8a:39:b3:97:05:c0:60:a2:fb:90:f3:c6:0d:6f:
c8:09:73:8d:dc:63:00:80:c7:23:80:92:27:9b:5f:
4f:13:e2:8e:fc:cf:61:73:a5:07:80:2c:9a:1b:00:
e0:f4:c2:39:e1:4e:fa:3d:73:91:e6:80:66:b8:0b:
2d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:70:0B:EA:91:D3:02:30:5C:33:19:98:4B:BC:33:49:69:B9:11:8B
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/EXAL6pHTAjBcMxmYS7wzSWm5EYs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.226.123.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:88:79:d1:d4:08:ce:e6:69:e4:c7:f0:6c:4d:51:25:0d:5d:
00:30:49:0b:a3:c8:c4:ce:60:58:d3:27:9b:8a:2c:ff:8a:ce:
25:85:c1:84:58:98:4b:ee:b9:e4:53:b0:57:5b:9b:6c:99:77:
5e:aa:bd:b4:cd:ee:17:d4:6f:7b:d7:3c:0c:6b:66:09:bd:2e:
93:68:93:3d:92:f1:51:57:28:0f:72:e5:2c:4c:49:2a:72:ed:
08:98:32:41:a2:89:13:24:37:e9:54:01:aa:76:00:a9:18:69:
61:c9:13:f6:ab:5e:ab:ec:d2:eb:94:88:28:b6:71:ad:2c:b2:
a7:b1:ea:1d:7e:f8:ce:5b:9f:b5:46:82:5f:46:63:3f:59:63:
d9:a4:ee:74:13:fa:de:31:99:5a:34:c3:a3:93:50:51:d4:a7:
b0:23:0e:2b:3f:be:35:41:70:91:9a:01:62:eb:b4:dc:79:d7:
5c:b4:05:d3:84:87:7f:25:a3:6d:7e:c9:be:41:5a:4c:78:33:
dd:03:d2:15:a7:c3:b6:50:7c:21:d8:92:ef:3b:58:e2:25:f5:
ee:e4:ef:12:25:c4:03:47:d9:5b:be:2c:60:58:6a:d3:86:76:
ca:04:e1:4e:dd:58:79:94:c1:88:e7:65:36:a4:af:3f:f6:92:
bd:af:1e:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:41:23 2024 by rpki-client on console-ams.rpki-client.org