Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/6a88ac-efb4-45e4-9199-2abdb21941bc/1/edpENM9sql54NqBm8JVOVUioXhc.roa
File: edpENM9sql54NqBm8JVOVUioXhc.roa (raw, json)
Hash identifier: I/xbUYdH73HbXkHFn6g2KmkLqZ/n1AwGaZEm9Ed5H3o=
Subject key identifier: 79:DA:44:34:CF:6C:AA:5E:78:36:A0:66:F0:95:4E:55:48:A8:5E:17
Certificate issuer: /CN=96b87e5fd1aadc1bbea372b4269eebd393c5cd67
Certificate serial: 018CC801BF50F7898E91C5B07264EF9D2783
Authority key identifier: 96:B8:7E:5F:D1:AA:DC:1B:BE:A3:72:B4:26:9E:EB:D3:93:C5:CD:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/6a88ac-efb4-45e4-9199-2abdb21941bc/1/edpENM9sql54NqBm8JVOVUioXhc.roa
Signing time: Tue 02 Jan 2024 02:30:06 +0000
ROA not before: Tue 02 Jan 2024 02:30:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56361
IP address blocks: 46.175.120.0/21 maxlen: 21
31.41.184.0/21 maxlen: 21
176.98.168.0/21 maxlen: 21
176.118.128.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/6a88ac-efb4-45e4-9199-2abdb21941bc/1/lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/6a88ac-efb4-45e4-9199-2abdb21941bc/1/lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 23:23:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:bf:50:f7:89:8e:91:c5:b0:72:64:ef:9d:27:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96b87e5fd1aadc1bbea372b4269eebd393c5cd67
Validity
Not Before: Jan 2 02:30:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=79da4434cf6caa5e7836a066f0954e5548a85e17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b2:06:7f:f7:6f:ce:5b:93:aa:e9:8b:9e:c1:
95:af:8f:8a:31:df:c7:71:5c:5a:01:e7:82:52:a9:
8a:31:76:ce:26:12:99:0f:48:45:3e:16:a2:8f:0f:
25:4f:c1:99:99:d8:e6:12:1b:4e:28:2f:bc:99:fa:
d9:84:64:9b:4d:3a:2e:39:cf:9c:7b:8e:b4:b3:c6:
e1:12:38:28:6d:87:a5:03:e6:55:25:df:2e:c3:f3:
15:bc:1c:ff:0b:cc:ec:85:55:da:12:82:62:c7:fe:
d5:b7:64:60:b8:4a:9e:05:7c:b5:e2:17:3f:cc:bf:
01:dc:95:05:99:42:3b:6d:83:7f:65:a7:af:36:2b:
69:b6:bd:2a:a9:d6:1b:02:dd:75:cf:65:cc:3c:69:
d1:a2:75:5a:2b:f4:68:33:b5:a1:db:0f:b7:f5:c9:
c2:19:ae:fb:c8:d6:5a:5f:70:af:87:0f:d0:cc:53:
10:7d:8f:f0:93:93:16:61:c3:75:5f:9a:cd:77:7b:
8f:fb:09:78:e7:f2:e0:6f:2d:b1:f4:df:90:d3:33:
27:01:51:fb:60:c7:0d:17:46:c9:e3:e8:a3:7c:07:
f2:f4:f7:7b:a2:3e:dd:12:61:88:d5:e3:b3:b6:6c:
48:cc:27:87:79:c6:b1:be:08:3f:1b:f1:2f:b1:06:
1b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:DA:44:34:CF:6C:AA:5E:78:36:A0:66:F0:95:4E:55:48:A8:5E:17
X509v3 Authority Key Identifier:
keyid:96:B8:7E:5F:D1:AA:DC:1B:BE:A3:72:B4:26:9E:EB:D3:93:C5:CD:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6a88ac-efb4-45e4-9199-2abdb21941bc/1/edpENM9sql54NqBm8JVOVUioXhc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6a88ac-efb4-45e4-9199-2abdb21941bc/1/lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.41.184.0/21
46.175.120.0/21
176.98.168.0/21
176.118.128.0/21
Signature Algorithm: sha256WithRSAEncryption
75:e5:23:10:5a:41:54:e5:3d:54:c3:4d:1f:17:c3:b9:02:a0:
bf:3b:1a:dc:85:f4:8b:d7:fa:04:42:ea:e1:10:57:9e:13:eb:
27:ad:94:48:c6:88:96:12:3a:33:8f:39:12:74:71:68:11:a5:
f1:38:86:35:88:32:f0:f6:ec:c1:ee:5c:7d:ea:01:9e:6a:88:
8f:fd:85:35:46:92:9a:6d:20:fb:01:f8:14:09:64:59:3a:7b:
59:c8:da:a9:ab:70:15:aa:3e:41:a7:0b:19:bb:7a:63:12:0d:
fa:45:52:a3:2f:a2:02:64:f2:0d:7e:43:8a:a4:d6:7f:1c:f3:
69:58:8a:d0:d6:69:0b:dd:01:c6:8d:af:e7:45:5d:11:c7:06:
7e:d4:5a:34:2c:92:67:c5:78:0a:fc:89:41:02:c2:f5:27:15:
5c:fe:d9:30:73:e8:b9:fa:83:15:d8:ba:59:b1:b3:f3:c3:0f:
1d:53:3a:2a:58:8a:3a:80:25:2d:9c:3f:d9:20:e1:13:c2:89:
d9:3d:5b:0b:40:0e:7c:03:02:11:f6:39:d4:31:72:7e:13:a3:
11:9d:75:57:3e:89:78:47:c2:ed:46:a6:2c:d7:f4:8b:9d:51:
60:db:ae:a4:df:ac:54:0a:04:84:03:f6:3c:7d:88:0e:53:74:
f2:35:b1:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 03:06:24 2024 by rpki-client on console-ams.rpki-client.org