Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/006d43-3dbf-4cf8-815d-5dc2fa6a3503/1/NEjEiT7f1icTyIMd_PexZfY6MoI.roa
File: NEjEiT7f1icTyIMd_PexZfY6MoI.roa (raw, json)
Hash identifier: LxGhvtgeTQZ2b9lmEcVp8QGhytcXxIzhziiB11bsAeE=
Subject key identifier: 34:48:C4:89:3E:DF:D6:27:13:C8:83:1D:FC:F7:B1:65:F6:3A:32:82
Certificate issuer: /CN=cd65ee23bff42ccf679d7377fe4da695d341aef0
Certificate serial: 018CCA2A834360325EE9BE6ADEC5FAB7518A
Authority key identifier: CD:65:EE:23:BF:F4:2C:CF:67:9D:73:77:FE:4D:A6:95:D3:41:AE:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zWXuI7_0LM9nnXN3_k2mldNBrvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/006d43-3dbf-4cf8-815d-5dc2fa6a3503/1/NEjEiT7f1icTyIMd_PexZfY6MoI.roa
Signing time: Tue 02 Jan 2024 12:33:52 +0000
ROA not before: Tue 02 Jan 2024 12:33:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39570
IP address blocks: 93.188.4.0/22 maxlen: 22
93.188.0.0/24 maxlen: 24
93.188.1.0/24 maxlen: 24
93.188.2.0/23 maxlen: 23
194.9.94.0/23 maxlen: 23
2a02:250:ffff::/48 maxlen: 48
2a02:250::/33 maxlen: 33
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/006d43-3dbf-4cf8-815d-5dc2fa6a3503/1/zWXuI7_0LM9nnXN3_k2mldNBrvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/006d43-3dbf-4cf8-815d-5dc2fa6a3503/1/zWXuI7_0LM9nnXN3_k2mldNBrvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zWXuI7_0LM9nnXN3_k2mldNBrvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 20:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:83:43:60:32:5e:e9:be:6a:de:c5:fa:b7:51:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd65ee23bff42ccf679d7377fe4da695d341aef0
Validity
Not Before: Jan 2 12:33:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3448c4893edfd62713c8831dfcf7b165f63a3282
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b7:bc:a1:e2:52:2e:09:a8:db:02:5d:97:3e:
e5:14:da:dd:c1:18:71:86:47:dd:ce:f5:46:47:c9:
fe:c2:0d:c1:63:92:26:a1:b1:37:1c:45:a3:40:d5:
50:95:d4:3c:92:d6:9e:1b:42:9d:2a:2d:73:78:a5:
11:9d:9d:43:63:18:6e:ce:ee:30:40:60:21:86:17:
24:8f:41:fe:e7:c6:7f:08:44:ab:ed:80:f7:51:a5:
09:df:f8:14:fd:ff:7f:01:68:b5:04:5f:a3:5e:80:
8b:54:6a:ed:f7:eb:67:9a:81:ff:7f:c2:42:ec:3e:
69:f9:12:fd:5a:a2:bd:2e:8b:c3:33:93:d7:02:39:
09:10:2c:3b:1a:03:d4:08:f8:61:ee:e1:36:6c:eb:
9c:0c:d3:0e:e8:82:3d:99:82:5d:55:d6:ef:a1:0f:
ba:3c:c9:73:2e:be:9b:b6:74:ec:cf:a4:c0:eb:a6:
78:08:1d:ac:00:89:05:37:78:f4:18:41:b5:ed:d6:
01:1d:f9:60:ac:11:14:43:a8:51:1b:1a:35:5c:67:
ae:4e:89:cf:ac:94:ea:e0:55:88:bd:3d:22:2e:b0:
59:a3:61:5f:85:e8:d1:79:52:17:e4:dc:79:2b:a5:
4a:4d:32:8a:4d:7a:f2:5b:50:44:df:e4:2f:4e:b1:
04:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:48:C4:89:3E:DF:D6:27:13:C8:83:1D:FC:F7:B1:65:F6:3A:32:82
X509v3 Authority Key Identifier:
keyid:CD:65:EE:23:BF:F4:2C:CF:67:9D:73:77:FE:4D:A6:95:D3:41:AE:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zWXuI7_0LM9nnXN3_k2mldNBrvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/006d43-3dbf-4cf8-815d-5dc2fa6a3503/1/NEjEiT7f1icTyIMd_PexZfY6MoI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/006d43-3dbf-4cf8-815d-5dc2fa6a3503/1/zWXuI7_0LM9nnXN3_k2mldNBrvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.188.0.0/21
194.9.94.0/23
IPv6:
2a02:250::/33
2a02:250:ffff::/48
Signature Algorithm: sha256WithRSAEncryption
1e:a5:c9:d9:ab:fe:c1:15:1c:b8:29:34:12:f9:2b:6c:71:fc:
dd:d9:cc:b5:38:2d:b0:58:e0:38:42:6b:a9:54:d0:75:ba:b1:
5a:c0:0c:7e:0e:2c:f5:5e:75:cc:79:22:7f:82:e7:5c:07:27:
ff:9b:3a:34:35:34:43:7a:76:d9:51:64:27:a4:6a:3e:0e:62:
fd:42:f5:57:c9:54:92:a3:ad:3b:4d:db:b5:ed:ee:47:f3:5d:
51:94:c4:cb:90:45:82:4a:50:9c:59:6a:68:5e:76:63:7a:05:
87:5d:d6:2e:e9:7d:1c:4f:a3:f1:62:90:f4:9d:a0:21:02:c1:
a7:56:f8:b0:c6:43:f2:f4:b1:4d:85:74:65:5d:92:e2:cc:55:
64:7d:e6:42:82:b2:73:7f:a7:ab:4f:87:52:1b:d6:9f:06:02:
a1:a4:ff:61:27:8b:7b:87:31:85:e9:6b:12:07:17:f3:4f:a3:
65:eb:d3:06:09:4d:35:59:57:20:ba:7a:7a:0d:b6:dc:95:fd:
b0:a3:19:6f:5d:64:a8:8f:7f:a1:39:49:c4:97:70:d8:10:6b:
81:00:8d:75:da:fc:22:6e:cb:b8:22:68:a2:e6:57:0b:3f:ce:
be:c8:8d:36:62:e7:63:4c:56:56:c3:2e:af:c1:cb:fe:94:a2:
a9:8b:dd:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 04:22:26 2024 by rpki-client on console-ams.rpki-client.org