Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/52b279-4e02-440f-83c0-b936024a254a/1/EEyQEWLOsoTBM4IyHT8KkCywhlQ.roa
File: EEyQEWLOsoTBM4IyHT8KkCywhlQ.roa (raw, json)
Hash identifier: /TPFLSKRm+bzHbtkgfVPAmdeACLoMkoFtmtFSqNONsU=
Subject key identifier: 10:4C:90:11:62:CE:B2:84:C1:33:82:32:1D:3F:0A:90:2C:B0:86:54
Certificate issuer: /CN=c3e715d9490f521e36a056f999bfb56e0f21fc86
Certificate serial: 018CC8DF8868AF5F5C35D7F159F51BD9AF68
Authority key identifier: C3:E7:15:D9:49:0F:52:1E:36:A0:56:F9:99:BF:B5:6E:0F:21:FC:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w-cV2UkPUh42oFb5mb-1bg8h_IY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/52b279-4e02-440f-83c0-b936024a254a/1/EEyQEWLOsoTBM4IyHT8KkCywhlQ.roa
Signing time: Tue 02 Jan 2024 06:32:21 +0000
ROA not before: Tue 02 Jan 2024 06:32:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31632
IP address blocks: 193.23.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/52b279-4e02-440f-83c0-b936024a254a/1/w-cV2UkPUh42oFb5mb-1bg8h_IY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/52b279-4e02-440f-83c0-b936024a254a/1/w-cV2UkPUh42oFb5mb-1bg8h_IY.mft
rsync://rpki.ripe.net/repository/DEFAULT/w-cV2UkPUh42oFb5mb-1bg8h_IY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:88:68:af:5f:5c:35:d7:f1:59:f5:1b:d9:af:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3e715d9490f521e36a056f999bfb56e0f21fc86
Validity
Not Before: Jan 2 06:32:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=104c901162ceb284c13382321d3f0a902cb08654
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:9c:74:3c:39:16:c6:b0:64:42:50:2e:b0:b5:
df:f5:ed:81:f4:64:29:d9:aa:c4:89:81:2d:3b:7e:
0a:93:05:c1:5c:ee:6f:ec:30:90:56:c6:ed:9a:2d:
00:f0:f4:85:35:af:80:5a:d1:64:69:49:61:a5:f8:
0b:e8:6d:a2:f3:87:e6:9b:e7:29:dd:58:15:48:6e:
26:48:87:d6:cd:43:63:8f:77:23:f9:b0:a3:c0:67:
2a:ea:8b:03:ca:cd:92:e4:16:c3:f6:44:e4:e2:26:
e0:0e:03:c3:8f:5f:26:ae:dc:21:fd:8f:b4:27:3d:
28:97:db:24:47:db:83:13:86:d8:7b:2d:9a:37:d8:
68:d7:51:f6:5d:48:cd:af:66:f9:3b:3f:08:26:61:
80:1d:c4:3c:5d:f4:db:4d:c8:e6:61:bf:5c:5c:26:
4a:b7:e3:5b:6a:a2:5e:42:e9:43:29:22:22:89:94:
96:de:b4:37:27:7b:5f:fe:8d:47:e7:0b:54:ab:92:
7a:71:7c:7a:0a:b2:e2:d7:9b:4d:49:11:3a:1e:47:
8c:7f:e4:4f:7f:77:54:56:ee:9e:b8:b2:a3:db:f5:
7e:91:44:ca:2a:74:a9:dc:ef:27:33:17:3e:7d:b4:
a0:55:02:92:75:40:f5:c2:ab:16:78:e3:c7:a1:1b:
f0:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:4C:90:11:62:CE:B2:84:C1:33:82:32:1D:3F:0A:90:2C:B0:86:54
X509v3 Authority Key Identifier:
keyid:C3:E7:15:D9:49:0F:52:1E:36:A0:56:F9:99:BF:B5:6E:0F:21:FC:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w-cV2UkPUh42oFb5mb-1bg8h_IY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/52b279-4e02-440f-83c0-b936024a254a/1/EEyQEWLOsoTBM4IyHT8KkCywhlQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/52b279-4e02-440f-83c0-b936024a254a/1/w-cV2UkPUh42oFb5mb-1bg8h_IY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.23.116.0/24
Signature Algorithm: sha256WithRSAEncryption
87:17:27:f9:42:e5:d0:6b:55:c2:85:a3:29:a4:3b:fc:a9:70:
1c:fa:9b:28:29:f6:7d:1b:e7:54:c7:10:8f:26:c0:af:27:fe:
6f:6e:e1:d8:5f:d9:6d:4b:3c:32:20:46:75:1b:f1:d3:f7:43:
a3:e0:25:fb:eb:7e:4a:10:3b:d7:1e:32:ba:03:ad:3d:29:b1:
b8:cd:69:d1:bb:5e:73:10:b6:f7:ef:ad:eb:0e:3b:b9:fa:1f:
97:ae:54:88:5a:96:af:87:9e:19:c9:fa:2a:b0:21:7d:e9:1d:
28:64:e9:ad:4c:0b:d7:8e:29:58:92:e0:29:c1:9a:f0:16:36:
f0:b2:a6:cf:ad:2c:cd:6a:6f:9b:37:8b:f2:69:c6:58:55:9d:
fc:8d:cd:91:6b:5b:d2:e2:8f:68:c7:86:ec:71:9e:cd:a7:cd:
a9:c2:5e:b1:dd:9d:60:78:86:4a:b7:80:f2:98:94:bb:13:b3:
f8:c3:9e:fb:dd:eb:b3:7d:8e:1c:52:b1:8c:97:74:24:18:ac:
91:51:a0:72:db:f6:f7:60:9e:57:4b:77:25:d5:cd:c1:3e:13:
e1:45:b2:49:c4:79:b6:d4:40:9e:13:99:f3:76:b1:db:7a:c6:
2b:25:ec:c4:09:8d:e5:8b:24:39:53:fc:9e:60:49:88:43:65:
30:5b:e6:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 11:21:32 2024 by rpki-client on console-ams.rpki-client.org