Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/EKJ7jnCLSDS6PQQXIRnRLVudmVA.roa
File: EKJ7jnCLSDS6PQQXIRnRLVudmVA.roa (raw, json)
Hash identifier: +9xTh15zNV1mygKUudwT6eULf1YfQyQKBjqk/p1opJg=
Subject key identifier: 10:A2:7B:8E:70:8B:48:34:BA:3D:04:17:21:19:D1:2D:5B:9D:99:50
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 018CC6B9334A90C2E02D88CCDB5F36C53D32
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/EKJ7jnCLSDS6PQQXIRnRLVudmVA.roa
Signing time: Mon 01 Jan 2024 20:31:15 +0000
ROA not before: Mon 01 Jan 2024 20:31:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34577
IP address blocks: 85.187.19.0/24 maxlen: 24
85.187.19.5/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.mft
rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 07:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:33:4a:90:c2:e0:2d:88:cc:db:5f:36:c5:3d:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Jan 1 20:31:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=10a27b8e708b4834ba3d04172119d12d5b9d9950
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:65:72:3a:7b:c3:4d:7f:6c:36:71:c1:d3:94:
56:36:d3:c3:40:30:5e:6f:0f:66:e7:8c:56:8a:3c:
6c:76:02:a3:69:3c:e6:51:12:5e:7e:53:bb:ea:20:
a7:0c:e9:52:48:5d:aa:f2:ad:1e:5d:24:54:b5:fd:
2c:a0:83:4e:09:ba:80:f9:b7:c2:1e:4d:4a:46:0b:
7f:2d:e2:d7:26:0f:a3:0f:8e:64:76:63:d2:50:e4:
e5:97:16:86:dc:41:e0:e8:9e:de:02:8f:87:fd:f5:
57:c2:f9:51:73:16:4f:61:13:59:f3:85:8e:f4:f8:
2b:59:49:a4:b1:29:5d:be:c2:55:c1:72:c1:ba:81:
67:e3:b0:43:6c:9e:73:ed:b7:9e:72:d0:c2:1b:86:
04:48:6c:91:e9:f2:ed:ed:51:48:83:5f:9d:b2:f0:
53:7b:d4:b7:6f:30:a7:7d:06:f2:0a:1b:a2:99:81:
2e:a3:81:24:cb:58:9d:5e:3e:43:db:55:5c:ac:3f:
9c:1c:f2:44:02:60:53:40:47:6d:52:22:2d:e9:59:
fb:54:3a:f3:48:22:48:9e:bc:3a:b6:8f:76:2b:33:
ad:07:22:16:7a:66:63:b4:a7:ad:b3:0c:32:e8:e8:
13:20:4c:fb:74:38:99:49:d3:4c:22:50:f7:44:6d:
a6:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:A2:7B:8E:70:8B:48:34:BA:3D:04:17:21:19:D1:2D:5B:9D:99:50
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/EKJ7jnCLSDS6PQQXIRnRLVudmVA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.187.19.0/24
Signature Algorithm: sha256WithRSAEncryption
97:7c:ed:f4:d6:7a:5f:6b:9b:47:75:0b:63:ea:d9:23:68:b0:
84:57:92:5c:ec:bd:cf:11:84:d5:96:d9:1c:ea:11:31:28:be:
9a:a1:ae:9c:52:65:de:bc:08:63:cd:01:3f:02:5d:cf:12:10:
bd:da:03:97:a4:6f:76:9c:7d:5d:0b:84:8c:21:22:98:08:73:
85:d7:bb:e5:2a:5b:d4:a8:4f:03:90:6a:25:0e:12:de:2a:79:
12:5e:1e:34:eb:ac:d4:51:c5:1c:e5:cd:a2:81:88:66:ae:2f:
be:97:e4:d3:56:80:71:00:8e:5f:53:32:24:74:54:76:e6:37:
eb:07:72:01:02:3b:98:1f:c5:1a:77:3d:ea:bb:d5:67:c0:8b:
c1:42:25:20:a0:19:5f:55:16:42:71:9c:5f:9c:c1:64:37:10:
54:aa:de:ce:80:ae:1c:43:33:3c:13:3e:e0:79:94:41:c2:a3:
db:9c:26:3e:90:f3:9c:75:e7:ec:c5:76:1b:a5:e7:20:38:61:
b1:35:25:8f:59:00:62:2d:03:33:c2:62:22:d9:5e:c9:45:60:
7f:11:c0:66:7f:19:75:76:87:d4:cf:0f:48:28:f3:bb:b5:99:
c7:a4:9f:6e:f5:f9:b5:fd:04:ad:88:0a:10:db:b3:53:a9:9f:
be:5d:75:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 12:10:15 2024 by rpki-client on console-fra.rpki-client.org