Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/eb063f-4c3c-4971-ae50-66482071b819/1/EArKcPZP09K0hLLrUW6KAoDh8AA.roa
File: EArKcPZP09K0hLLrUW6KAoDh8AA.roa (raw, json)
Hash identifier: xG9ThQV5JHWAv9r6rsWyOfbBC/cD+v7kaWLc39UzePc=
Subject key identifier: 10:0A:CA:70:F6:4F:D3:D2:B4:84:B2:EB:51:6E:8A:02:80:E1:F0:00
Certificate issuer: /CN=8693dfee1768739eb5976c245b5ad005b3258ec6
Certificate serial: 018CC5DC2D058B741AC3A872C59A877C7D08
Authority key identifier: 86:93:DF:EE:17:68:73:9E:B5:97:6C:24:5B:5A:D0:05:B3:25:8E:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hpPf7hdoc561l2wkW1rQBbMljsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/eb063f-4c3c-4971-ae50-66482071b819/1/EArKcPZP09K0hLLrUW6KAoDh8AA.roa
Signing time: Mon 01 Jan 2024 16:29:50 +0000
ROA not before: Mon 01 Jan 2024 16:29:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209475
IP address blocks: 217.64.156.0/22 maxlen: 22
217.64.156.0/24 maxlen: 24
217.64.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/eb063f-4c3c-4971-ae50-66482071b819/1/hpPf7hdoc561l2wkW1rQBbMljsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/eb063f-4c3c-4971-ae50-66482071b819/1/hpPf7hdoc561l2wkW1rQBbMljsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/hpPf7hdoc561l2wkW1rQBbMljsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 13:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:2d:05:8b:74:1a:c3:a8:72:c5:9a:87:7c:7d:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8693dfee1768739eb5976c245b5ad005b3258ec6
Validity
Not Before: Jan 1 16:29:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=100aca70f64fd3d2b484b2eb516e8a0280e1f000
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:3e:a3:1c:5a:45:2d:b0:15:2a:a6:f1:52:2a:
7d:e2:c9:41:88:78:8a:52:3b:68:c1:9b:b2:3b:a7:
01:39:67:fa:fd:6f:8f:40:d0:b9:5c:c0:b9:54:6a:
6e:13:20:55:77:a5:bb:45:ea:52:f5:2b:7a:85:ea:
2d:da:bb:52:48:be:b2:e2:db:37:6c:d8:ea:90:7b:
fc:12:8e:10:47:6e:fd:81:10:cc:48:60:d5:d9:ae:
d5:02:8f:90:b3:f3:56:a5:28:cb:74:53:69:21:0b:
8a:93:0f:8b:3f:0e:e6:13:51:a0:03:3d:13:03:3c:
89:82:f6:2d:04:7d:80:ad:da:fa:06:61:3f:21:00:
a0:81:5a:82:fc:fb:d3:e9:ba:a2:07:b2:b4:ad:64:
82:0c:b1:72:b1:be:3a:64:71:fd:1b:c6:ab:32:4d:
dd:ce:d0:c3:81:56:99:34:59:8f:22:e8:11:a5:cd:
1d:c8:f8:42:9b:41:86:c9:95:03:a9:57:f6:72:dd:
51:24:bf:9a:a0:4c:a6:af:28:f3:24:6b:91:0b:0f:
f8:e2:d0:6c:7d:f3:8e:57:6c:52:b4:02:4c:7d:ca:
ec:09:8d:ac:c0:b2:c6:e6:2a:dd:c1:54:d5:32:10:
61:4c:8e:9f:5f:f5:ab:68:8f:8a:aa:c1:4d:15:10:
51:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:0A:CA:70:F6:4F:D3:D2:B4:84:B2:EB:51:6E:8A:02:80:E1:F0:00
X509v3 Authority Key Identifier:
keyid:86:93:DF:EE:17:68:73:9E:B5:97:6C:24:5B:5A:D0:05:B3:25:8E:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hpPf7hdoc561l2wkW1rQBbMljsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/eb063f-4c3c-4971-ae50-66482071b819/1/EArKcPZP09K0hLLrUW6KAoDh8AA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/eb063f-4c3c-4971-ae50-66482071b819/1/hpPf7hdoc561l2wkW1rQBbMljsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.64.156.0/22
Signature Algorithm: sha256WithRSAEncryption
19:f5:6f:6c:24:a4:c4:2c:5e:d7:07:2c:9a:4c:7e:17:f7:e5:
7c:91:59:50:bf:95:d6:86:ff:88:71:81:71:70:cf:5f:c4:c6:
4e:7b:fc:fa:40:f1:f7:04:a5:a7:66:a5:34:25:bb:21:bf:99:
8b:53:1e:ce:7e:3e:b2:2c:67:fb:f1:35:ca:cf:49:63:04:38:
6a:c3:bf:5a:03:c1:18:e4:55:f3:22:c8:3e:11:34:a2:49:d5:
3f:94:01:c6:78:db:2a:cd:8d:bc:30:5c:d3:70:17:6c:77:34:
35:77:8c:91:77:de:8f:74:58:f8:6a:b4:6a:6d:60:13:4d:95:
93:73:f4:b7:c1:6b:c8:e9:58:fc:63:ee:9c:63:2d:61:1e:72:
84:a2:ee:01:0a:8f:69:4b:65:2a:9e:a5:40:0f:cb:27:18:02:
22:72:87:88:20:1e:b8:43:28:14:3b:fd:1a:96:23:9c:2b:9a:
34:77:25:fd:74:f1:94:06:82:b3:cf:0b:f8:49:a2:3a:a6:6e:
37:cf:0c:74:43:fa:c7:4e:4d:fb:14:5a:20:46:50:95:1a:95:
63:d5:f7:61:1f:03:91:bd:3f:86:6c:9b:cf:fc:1b:80:51:67:
9c:a9:ee:1e:12:14:7b:d3:01:c3:0e:72:75:be:4e:1a:2b:24:
7f:54:bc:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 18:49:16 2024 by rpki-client on console-fra.rpki-client.org