Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/81c091-0a4e-4005-be22-a7e86453abcd/1/ei28onpouyMLlBCGHhuy-dN1vmg.roa
File: ei28onpouyMLlBCGHhuy-dN1vmg.roa (raw, json)
Hash identifier: 5q+ETSAH8H8rMlIvUB3bjsiMIKWirykIdwXIfXSda3E=
Subject key identifier: 7A:2D:BC:A2:7A:68:BB:23:0B:94:10:86:1E:1B:B2:F9:D3:75:BE:68
Certificate issuer: /CN=53b105065c0d9139b5ffedc32c900cf64b4312eb
Certificate serial: 018CC94BD02DFE5D74E9C861333E107119BC
Authority key identifier: 53:B1:05:06:5C:0D:91:39:B5:FF:ED:C3:2C:90:0C:F6:4B:43:12:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U7EFBlwNkTm1_-3DLJAM9ktDEus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/81c091-0a4e-4005-be22-a7e86453abcd/1/ei28onpouyMLlBCGHhuy-dN1vmg.roa
Signing time: Tue 02 Jan 2024 08:30:38 +0000
ROA not before: Tue 02 Jan 2024 08:30:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51088
IP address blocks: 185.41.124.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/81c091-0a4e-4005-be22-a7e86453abcd/1/U7EFBlwNkTm1_-3DLJAM9ktDEus.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/81c091-0a4e-4005-be22-a7e86453abcd/1/U7EFBlwNkTm1_-3DLJAM9ktDEus.mft
rsync://rpki.ripe.net/repository/DEFAULT/U7EFBlwNkTm1_-3DLJAM9ktDEus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Sep 2024 13:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4b:d0:2d:fe:5d:74:e9:c8:61:33:3e:10:71:19:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53b105065c0d9139b5ffedc32c900cf64b4312eb
Validity
Not Before: Jan 2 08:30:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7a2dbca27a68bb230b9410861e1bb2f9d375be68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c0:8e:36:1e:b3:c5:f8:1a:2a:63:a4:2c:7e:
5a:06:91:75:15:5b:81:8d:89:f5:f6:c0:95:85:08:
e9:02:05:61:4a:8a:cb:69:5a:dd:6b:c3:a7:70:c9:
76:ef:83:aa:f1:20:83:95:40:d8:6c:01:71:e2:76:
c5:14:2b:cb:05:9f:5b:be:3b:1d:27:75:6a:f6:2d:
1a:c0:d9:f2:f6:0d:d9:fb:45:bd:a2:ab:5e:05:d1:
be:b9:e1:fb:60:7e:ba:4a:af:ea:26:7e:3e:66:59:
c0:41:e0:22:64:bd:4f:db:8d:6a:9a:16:cb:d1:ba:
b7:8a:a7:17:d6:1a:3a:1a:c8:d0:72:16:03:56:e3:
ee:a3:9c:f5:e5:8a:80:ae:8d:54:b3:1e:95:74:7b:
c6:b9:6f:8c:5a:18:9e:7f:f1:6e:1b:9d:88:9e:db:
c1:97:c5:21:41:3a:5a:da:19:38:67:31:0a:83:a3:
84:c6:fb:bf:a8:6b:79:8d:03:27:36:2d:14:f7:60:
cd:d6:cb:8b:27:19:97:02:92:86:17:c0:01:c4:ca:
af:7e:d4:63:1e:61:98:5a:47:9b:7a:72:5e:bc:87:
2d:df:da:6e:35:c3:13:2c:78:f2:c5:6b:a9:39:b6:
5b:6b:77:e2:d9:cd:2b:2d:30:e0:a7:79:68:a8:30:
0b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:2D:BC:A2:7A:68:BB:23:0B:94:10:86:1E:1B:B2:F9:D3:75:BE:68
X509v3 Authority Key Identifier:
keyid:53:B1:05:06:5C:0D:91:39:B5:FF:ED:C3:2C:90:0C:F6:4B:43:12:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7EFBlwNkTm1_-3DLJAM9ktDEus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/81c091-0a4e-4005-be22-a7e86453abcd/1/ei28onpouyMLlBCGHhuy-dN1vmg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/81c091-0a4e-4005-be22-a7e86453abcd/1/U7EFBlwNkTm1_-3DLJAM9ktDEus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.41.124.0/22
Signature Algorithm: sha256WithRSAEncryption
b8:66:a9:8e:c0:c5:62:f2:ea:df:ff:d6:9b:b7:16:89:1f:16:
be:dc:b3:cf:4b:39:d9:21:9e:c8:04:33:c9:ba:9a:d8:e9:29:
fc:3e:8e:90:59:59:a8:e2:1e:37:ef:28:31:ae:dd:07:cb:7a:
78:89:f2:d0:46:be:8f:04:e3:d7:07:fb:ce:01:cc:71:8d:1f:
66:15:e3:2c:3c:51:c0:61:74:2b:cf:60:64:a3:37:a0:28:3e:
bf:69:5f:b9:fa:68:8c:9c:82:4b:83:ff:13:da:7c:4c:f4:22:
ee:60:e2:e6:11:d5:7c:e5:3b:91:4b:b8:4f:76:ea:4f:b0:49:
1b:b0:bc:58:20:9d:90:62:b6:c2:1f:97:9f:e4:96:cc:e6:55:
37:cf:16:d9:eb:a0:e9:c1:7d:5f:07:ed:2a:2a:cf:9a:e2:0e:
9e:f9:42:b9:4f:bf:11:d6:64:31:ed:3d:a0:c1:03:91:48:1d:
78:b0:95:5f:8a:3f:57:79:cb:97:07:72:12:4b:d7:e4:86:54:
76:71:20:94:83:1f:ab:f3:79:d8:9d:d6:5a:81:03:2f:9e:90:
b6:8b:a4:7f:45:a1:df:92:7c:29:5f:36:3c:b5:9d:98:27:da:
9a:83:ba:88:98:93:1e:48:8e:9e:29:83:d9:b0:70:87:6b:1b:
f9:68:87:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 22:08:04 2024 by rpki-client on console-fra.rpki-client.org