Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/EFLLSbRpJRNqG2-RS1ceIxY9XbU.roa
File: EFLLSbRpJRNqG2-RS1ceIxY9XbU.roa (raw, json)
Hash identifier: AM7zar1d8ohQZf0sU6hwfqKwiP6XLl8aM0+SqwExk1E=
Subject key identifier: 10:52:CB:49:B4:69:25:13:6A:1B:6F:91:4B:57:1E:23:16:3D:5D:B5
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 0191F26719CE9F938885A67A36CA595FD28B
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/EFLLSbRpJRNqG2-RS1ceIxY9XbU.roa
Signing time: Sat 14 Sep 2024 21:18:48 +0000
ROA not before: Sat 14 Sep 2024 21:18:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205733
IP address blocks: 89.21.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 06:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:f2:67:19:ce:9f:93:88:85:a6:7a:36:ca:59:5f:d2:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Sep 14 21:18:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1052cb49b46925136a1b6f914b571e23163d5db5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:47:f4:2f:09:e1:bd:23:eb:75:b9:f9:a4:07:
42:80:7d:3a:07:26:27:e0:93:57:ed:cd:e1:29:e3:
a9:59:5b:24:16:72:b9:f0:ed:c3:2f:35:3c:2e:a5:
9b:13:0c:a0:44:68:3f:3d:3a:83:f1:2f:26:03:ef:
80:25:61:0a:9f:d5:e1:e1:f4:4e:8e:00:81:21:af:
a5:8b:5c:38:83:5c:a3:0c:9a:fc:a8:44:81:36:73:
8e:fb:eb:b4:bd:a6:17:30:34:15:38:75:2a:85:da:
21:70:c2:c0:c3:48:39:19:ff:82:1e:10:de:44:aa:
21:8a:92:13:59:75:9f:59:13:20:87:07:40:64:20:
c4:94:50:a2:ea:0c:50:80:90:18:8a:c6:fd:32:0b:
d9:5b:e1:b2:20:2d:1f:f1:d2:c2:05:12:ce:43:31:
7d:6a:53:48:44:2d:29:00:43:af:bc:90:03:3a:84:
c1:d2:98:bf:69:27:a8:9e:6e:c6:3e:e1:0f:78:29:
0f:5d:47:52:47:80:8c:72:31:42:61:e1:68:5f:ed:
f7:de:8b:92:c6:b6:4b:37:e0:20:73:5b:b6:a7:41:
27:44:25:f1:37:e5:4d:88:df:51:5d:d3:91:34:3f:
e9:a9:4e:b8:ff:38:0c:74:b9:95:4c:91:6e:c7:98:
4c:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:52:CB:49:B4:69:25:13:6A:1B:6F:91:4B:57:1E:23:16:3D:5D:B5
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/EFLLSbRpJRNqG2-RS1ceIxY9XbU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.21.87.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:f3:3b:9e:42:13:c2:f1:f4:08:7f:4d:ff:c1:15:a8:61:5c:
d9:54:ce:2d:db:0d:ca:9d:20:32:76:11:eb:07:a5:01:67:49:
63:09:e8:fd:29:14:2c:57:b0:f8:35:b8:b0:69:35:60:fb:c5:
71:4e:61:44:c4:ea:e0:12:54:41:f4:ba:0d:bf:45:34:31:1b:
10:97:eb:a6:fd:57:38:9a:58:44:a7:45:04:16:47:0f:ce:35:
f9:1d:06:a3:af:dc:83:30:65:5c:cd:27:e6:14:27:c9:2c:0c:
90:3a:63:1f:db:6f:73:69:4e:b9:e1:61:e9:50:89:a7:b5:a3:
15:3d:d6:db:eb:68:57:d3:55:0b:dc:3d:27:32:a8:2c:13:da:
a4:a4:47:e1:d4:16:d6:99:4e:3a:76:0e:08:ec:08:e7:b8:19:
30:76:02:5b:8e:68:12:72:2d:3a:11:d1:a1:fe:c5:a5:4f:f1:
80:e6:38:4f:66:1a:a4:13:b3:0d:6b:26:59:e6:0d:54:3e:94:
46:6b:be:70:0d:cc:2c:a0:0f:de:4d:1c:52:7e:82:fc:02:36:
a2:35:4d:da:a8:13:1c:74:d9:2a:15:0f:57:41:66:0e:f9:36:
69:4f:b5:31:28:28:d4:1e:a2:d6:1f:2f:59:a5:fa:bb:9e:88:
14:17:75:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:41:08 2024 by rpki-client on console-fra.rpki-client.org