Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/6007ff-5f0c-4a73-a3f2-ccc5814094ad/1/Ev7NzWoCxBKgDP5KgEqxTEde24c.roa
File: Ev7NzWoCxBKgDP5KgEqxTEde24c.roa (raw, json)
Hash identifier: WE1JUFM5moeM0K9VIj1FsX0g/f5ODckzQYOS7iG1UrQ=
Subject key identifier: 12:FE:CD:CD:6A:02:C4:12:A0:0C:FE:4A:80:4A:B1:4C:47:5E:DB:87
Certificate issuer: /CN=190d5b0543bd85a8ecf969abb8503c9dead0df98
Certificate serial: 018CC4937A5D0B789A2F832AAEA75C4E66D0
Authority key identifier: 19:0D:5B:05:43:BD:85:A8:EC:F9:69:AB:B8:50:3C:9D:EA:D0:DF:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GQ1bBUO9hajs-WmruFA8nerQ35g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/6007ff-5f0c-4a73-a3f2-ccc5814094ad/1/Ev7NzWoCxBKgDP5KgEqxTEde24c.roa
Signing time: Mon 01 Jan 2024 10:30:48 +0000
ROA not before: Mon 01 Jan 2024 10:30:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42264
IP address blocks: 193.33.24.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/6007ff-5f0c-4a73-a3f2-ccc5814094ad/1/GQ1bBUO9hajs-WmruFA8nerQ35g.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/6007ff-5f0c-4a73-a3f2-ccc5814094ad/1/GQ1bBUO9hajs-WmruFA8nerQ35g.mft
rsync://rpki.ripe.net/repository/DEFAULT/GQ1bBUO9hajs-WmruFA8nerQ35g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:7a:5d:0b:78:9a:2f:83:2a:ae:a7:5c:4e:66:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=190d5b0543bd85a8ecf969abb8503c9dead0df98
Validity
Not Before: Jan 1 10:30:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=12fecdcd6a02c412a00cfe4a804ab14c475edb87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:a6:8b:23:43:55:20:84:5e:ab:ab:3d:df:21:
2a:72:d5:dc:e4:be:07:67:98:da:19:8a:a1:63:b1:
96:a7:09:b9:b6:47:7e:8c:f5:dd:42:cb:6f:f7:65:
a0:82:33:b4:10:b6:10:87:67:ee:78:a4:a0:90:f7:
c0:34:b4:39:af:67:dd:cf:7c:f9:d9:a4:d5:ce:9e:
57:6f:61:31:98:4e:b2:8b:1e:f2:91:d6:cc:bd:c9:
9e:7a:85:5a:94:3c:91:93:f0:94:04:26:ac:64:3e:
65:ec:f7:57:9a:d4:30:7c:19:65:e0:3f:62:47:5e:
f6:c3:0e:1b:cf:35:37:55:ad:79:8c:60:7d:6d:96:
be:58:ec:cb:3b:b8:d8:b8:3f:f6:50:77:9f:c5:04:
9a:4c:60:f7:02:31:50:53:9e:16:35:c7:4c:b1:8b:
83:c2:2a:b9:9d:fc:c5:d9:a6:aa:5f:d4:a4:88:0b:
0b:16:af:78:db:89:12:a6:dd:07:59:5e:2b:9f:54:
1d:f7:78:0e:54:b5:68:1e:68:1d:de:1f:07:09:51:
49:bd:07:0e:6a:09:71:ad:52:b0:11:72:df:a8:41:
20:cc:20:4b:00:55:c1:bf:5b:e2:df:51:bf:57:82:
e1:6a:46:c1:ca:29:dc:08:93:8f:18:57:f9:dc:af:
99:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:FE:CD:CD:6A:02:C4:12:A0:0C:FE:4A:80:4A:B1:4C:47:5E:DB:87
X509v3 Authority Key Identifier:
keyid:19:0D:5B:05:43:BD:85:A8:EC:F9:69:AB:B8:50:3C:9D:EA:D0:DF:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQ1bBUO9hajs-WmruFA8nerQ35g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6007ff-5f0c-4a73-a3f2-ccc5814094ad/1/Ev7NzWoCxBKgDP5KgEqxTEde24c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6007ff-5f0c-4a73-a3f2-ccc5814094ad/1/GQ1bBUO9hajs-WmruFA8nerQ35g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.33.24.0/23
Signature Algorithm: sha256WithRSAEncryption
a4:cb:a6:eb:c0:f9:8d:b9:ff:12:a8:b6:e2:14:57:00:87:a6:
cb:8c:cf:e4:fe:c9:a4:ba:a2:e5:50:5f:12:59:50:d6:22:ff:
28:53:5a:c5:17:76:f7:d1:f0:1a:b7:2c:80:d2:1a:87:d4:dd:
84:c1:dc:de:55:2d:69:c3:31:35:b3:f8:7b:13:6e:88:4e:cc:
ea:ef:76:f0:28:11:af:1a:63:55:53:6b:6b:9d:d9:d5:98:95:
39:1b:c4:cf:29:00:03:db:e4:22:4a:ea:3f:d0:09:a0:c0:2f:
3e:5d:0f:9e:33:7e:15:a0:1a:a1:6e:fa:f1:4a:97:6a:13:76:
09:d7:e8:3b:83:b7:8b:d8:04:51:d4:47:b5:57:39:34:49:ef:
f2:56:07:0a:c9:69:d5:f4:73:fa:f6:68:39:e8:b9:70:54:5d:
67:5a:67:5e:70:f3:10:2b:88:20:ee:55:96:75:80:f6:75:6a:
85:e0:0d:2b:85:49:bb:01:ab:3a:28:bf:c9:cc:90:c3:7f:ac:
d1:96:3c:c5:2a:60:c0:8b:28:ed:6d:b0:b3:2d:9f:dd:20:21:
00:90:83:ab:de:55:38:cc:d1:33:65:03:ed:a1:0c:e3:06:86:
36:7e:04:e4:cc:f3:8d:38:f6:e9:84:eb:d6:e8:b1:bb:db:96:
3b:98:03:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:37:41 2024 by rpki-client on console-ams.rpki-client.org