Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/EqngZ64bPI00K_pcV3rffRwinx4.roa
File: EqngZ64bPI00K_pcV3rffRwinx4.roa (raw, json)
Hash identifier: 2Z88az6VuX4g/naBOCsWljRpCB9eQJARm3RyFzg/PxE=
Subject key identifier: 12:A9:E0:67:AE:1B:3C:8D:34:2B:FA:5C:57:7A:DF:7D:1C:22:9F:1E
Certificate issuer: /CN=6896d9c14a8ab5d8b0b408187ece15a0d23cee1c
Certificate serial: 018CC8DCE4F8BBE2DADCBC5B797186D3881C
Authority key identifier: 68:96:D9:C1:4A:8A:B5:D8:B0:B4:08:18:7E:CE:15:A0:D2:3C:EE:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aJbZwUqKtdiwtAgYfs4VoNI87hw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/EqngZ64bPI00K_pcV3rffRwinx4.roa
Signing time: Tue 02 Jan 2024 06:29:28 +0000
ROA not before: Tue 02 Jan 2024 06:29:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 13045
IP address blocks: 192.109.36.0/24 maxlen: 24
2001:678:b10::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.mft
rsync://rpki.ripe.net/repository/DEFAULT/aJbZwUqKtdiwtAgYfs4VoNI87hw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 06:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:dc:e4:f8:bb:e2:da:dc:bc:5b:79:71:86:d3:88:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6896d9c14a8ab5d8b0b408187ece15a0d23cee1c
Validity
Not Before: Jan 2 06:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=12a9e067ae1b3c8d342bfa5c577adf7d1c229f1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:5b:01:9f:f6:7f:cb:ae:d7:c9:64:fc:19:7c:
f5:14:af:bb:bc:83:e3:d3:6c:78:63:bf:bc:cc:05:
58:5c:1a:cb:4b:d7:00:16:be:0d:e2:aa:b5:23:7b:
16:f8:91:6a:ec:e5:1d:97:c2:4d:06:c1:f8:4e:39:
06:e9:eb:c9:df:f9:aa:8d:80:66:f2:3f:2c:f0:dc:
5b:64:31:ef:00:89:86:ea:4b:57:1e:96:10:c8:04:
5c:2f:50:47:38:8b:25:a4:03:8e:21:3a:1d:cd:92:
35:f5:4b:0b:67:48:1e:f1:56:eb:4c:6f:bf:19:9b:
f3:c2:22:a0:79:35:81:53:f2:58:91:37:00:28:74:
dd:23:09:44:6a:28:6e:3d:7c:de:ef:b6:39:8e:e9:
24:cc:09:1f:39:94:c5:a0:5d:f3:9a:34:26:8a:a3:
dd:57:2a:af:34:73:d8:2d:f1:13:22:da:ae:da:82:
40:94:83:1b:66:45:9b:d0:b7:43:ac:6d:91:fd:46:
6d:89:e7:4b:86:1e:2e:29:2b:5b:f3:68:b5:f8:65:
e2:56:ba:75:80:58:e4:d7:43:45:77:8d:46:08:dd:
2f:2b:9e:aa:b3:4d:52:df:9d:8e:67:b7:e2:f2:9f:
5e:f1:f4:07:4b:5d:37:9a:5d:b1:65:44:e9:07:ba:
9a:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:A9:E0:67:AE:1B:3C:8D:34:2B:FA:5C:57:7A:DF:7D:1C:22:9F:1E
X509v3 Authority Key Identifier:
keyid:68:96:D9:C1:4A:8A:B5:D8:B0:B4:08:18:7E:CE:15:A0:D2:3C:EE:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aJbZwUqKtdiwtAgYfs4VoNI87hw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/EqngZ64bPI00K_pcV3rffRwinx4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.109.36.0/24
IPv6:
2001:678:b10::/48
Signature Algorithm: sha256WithRSAEncryption
61:e4:8d:02:0e:f7:ca:ee:d7:0a:b7:42:49:c2:83:c6:f4:f9:
1d:9d:ba:ab:bf:1a:5b:5b:f5:08:e4:22:4f:03:a4:f3:de:39:
93:10:18:b7:30:c5:a0:48:29:8d:4f:7b:b6:39:6c:b9:1f:e9:
36:95:58:f2:9b:7b:74:16:4b:bc:df:1f:b3:53:54:9e:52:80:
54:4a:38:be:54:65:0a:5a:41:4c:f1:88:2e:34:3f:f4:8a:44:
ae:f0:78:2b:33:60:e0:d9:42:34:51:32:de:c1:b4:dc:11:58:
2a:50:c9:7c:d4:f6:a7:bd:18:cf:ce:68:00:57:3f:25:3c:2d:
9b:f3:77:d7:9c:3b:ed:30:86:27:24:db:a8:0d:04:11:61:2e:
72:36:dd:44:30:ce:7e:98:8e:56:a2:b4:41:47:e5:2b:f8:d5:
0c:2a:b5:f9:7a:52:35:20:41:2c:cf:c1:17:25:f0:38:00:73:
e9:fb:3f:c8:0f:1a:e1:53:cf:f1:28:b0:04:e0:1e:3c:3c:08:
20:30:d5:17:d1:cf:44:47:3c:43:de:0c:69:ac:dc:92:ef:d0:
fd:40:c6:24:4e:d0:12:5b:b7:57:91:73:56:b2:43:59:f2:77:
9f:fa:10:36:01:b8:bd:e1:04:31:1a:bc:f0:20:f0:88:ce:10:
32:10:80:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 15:58:06 2024 by rpki-client on console-fra.rpki-client.org