Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/EpChshjRzOWfMvnKC0R2RE6AT6g.roa
File: EpChshjRzOWfMvnKC0R2RE6AT6g.roa (raw, json)
Hash identifier: C+Mck7/VxMy6wEn8M/SzyhMwXAUEBD1/0VFUSiiOrFg=
Subject key identifier: 12:90:A1:B2:18:D1:CC:E5:9F:32:F9:CA:0B:44:76:44:4E:80:4F:A8
Certificate issuer: /CN=722a8c1d311895016108ffbd14575c77cc28773a
Certificate serial: 0192B2E4E1348FE98D6EBB910367D40C85E3
Authority key identifier: 72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/EpChshjRzOWfMvnKC0R2RE6AT6g.roa
Signing time: Tue 22 Oct 2024 06:23:17 +0000
ROA not before: Tue 22 Oct 2024 06:23:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2914
IP address blocks: 87.246.8.0/24 maxlen: 24
87.246.9.0/24 maxlen: 24
87.246.10.0/24 maxlen: 24
87.246.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 15:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:b2:e4:e1:34:8f:e9:8d:6e:bb:91:03:67:d4:0c:85:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=722a8c1d311895016108ffbd14575c77cc28773a
Validity
Not Before: Oct 22 06:23:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1290a1b218d1cce59f32f9ca0b4476444e804fa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:58:65:fc:12:17:5f:c8:0c:51:0f:25:18:48:
94:46:b9:6c:c9:cd:5d:82:76:2b:72:a9:53:80:b3:
29:6b:c7:8a:c1:4b:92:1a:bf:ee:e3:92:a0:87:c3:
4f:ff:6c:69:b5:18:e2:2a:3d:3a:af:18:dc:4f:90:
d1:e9:4c:08:66:b5:36:1d:05:0c:91:85:72:c6:d5:
47:8b:c5:a6:f6:63:e9:cd:08:97:40:30:f3:cf:3e:
52:aa:9b:6e:a9:3e:06:a2:c3:0d:c4:44:13:a2:e7:
a3:21:11:eb:c2:11:29:00:70:a4:a8:e2:7b:d6:d6:
53:ae:23:3e:4b:82:cf:42:55:d9:bf:83:51:20:37:
a8:f0:2b:37:5c:78:fa:fa:f2:69:17:c0:8c:15:b2:
5c:14:bd:d6:90:42:94:eb:6a:e1:87:2b:c0:48:45:
13:68:bc:79:1a:6d:f2:22:30:ed:e7:2d:b1:fb:2c:
2e:8b:67:fa:dd:d6:48:07:f2:08:78:98:43:cf:98:
11:22:0a:78:ef:1e:db:75:20:75:06:60:c7:6e:3c:
8b:89:c8:94:77:a2:13:7d:7c:bd:fa:e0:ab:1d:3b:
9d:7d:af:65:4e:eb:ac:97:df:e1:42:b1:c9:a6:c6:
75:52:c9:86:7d:9e:d4:1d:40:8d:42:b7:a6:c1:9f:
76:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:90:A1:B2:18:D1:CC:E5:9F:32:F9:CA:0B:44:76:44:4E:80:4F:A8
X509v3 Authority Key Identifier:
keyid:72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/EpChshjRzOWfMvnKC0R2RE6AT6g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.246.8.0/22
Signature Algorithm: sha256WithRSAEncryption
32:43:93:a0:22:cd:a8:3e:a6:36:4e:3a:8f:3f:2a:7b:c7:73:
97:af:70:97:d1:3d:8d:db:95:54:d1:95:78:44:b2:e4:83:23:
8a:db:49:1f:5f:d1:16:1f:18:4d:0b:e1:8f:76:27:42:45:8a:
f3:69:a6:20:42:db:fc:43:89:2e:cd:5d:e1:f8:e4:c8:c9:f1:
ea:19:10:b4:a9:f7:54:2d:bc:77:85:65:69:fd:2a:24:92:50:
c6:a7:dc:86:dd:3e:36:87:cc:6e:ea:09:20:e0:98:0b:ee:c3:
93:ca:5f:16:73:b1:57:4e:fa:dc:d1:3b:69:c3:97:96:1e:b3:
8e:b3:c5:a8:3d:50:22:13:39:36:ad:4f:af:90:04:a2:9d:96:
bb:71:2e:c8:ae:78:a7:ff:ab:40:d6:04:ba:8b:f3:d5:d6:60:
92:fa:14:6e:15:5c:42:d8:54:ac:41:33:16:4c:42:9e:3e:34:
6d:77:bd:1c:bb:9e:5f:c8:a5:b9:b1:fb:d2:ad:9c:fb:40:6e:
a9:3c:23:23:97:6c:06:e3:95:8f:2a:64:0e:64:18:b7:af:38:
48:78:26:f0:c6:05:0c:8b:1c:b0:e0:81:9d:0a:57:02:d7:29:
6c:65:3e:c1:ac:d8:f0:06:bc:4c:ad:1e:55:bc:24:60:fd:df:
2a:4f:96:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:53:37 2024 by rpki-client on console-fra.rpki-client.org