Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/EYj-CJy108CiSylU1QPVTE66lUU.roa
File: EYj-CJy108CiSylU1QPVTE66lUU.roa (raw, json)
Hash identifier: 3bpyZonnLqZzs3hAwlFDvHpNoE9ZDM4tcv37O7g58Ks=
Subject key identifier: 11:88:FE:08:9C:B5:D3:C0:A2:4B:29:54:D5:03:D5:4C:4E:BA:95:45
Certificate issuer: /CN=f64ad45d22b5f3cf2e71ce0ac01074b7cd21ac57
Certificate serial: 018CC8715E871C5CDB2B13C44A2697C06AF3
Authority key identifier: F6:4A:D4:5D:22:B5:F3:CF:2E:71:CE:0A:C0:10:74:B7:CD:21:AC:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9krUXSK1888ucc4KwBB0t80hrFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/EYj-CJy108CiSylU1QPVTE66lUU.roa
Signing time: Tue 02 Jan 2024 04:32:02 +0000
ROA not before: Tue 02 Jan 2024 04:32:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213358
IP address blocks: 194.113.22.0/23 maxlen: 24
91.208.68.0/24 maxlen: 24
94.124.100.0/22 maxlen: 24
2a06:a900::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/9krUXSK1888ucc4KwBB0t80hrFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/9krUXSK1888ucc4KwBB0t80hrFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9krUXSK1888ucc4KwBB0t80hrFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:71:5e:87:1c:5c:db:2b:13:c4:4a:26:97:c0:6a:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f64ad45d22b5f3cf2e71ce0ac01074b7cd21ac57
Validity
Not Before: Jan 2 04:32:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1188fe089cb5d3c0a24b2954d503d54c4eba9545
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:77:d4:2c:e1:fe:62:5c:7a:3e:0b:c2:ab:0c:
47:9d:49:e7:59:4e:f8:79:40:b5:38:bb:ce:97:9e:
8c:3b:5d:4d:73:d9:f8:e8:c6:f4:3e:1d:60:60:da:
3e:d6:f6:9b:e6:26:d0:63:d5:79:90:67:f0:a4:3b:
24:a1:07:dd:4f:4a:4b:dd:68:7e:9c:04:8e:87:a8:
2f:4b:52:92:75:a3:b4:f6:41:26:75:52:ee:34:cc:
9c:0d:11:30:74:3f:11:c1:80:81:e7:62:92:f4:95:
a4:aa:96:92:27:3d:dc:e0:57:45:f4:f5:9f:6a:ab:
fc:63:e2:d0:79:d2:7d:d8:e4:02:25:99:2d:df:76:
39:6e:ff:09:43:8f:ef:ed:0c:16:93:57:75:e3:cd:
a9:26:ad:9b:47:0d:8e:4a:23:ca:cf:67:78:53:1e:
b6:40:aa:c5:58:78:c2:c1:46:56:8e:7f:8c:10:c4:
25:ab:20:0a:16:e1:b8:b0:f4:bf:83:6f:ef:dc:7c:
3d:44:79:84:5e:41:00:a8:b1:45:9d:e2:74:8a:49:
a5:00:43:24:85:28:55:e8:05:9c:dc:de:cf:b3:ef:
58:b5:59:09:47:f8:f5:51:b2:57:1a:5b:07:9e:de:
15:df:46:f2:07:df:1b:b3:26:04:6f:80:06:72:ca:
4e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:88:FE:08:9C:B5:D3:C0:A2:4B:29:54:D5:03:D5:4C:4E:BA:95:45
X509v3 Authority Key Identifier:
keyid:F6:4A:D4:5D:22:B5:F3:CF:2E:71:CE:0A:C0:10:74:B7:CD:21:AC:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9krUXSK1888ucc4KwBB0t80hrFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/EYj-CJy108CiSylU1QPVTE66lUU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/9krUXSK1888ucc4KwBB0t80hrFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.68.0/24
94.124.100.0/22
194.113.22.0/23
IPv6:
2a06:a900::/29
Signature Algorithm: sha256WithRSAEncryption
91:d3:e2:0a:20:6d:d8:25:91:f9:d1:5b:59:7b:1a:ae:eb:04:
41:ec:e0:d3:0f:b9:68:d3:7d:b1:98:9e:43:d3:a8:a2:a4:8b:
71:7c:ea:30:a9:69:11:d6:1d:c2:96:5f:0a:14:7d:2b:9c:dc:
56:fc:30:ac:7b:7e:41:2b:41:7a:37:d8:ed:5b:2b:18:6b:e3:
c6:7b:7d:02:e1:17:8b:eb:2a:69:3c:97:90:69:0c:e6:cd:89:
1e:6f:e4:c5:b0:c8:eb:a4:7d:29:cf:65:8b:f3:63:32:ba:e3:
07:dc:17:82:52:e8:df:2f:71:d5:9d:23:4e:dd:74:f2:05:9d:
b4:8b:17:8f:6c:3e:f6:d4:69:f0:22:b9:46:54:66:09:39:b6:
a6:91:b6:75:b4:18:b9:6b:ef:d5:6f:43:4f:72:17:59:f3:58:
b1:e6:80:00:10:1c:93:6b:c9:c3:74:2e:c9:22:8b:60:4c:45:
cb:45:f1:55:62:70:1f:b7:e6:5a:d0:8c:97:e3:bb:b3:70:2a:
2f:75:bc:d4:3d:44:6b:8e:16:be:b9:20:de:48:78:ae:71:70:
6f:bf:69:5e:11:c6:a6:b2:30:dc:58:30:ea:f7:c5:2f:7e:10:
ee:65:2a:9c:7a:e0:96:cc:7f:55:b7:8f:ad:08:7f:f3:35:40:
b4:82:74:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 12:05:59 2024 by rpki-client on console-fra.rpki-client.org