Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/E35yUIEDCtYRdCCBwUfjXLmPmPc.roa
File: E35yUIEDCtYRdCCBwUfjXLmPmPc.roa (raw, json)
Hash identifier: /F7Vs54oL2JJ0NkTDbAxyod8KWzg0wHsk2NkSCv5Gy4=
Subject key identifier: 13:7E:72:50:81:03:0A:D6:11:74:20:81:C1:47:E3:5C:B9:8F:98:F7
Certificate issuer: /CN=1ea0a9eb47d824b51f154442481a257168394551
Certificate serial: 018CCA2B94C6AC5536955966D1EB4BDFEADA
Authority key identifier: 1E:A0:A9:EB:47:D8:24:B5:1F:15:44:42:48:1A:25:71:68:39:45:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HqCp60fYJLUfFURCSBolcWg5RVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/E35yUIEDCtYRdCCBwUfjXLmPmPc.roa
Signing time: Tue 02 Jan 2024 12:35:02 +0000
ROA not before: Tue 02 Jan 2024 12:35:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204887
IP address blocks: 217.113.192.0/23 maxlen: 23
217.113.192.0/24 maxlen: 24
217.113.195.0/24 maxlen: 24
217.113.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/HqCp60fYJLUfFURCSBolcWg5RVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 May 2024 07:03:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:94:c6:ac:55:36:95:59:66:d1:eb:4b:df:ea:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ea0a9eb47d824b51f154442481a257168394551
Validity
Not Before: Jan 2 12:35:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=137e725081030ad611742081c147e35cb98f98f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:08:f4:10:ab:0e:0c:4f:b7:4a:41:9e:1d:3d:
e5:ca:e1:e9:a7:26:27:6a:2a:ce:17:24:8c:8e:87:
4b:a6:1a:97:95:6f:cd:df:5b:6a:6e:fa:b6:29:1d:
e7:bd:8c:91:13:95:38:69:09:46:7e:73:ec:29:36:
52:1a:88:71:e7:94:b6:92:20:fd:ef:9d:6d:82:68:
46:24:5f:2f:9c:e0:22:3b:c0:02:e0:28:47:8d:40:
8c:2d:3c:ea:32:82:a3:d7:98:fe:4f:2e:2e:75:dc:
bd:f7:a9:ea:de:0c:11:b3:5d:10:55:0a:8e:09:4d:
93:59:7e:61:03:af:b9:d5:d1:6b:0b:87:a1:52:99:
79:0d:10:32:de:f2:8b:26:4f:c3:38:f8:60:8d:e3:
fb:ad:91:28:43:3c:60:0d:91:e8:de:62:5a:bb:ea:
18:1a:a1:a9:50:d5:c7:b1:40:f1:27:48:27:eb:fe:
3e:a1:65:73:c7:a3:13:e1:48:c6:11:e4:c6:59:bf:
79:c5:59:14:78:56:9b:e7:a6:af:a8:59:81:41:dc:
39:cc:26:49:0e:06:4c:17:f2:1f:98:b4:d5:18:58:
2b:14:87:cf:c5:6b:0c:0e:a7:dd:8e:4c:16:e3:08:
48:b0:21:51:62:07:fd:e5:ea:05:9d:e0:a4:80:4b:
08:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:7E:72:50:81:03:0A:D6:11:74:20:81:C1:47:E3:5C:B9:8F:98:F7
X509v3 Authority Key Identifier:
keyid:1E:A0:A9:EB:47:D8:24:B5:1F:15:44:42:48:1A:25:71:68:39:45:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqCp60fYJLUfFURCSBolcWg5RVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/E35yUIEDCtYRdCCBwUfjXLmPmPc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.113.192.0/23
217.113.195.0/24
Signature Algorithm: sha256WithRSAEncryption
18:38:ae:c2:31:39:05:59:d0:59:b6:89:a6:c9:7e:d4:f2:22:
58:3f:46:f3:e3:06:8a:6c:29:c7:e7:7f:34:88:49:95:33:af:
df:d0:f1:bc:9d:58:2f:59:e7:72:7a:bb:5e:4a:07:56:c0:d9:
c3:c0:39:31:92:28:ef:0d:98:84:39:5e:e0:8a:2a:4a:b6:52:
f3:c5:0f:f8:a0:c7:06:b5:09:94:fd:82:dd:81:7f:af:10:e3:
12:3c:3c:b3:94:54:89:d3:fc:fe:39:9e:59:d1:5c:fe:f7:13:
ae:6a:62:fe:4e:0d:ee:a1:95:d5:01:dc:7f:19:7a:08:9d:5c:
96:0e:a9:b5:f9:83:2a:1c:a1:3a:81:8c:91:98:dc:9b:08:03:
95:24:31:88:61:fe:6c:56:db:66:cc:c2:cc:1e:85:a0:db:f3:
17:41:6f:df:ea:01:68:d5:bd:fb:84:c5:8b:dc:a9:8b:34:fa:
5e:03:5f:d2:4b:42:db:2b:9a:e4:24:2f:3b:60:44:68:93:ff:
3d:03:52:db:84:5f:10:8b:32:a8:b0:d0:1f:70:54:63:d0:dd:
9f:5f:6a:e5:d5:71:f2:a9:1c:95:a8:d5:b5:7e:61:e0:cc:7b:
5b:ab:68:de:c6:99:61:c5:11:0a:74:b9:25:39:3c:54:d9:92:
7a:94:6b:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 17:03:33 2024 by rpki-client on console-fra.rpki-client.org