Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/8eeGcQT2zLMy7wVgUfYeqFP6ZKE.roa
File: 8eeGcQT2zLMy7wVgUfYeqFP6ZKE.roa (raw, json)
Hash identifier: sLnBV1fQE5NbMtiVErtpDBryEwynDQfUbla2rHDC2g0=
Subject key identifier: F1:E7:86:71:04:F6:CC:B3:32:EF:05:60:51:F6:1E:A8:53:FA:64:A1
Certificate issuer: /CN=2ef957aba2ef00352850e202464c71d33ca81448
Certificate serial: 018CC49309BC1E7745D33366C9610F359120
Authority key identifier: 2E:F9:57:AB:A2:EF:00:35:28:50:E2:02:46:4C:71:D3:3C:A8:14:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/8eeGcQT2zLMy7wVgUfYeqFP6ZKE.roa
Signing time: Mon 01 Jan 2024 10:30:19 +0000
ROA not before: Mon 01 Jan 2024 10:30:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15557
IP address blocks: 193.54.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:09:bc:1e:77:45:d3:33:66:c9:61:0f:35:91:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ef957aba2ef00352850e202464c71d33ca81448
Validity
Not Before: Jan 1 10:30:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f1e7867104f6ccb332ef056051f61ea853fa64a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a9:bc:9b:f8:b4:cd:50:f5:74:54:c5:03:4f:
ab:79:0b:ba:25:02:9e:ca:20:c9:a1:d2:5f:04:c0:
f6:4e:a9:8e:13:85:f3:05:9a:e3:89:9d:0f:6e:12:
54:84:17:f1:61:46:73:62:8d:e3:70:c0:7d:20:85:
2b:32:e4:58:12:43:23:d3:55:26:89:1f:75:16:e4:
9c:89:ae:d0:af:0e:ee:78:4b:a7:43:a2:59:3c:19:
4a:79:a7:d1:cb:cb:b1:66:e4:78:73:8c:79:c4:d3:
bb:8f:2c:12:0e:f6:41:76:e9:ef:a1:b4:13:61:3a:
e5:13:0f:4b:61:cb:11:64:20:c0:37:b0:05:93:e9:
ad:ed:76:4f:aa:e0:86:5c:5e:b7:42:57:a5:33:b2:
43:84:5e:c8:bb:91:81:bb:06:c2:b9:2a:40:45:6b:
99:15:aa:fc:39:7b:ad:ed:d2:e2:28:9c:a9:25:9e:
3c:b6:dd:57:04:1d:86:0c:fa:e1:a8:4e:12:f2:56:
c1:38:34:ea:34:16:89:24:5f:0c:2d:df:3d:76:19:
f3:1a:59:e2:ed:d5:27:d9:4d:22:5d:5c:41:78:98:
b4:2f:53:05:0a:e4:5e:8a:3b:ae:14:12:d5:82:03:
f5:8c:41:36:1c:37:df:e2:e7:c9:7c:b5:c7:af:7a:
08:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:E7:86:71:04:F6:CC:B3:32:EF:05:60:51:F6:1E:A8:53:FA:64:A1
X509v3 Authority Key Identifier:
keyid:2E:F9:57:AB:A2:EF:00:35:28:50:E2:02:46:4C:71:D3:3C:A8:14:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/8eeGcQT2zLMy7wVgUfYeqFP6ZKE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.54.67.0/24
Signature Algorithm: sha256WithRSAEncryption
26:52:66:04:56:59:d9:4d:c6:47:ba:a1:89:29:8f:60:92:3f:
3b:e8:66:75:0d:b7:14:0a:05:9a:dd:9c:28:90:05:f2:5c:95:
a1:37:90:74:b2:c7:5e:3e:e7:e3:05:f9:50:6f:4d:f0:90:a8:
0f:b2:55:d3:96:bf:86:f6:d3:96:ff:f4:69:c2:f6:61:c5:c7:
3d:e3:58:6d:87:0c:b7:92:f1:01:d3:17:49:90:7a:4f:eb:7a:
9c:b0:c1:bb:7c:0c:80:9d:31:06:f9:54:86:e4:6c:77:11:e1:
86:90:72:10:a1:28:7b:c8:3a:85:1a:e3:02:db:c4:ff:b7:6c:
b0:d5:59:14:f2:42:e4:3b:9b:5e:7d:6c:31:2d:57:1a:cc:81:
22:63:a9:fa:c7:08:60:f3:dc:6e:bf:ae:eb:f6:67:e3:e9:b2:
fe:0b:f1:2a:97:74:0a:9c:a0:12:0b:41:f5:57:c0:d6:c7:2f:
5e:ce:fb:49:39:c2:4f:fb:fe:8f:3f:9f:e2:e8:44:c9:a2:78:
80:f3:5a:3e:34:79:3b:4a:84:40:61:fa:79:4b:89:8d:ce:8d:
54:2b:06:08:d0:2e:fe:40:25:d3:2f:3d:80:41:43:85:6d:5d:
70:81:cc:26:d6:8a:7f:d7:56:62:0e:d3:53:c9:f0:ea:f1:09:
d3:0e:13:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 05:57:49 2024 by rpki-client on console-fra.rpki-client.org