Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/eqG5u5-wR8oUmfeZKXMb02OkQCg.roa
File: eqG5u5-wR8oUmfeZKXMb02OkQCg.roa (raw, json)
Hash identifier: 0A7lXge5ntTr4kCDGLdtfoJMPV4EJHy6bEv+oQAeUuQ=
Subject key identifier: 7A:A1:B9:BB:9F:B0:47:CA:14:99:F7:99:29:73:1B:D3:63:A4:40:28
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01907717FBED4CC95C3EFA99206AFBB509BC
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/eqG5u5-wR8oUmfeZKXMb02OkQCg.roa
Signing time: Wed 03 Jul 2024 05:36:18 +0000
ROA not before: Wed 03 Jul 2024 05:36:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 401172
IP address blocks: 45.84.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:77:17:fb:ed:4c:c9:5c:3e:fa:99:20:6a:fb:b5:09:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jul 3 05:36:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7aa1b9bb9fb047ca1499f79929731bd363a44028
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:eb:12:91:c8:c0:02:73:a0:e7:58:a3:9b:5c:
72:76:09:84:73:ef:c7:4e:6f:c8:be:c5:67:63:37:
2f:3b:83:e9:eb:d9:eb:28:d5:05:fd:9b:1f:1a:85:
0c:75:dc:76:c6:0b:d9:d8:4d:63:bc:e1:07:1d:7d:
09:6b:3a:59:b0:41:7c:31:4a:ae:2a:8a:99:f1:1c:
aa:66:9f:d8:d8:79:9c:c1:d5:c1:8a:e0:15:98:43:
22:11:e1:75:31:8c:85:62:79:f7:4b:5a:d3:7d:ff:
cf:91:ef:76:a8:e1:4d:08:57:0d:75:10:e4:a5:8f:
d6:b2:3f:38:9c:27:04:e5:60:02:cb:bf:81:f6:b8:
ed:de:70:53:b5:29:86:6c:88:12:f1:44:a7:10:30:
81:c9:4f:b7:65:39:a3:2b:3e:a6:01:22:59:3e:22:
9e:f7:58:7e:e4:25:5d:34:7a:35:74:f7:3d:3f:51:
2a:a7:e0:d3:d3:d7:32:f7:ec:29:f0:ed:50:f5:06:
7b:38:2b:22:5c:ed:bc:dd:0e:61:9f:0b:d0:ac:a6:
86:a3:41:3d:7e:fe:c2:dc:87:fe:be:28:95:54:5d:
a4:ff:f5:57:0c:e4:50:92:4d:fc:24:9e:3d:3a:95:
70:55:23:b3:c3:a1:38:fb:15:f8:3f:7e:c3:aa:4f:
d4:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:A1:B9:BB:9F:B0:47:CA:14:99:F7:99:29:73:1B:D3:63:A4:40:28
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/eqG5u5-wR8oUmfeZKXMb02OkQCg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.89.0/24
Signature Algorithm: sha256WithRSAEncryption
84:34:82:99:cd:07:14:40:13:c9:cd:6c:37:79:e2:d0:47:af:
c8:40:ae:06:7f:3e:be:55:8c:8c:e5:14:b1:56:62:90:3d:69:
e6:da:7a:fc:3a:31:da:f1:65:4b:ee:9b:b5:91:fd:c8:b7:ee:
c1:dd:2b:b4:54:14:c8:02:af:d1:45:a8:dd:0b:40:95:60:59:
b8:4e:28:3a:2a:4d:ac:21:c0:66:0b:40:75:f9:ea:86:4a:a8:
f8:2e:d9:e6:ff:fe:80:66:32:4a:e8:1d:12:e9:b4:3d:be:35:
2b:f4:c2:b6:b5:bd:fd:64:f3:e3:01:7e:49:30:2a:4e:1f:d2:
ab:40:04:79:8e:3b:56:fa:23:88:b6:32:1e:0d:60:3b:b6:98:
fd:de:76:6b:1b:7a:3e:d8:bb:85:1c:ba:9a:b2:62:ac:2e:a3:
3b:d0:f4:56:74:dd:54:2b:71:a6:96:a8:75:8b:eb:2e:04:0a:
b3:89:b6:b0:79:f8:46:e5:67:b9:90:7c:d9:db:3d:ad:fb:f1:
14:1c:1e:d2:f3:75:6a:e4:80:08:da:7f:23:c9:ea:02:d2:66:
aa:72:39:17:54:b0:4f:e3:bc:64:00:d7:42:8d:d2:f2:63:ab:
72:e5:48:14:0e:17:db:00:3c:19:5c:4e:51:c7:c3:34:00:79:
11:c8:8b:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:06 2024 by rpki-client on console-fra.rpki-client.org