Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/E2NDG-Lv5vA1TTKRD3KonNFpFyI.roa
File: E2NDG-Lv5vA1TTKRD3KonNFpFyI.roa (raw, json)
Hash identifier: fc4T5e+5W2mWl/6yVQvT6yOg5T6gHtypkkM3qMrW7Ls=
Subject key identifier: 13:63:43:1B:E2:EF:E6:F0:35:4D:32:91:0F:72:A8:9C:D1:69:17:22
Certificate issuer: /CN=e56076f27e13d1800e77d16e4b60b23b6f58c820
Certificate serial: 018CCA2BC3A0EEBF461AE6A7681958535E40
Authority key identifier: E5:60:76:F2:7E:13:D1:80:0E:77:D1:6E:4B:60:B2:3B:6F:58:C8:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5WB28n4T0YAOd9FuS2CyO29YyCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/E2NDG-Lv5vA1TTKRD3KonNFpFyI.roa
Signing time: Tue 02 Jan 2024 12:35:14 +0000
ROA not before: Tue 02 Jan 2024 12:35:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20473
IP address blocks: 185.64.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5WB28n4T0YAOd9FuS2CyO29YyCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:c3:a0:ee:bf:46:1a:e6:a7:68:19:58:53:5e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e56076f27e13d1800e77d16e4b60b23b6f58c820
Validity
Not Before: Jan 2 12:35:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1363431be2efe6f0354d32910f72a89cd1691722
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:dd:45:c8:18:f0:c3:3e:89:dc:66:93:d3:ee:
28:8c:2d:cd:0f:d6:95:3e:48:10:48:9c:9a:5a:83:
38:ef:dc:13:bf:06:15:e6:95:6f:18:9c:e7:c6:cc:
66:08:8d:9d:de:75:6c:76:81:4f:9c:ba:e7:2c:fc:
f6:ee:b7:35:7e:e0:ed:ff:d1:2d:36:e3:0a:2f:5d:
02:4c:a0:81:aa:af:22:c7:09:11:88:e1:e2:4d:f0:
58:bd:3e:f4:34:f9:62:76:63:f8:3b:a1:3b:15:d2:
a2:ab:f6:5c:cc:16:35:79:cc:84:23:74:36:06:ee:
77:a6:04:55:22:95:f2:76:e9:aa:be:67:70:78:5a:
75:7e:25:d2:28:0f:ad:5b:1d:5f:c9:6d:4e:bf:f5:
49:20:75:2b:4c:63:aa:cf:77:e7:f5:62:bc:32:73:
24:bc:65:f6:5f:88:17:5d:d5:0b:8d:4b:e1:8e:6f:
a9:9f:0a:51:88:85:cb:0b:7e:6e:f3:b9:21:f8:9c:
0e:65:fa:08:bb:66:78:90:ea:93:63:b9:2f:66:03:
80:b6:78:34:9b:e8:31:c6:2f:7a:b6:95:0d:3c:19:
5c:1b:bf:6f:9b:c7:d0:24:3d:51:07:00:f6:76:06:
44:d7:2a:c5:87:0b:6f:cd:11:ec:fa:f2:fe:c7:7d:
72:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:63:43:1B:E2:EF:E6:F0:35:4D:32:91:0F:72:A8:9C:D1:69:17:22
X509v3 Authority Key Identifier:
keyid:E5:60:76:F2:7E:13:D1:80:0E:77:D1:6E:4B:60:B2:3B:6F:58:C8:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5WB28n4T0YAOd9FuS2CyO29YyCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/E2NDG-Lv5vA1TTKRD3KonNFpFyI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.64.78.0/24
Signature Algorithm: sha256WithRSAEncryption
40:dd:08:ee:1c:42:e7:76:08:8f:11:ea:21:b7:94:d3:71:f5:
ec:23:0b:6a:4e:e9:54:48:71:02:74:b8:27:63:a8:5e:1a:5f:
08:c2:29:d5:2b:b4:1a:56:c1:b9:84:0c:e2:e7:bd:ef:c8:78:
b9:64:55:e8:3b:45:9d:39:7a:05:f7:78:1e:d8:8e:ce:d7:2e:
c5:9c:21:72:4a:8a:6b:95:51:93:36:60:da:00:40:29:31:23:
14:a1:f5:40:e4:ce:92:4b:83:17:7c:11:f7:9b:1f:be:b4:da:
eb:e6:33:8a:a9:ac:a3:e1:5a:cf:a9:a8:38:88:d1:1f:90:65:
17:ed:e2:0b:fe:68:84:2e:69:22:18:53:06:68:7f:72:8f:77:
02:d8:9c:4e:59:74:73:9d:05:a6:05:ed:97:a5:41:a1:2b:ac:
a6:5e:9c:48:f7:51:88:5b:be:bc:c6:5b:46:e2:4c:44:51:7d:
62:90:53:5a:e2:d8:8e:32:e8:f5:8a:0e:28:dc:eb:53:80:b3:
fb:31:80:aa:52:cf:45:65:56:fb:6f:c5:ab:2a:b5:11:21:ae:
e7:f8:49:6f:a7:f3:17:9c:9f:aa:e6:5a:cb:f9:ef:15:4a:0b:
cc:25:32:c9:3b:cc:73:b2:5b:e1:a8:f8:f7:d0:0e:7c:f1:e4:
e7:b9:d6:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 21:33:37 2024 by rpki-client on console-ams.rpki-client.org