Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/EoYXSB4HKFYC-FYY3Mst6AYKLcw.roa
File: EoYXSB4HKFYC-FYY3Mst6AYKLcw.roa (raw, json)
Hash identifier: wqbwAewAQRHrp0qD0Us+W4AaLQTUUUSuUjpO6V1HGx0=
Subject key identifier: 12:86:17:48:1E:07:28:56:02:F8:56:18:DC:CB:2D:E8:06:0A:2D:CC
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 01904ED621AE0C77905BD446485D673D409D
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/EoYXSB4HKFYC-FYY3Mst6AYKLcw.roa
Signing time: Tue 25 Jun 2024 09:59:34 +0000
ROA not before: Tue 25 Jun 2024 09:59:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211159
IP address blocks: 151.237.19.0/24 maxlen: 24
151.237.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.mft
rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 08:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:4e:d6:21:ae:0c:77:90:5b:d4:46:48:5d:67:3d:40:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Jun 25 09:59:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=128617481e07285602f85618dccb2de8060a2dcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:08:1b:67:2e:4a:c0:13:21:d9:e9:93:8a:db:
b8:df:e4:dd:c7:b5:7d:a2:4e:15:81:6f:14:ec:68:
75:d9:3d:99:b0:92:96:de:3f:71:42:68:44:cd:e8:
a0:0a:4c:d6:8d:60:73:e3:81:4e:c6:8f:ee:aa:69:
5f:95:65:76:97:35:6c:11:93:9c:8f:17:a0:c3:07:
19:db:e0:51:d6:16:8c:a2:1b:b8:1e:d6:e7:b4:d9:
f5:c1:19:d2:5f:ab:37:70:f3:a8:ec:00:9c:d1:15:
c0:32:4a:19:da:b6:be:12:92:cb:94:0e:60:b9:7c:
ed:ef:bd:fc:b5:95:c6:48:38:03:d9:6a:b1:74:e2:
87:48:48:b6:b0:9e:cf:d3:46:92:e9:b3:a8:84:5b:
1b:11:f6:05:0d:eb:82:e2:27:d5:f8:96:e8:12:e0:
99:a0:d9:ba:5f:ed:19:14:2b:e4:a0:0f:cd:41:64:
3a:92:b4:a2:88:57:ff:7a:d9:ca:2d:5c:41:37:48:
88:e5:b5:92:b5:3e:c8:b3:bb:9e:e9:f7:b6:b6:02:
ba:27:f0:8d:54:b3:e2:04:1c:65:19:fb:c7:f1:c7:
63:30:d3:99:cb:7f:15:be:44:b1:f2:32:85:e6:74:
c1:a0:2b:ab:7a:12:db:90:e5:81:5e:ce:de:08:0a:
36:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:86:17:48:1E:07:28:56:02:F8:56:18:DC:CB:2D:E8:06:0A:2D:CC
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/EoYXSB4HKFYC-FYY3Mst6AYKLcw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.237.19.0/24
151.237.24.0/24
Signature Algorithm: sha256WithRSAEncryption
05:b3:a9:41:66:53:59:dd:a9:12:29:c6:9d:06:e4:45:d8:8e:
58:4b:39:98:d7:76:5a:13:35:95:a5:a4:0c:44:bf:7c:c3:f6:
46:d6:cb:78:37:fd:49:a7:04:cb:c3:4e:99:c9:07:37:22:3a:
86:5a:bc:b4:c5:08:ab:e9:4a:6b:54:9f:06:07:a8:32:0c:d9:
0e:ef:80:3b:ab:13:5d:ba:fe:5f:2a:e5:68:c8:82:b0:96:41:
53:9b:ee:da:9c:89:71:a8:a2:38:b7:18:b0:5c:ea:0f:2c:41:
41:1c:e5:ef:68:21:b5:69:59:b7:4d:33:75:97:5e:2a:35:5a:
c1:6a:7e:89:0d:b2:20:7a:5b:08:e2:f3:65:c7:aa:56:25:26:
79:24:62:9c:56:b9:74:ca:16:3b:24:56:af:cb:f8:9d:18:fc:
cd:16:c2:55:51:24:6c:a7:df:43:a7:86:c5:90:cb:f7:ac:39:
14:d5:b9:cf:37:6e:69:45:c0:1f:41:19:e5:1b:b2:3e:2b:1d:
16:78:b7:2d:76:33:a8:5f:e5:57:26:e9:24:ca:c1:85:e9:29:
31:df:3a:35:d0:ae:77:49:e3:d8:14:2b:f1:2c:ad:68:96:a4:
f5:1b:2c:87:fd:06:8a:45:ab:73:9f:ce:bf:c0:03:28:cf:97:
a2:15:b5:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:58:42 2024 by rpki-client on console-ams.rpki-client.org