Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/CeKVFnm70_VQQ4UG2rf1g_DCy0E.roa
File: CeKVFnm70_VQQ4UG2rf1g_DCy0E.roa (raw, json)
Hash identifier: 23fcCPk3xkVzD3dWE91YMDVYnPPkCWNH5CR34/QEoos=
Subject key identifier: 09:E2:95:16:79:BB:D3:F5:50:43:85:06:DA:B7:F5:83:F0:C2:CB:41
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 019077DA133F35CCAADB62CAF75C6459D59F
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/CeKVFnm70_VQQ4UG2rf1g_DCy0E.roa
Signing time: Wed 03 Jul 2024 09:08:18 +0000
ROA not before: Wed 03 Jul 2024 09:08:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.mft
rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jul 2024 08:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:77:da:13:3f:35:cc:aa:db:62:ca:f7:5c:64:59:d5:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jul 3 09:08:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=09e2951679bbd3f550438506dab7f583f0c2cb41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:55:70:1a:4f:5f:d6:57:5d:de:50:0d:b1:84:
de:ae:91:ca:45:1c:84:b2:00:08:17:ca:1c:39:45:
81:d8:2f:19:39:fa:c0:31:36:c5:a2:d8:a0:ea:51:
8e:66:59:dd:de:11:5f:ec:be:d2:33:71:b0:a4:5c:
ef:07:06:ca:eb:e0:25:68:f2:b5:b1:dc:72:ac:17:
c0:40:0f:3f:82:cb:1e:a2:47:8c:80:7f:e2:24:17:
f2:1c:f8:f1:14:11:23:4a:45:3c:b6:a9:f9:9e:0c:
3c:eb:ea:28:30:9b:49:b0:c1:18:9f:26:2b:53:88:
53:e2:7a:d7:65:01:9b:4e:06:b1:de:1e:d7:a8:b5:
21:5e:13:4d:b7:38:7f:61:0f:9d:81:62:20:ea:c9:
26:09:dc:b7:9f:34:02:8c:bb:b4:a7:1c:f5:f6:b6:
a9:83:0f:d4:0f:a0:6d:31:60:06:8c:e0:ea:8e:dd:
34:0d:75:d0:c0:1e:a2:af:ff:75:48:0b:ce:73:6d:
5b:f0:04:4d:2e:cc:a8:d2:7e:2c:9c:11:a9:b0:ab:
e9:a6:54:3c:ca:30:df:86:17:62:1b:60:20:c0:b4:
e8:d5:ae:79:d0:37:95:09:18:e4:4f:f4:47:a5:f8:
72:e0:1b:f0:09:54:75:3f:f0:81:16:2a:9c:52:52:
b0:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:E2:95:16:79:BB:D3:F5:50:43:85:06:DA:B7:F5:83:F0:C2:CB:41
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/CeKVFnm70_VQQ4UG2rf1g_DCy0E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
52:7e:e0:d1:40:41:18:d9:97:84:f7:4e:5c:ad:90:bc:9c:60:
8b:62:56:90:81:a5:47:a0:29:7b:2b:22:76:c1:78:3b:48:a4:
e8:b3:13:17:fa:83:57:b6:e3:4b:56:69:a8:2f:4b:eb:a4:6b:
bf:ea:52:5d:83:a7:0b:ad:c2:f8:d8:da:83:64:40:30:14:b7:
75:02:09:11:72:0c:7f:14:aa:e1:0e:da:03:4c:f0:c8:f8:74:
6d:15:d5:22:fc:7d:1c:e7:65:3c:5c:46:88:8c:5b:1b:db:1e:
1c:64:df:44:69:88:90:97:49:59:15:49:b8:95:fe:af:44:f8:
48:17:1e:13:b0:0d:32:aa:99:1e:f2:b7:df:18:9a:e2:e6:60:
cd:97:45:54:36:35:e4:ed:31:c9:eb:a9:e4:4b:c3:6b:8b:8a:
83:6b:fd:e1:6f:0d:e8:9c:c1:24:af:cf:98:e0:94:90:02:b5:
3e:5d:19:28:24:a5:97:18:1c:48:ca:5b:2b:9f:aa:da:6f:cf:
bc:57:4d:81:df:59:f7:7a:3d:93:cc:7b:63:a7:b3:13:81:c9:
41:8c:af:21:44:9f:1e:96:09:ba:fa:03:71:73:b8:c7:4b:30:
d7:90:1d:70:dc:5e:06:e1:b6:40:2d:21:bd:be:6b:b6:ef:f3:
28:9d:8f:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 3 11:33:49 2024 by rpki-client on console.sobornost.net