Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/2zvGBNbUfX5Cs_IjKfeF1vIg-B4.roa
File: 2zvGBNbUfX5Cs_IjKfeF1vIg-B4.roa (raw, json)
Hash identifier: VitJ9ijOP2EV6xTiEb9DBj/w+pPy2bpqKJpj2+OMva4=
Subject key identifier: DB:3B:C6:04:D6:D4:7D:7E:42:B3:F2:23:29:F7:85:D6:F2:20:F8:1E
Certificate issuer: /CN=eb7bbbfef59509e7263986f780589ab1e7998423
Certificate serial: 018DA7566A15B0420A3565857FD32547C260
Authority key identifier: EB:7B:BB:FE:F5:95:09:E7:26:39:86:F7:80:58:9A:B1:E7:99:84:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/63u7_vWVCecmOYb3gFiaseeZhCM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/2zvGBNbUfX5Cs_IjKfeF1vIg-B4.roa
Signing time: Wed 14 Feb 2024 11:17:54 +0000
ROA not before: Wed 14 Feb 2024 11:17:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61319
IP address blocks: 213.192.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/63u7_vWVCecmOYb3gFiaseeZhCM.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/63u7_vWVCecmOYb3gFiaseeZhCM.mft
rsync://rpki.ripe.net/repository/DEFAULT/63u7_vWVCecmOYb3gFiaseeZhCM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:a7:56:6a:15:b0:42:0a:35:65:85:7f:d3:25:47:c2:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb7bbbfef59509e7263986f780589ab1e7998423
Validity
Not Before: Feb 14 11:17:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=db3bc604d6d47d7e42b3f22329f785d6f220f81e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:91:77:b6:cd:52:e7:3d:af:da:08:d8:b2:1d:
46:19:8b:d1:f0:de:5f:d2:87:c8:46:ba:43:27:35:
cd:f5:19:55:a0:b9:8f:10:43:1d:92:75:83:72:f6:
f1:38:e8:67:1f:e6:9a:a8:c0:04:25:d5:28:ec:c2:
c4:1c:76:c6:f7:bb:16:f1:46:a2:c2:ce:8e:33:ce:
7a:26:69:ca:68:b3:58:fd:b6:95:58:e4:c5:4f:45:
84:8d:22:6f:72:22:0c:fa:39:84:65:98:03:eb:26:
e8:a6:82:b2:c4:6d:88:81:d6:11:9e:6a:70:a4:58:
35:ba:15:7c:8a:7f:e4:33:d8:78:87:32:bd:4c:8f:
50:f9:26:65:9d:47:39:d6:3a:5b:58:8e:d3:11:36:
ce:d3:62:04:cf:fd:00:e2:9b:c5:93:a8:ee:81:fa:
9b:91:78:f4:5c:39:cd:c6:99:68:76:89:e7:cb:86:
54:d4:6b:5a:34:c2:f0:52:68:64:37:40:89:e3:c8:
54:41:93:d6:1f:48:08:86:15:76:a5:9d:86:92:b4:
a6:65:8c:aa:b0:a9:11:7b:fd:12:4d:fd:c4:80:d3:
41:da:8a:18:64:56:7f:2c:69:bb:2f:ab:cb:bc:53:
9f:5c:7d:dc:5d:f6:07:27:51:80:c6:2c:9f:7d:62:
bc:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:3B:C6:04:D6:D4:7D:7E:42:B3:F2:23:29:F7:85:D6:F2:20:F8:1E
X509v3 Authority Key Identifier:
keyid:EB:7B:BB:FE:F5:95:09:E7:26:39:86:F7:80:58:9A:B1:E7:99:84:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/63u7_vWVCecmOYb3gFiaseeZhCM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/2zvGBNbUfX5Cs_IjKfeF1vIg-B4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/63u7_vWVCecmOYb3gFiaseeZhCM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.192.119.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:87:a0:30:21:c5:1b:e0:b8:76:28:e6:1b:f5:0a:a4:21:e5:
4e:41:24:dd:28:59:f4:25:7c:2f:4b:1b:3c:8c:d0:5c:a2:e2:
9d:ed:85:55:b4:3c:78:39:d8:87:39:f1:f8:7e:d7:24:a3:4e:
ec:9c:4a:ee:df:28:3f:c5:a2:ca:c2:d7:3f:d6:1b:3c:a5:28:
3c:a5:df:41:62:04:7d:04:53:4b:01:32:73:d8:8f:29:08:aa:
4c:db:00:c5:d3:7f:bb:d1:e7:4c:40:f1:42:8c:e9:e9:50:39:
7a:4b:6d:9c:dc:ac:9e:a6:88:2c:db:46:f7:1e:37:5c:9d:0f:
41:9f:d7:c8:bb:b6:a8:d1:11:39:c9:ac:a4:f3:e2:11:7d:29:
87:d8:99:fb:0d:60:3a:7b:9c:6b:16:18:33:c1:71:ab:b7:83:
95:c7:a4:c3:6c:43:d4:f0:f2:88:0d:cf:40:dd:bb:cc:c3:b3:
11:90:58:12:1c:50:f7:12:2c:68:f8:d5:45:fe:7c:57:27:55:
39:5d:2b:bc:fe:60:35:03:24:ae:35:42:2c:ae:29:bf:6f:3c:
f1:fb:d6:ba:67:a8:76:00:21:4f:d8:33:7f:eb:f7:51:0e:61:
ba:95:61:6b:12:f8:7b:1e:06:97:af:be:6b:45:b8:79:70:4b:
9f:1f:aa:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 21:58:29 2024 by rpki-client on console-ams.rpki-client.org