Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/7OapzykDBxTGF7m1BCt1PfH9_Eg.roa
File: 7OapzykDBxTGF7m1BCt1PfH9_Eg.roa (raw, json)
Hash identifier: eJj1dLLhdREsSxGd29Y+48JQBC+kRMVYsxa971hlB0c=
Subject key identifier: EC:E6:A9:CF:29:03:07:14:C6:17:B9:B5:04:2B:75:3D:F1:FD:FC:48
Certificate issuer: /CN=17067977efd14bc89fb0daba03bb0f600fbb0184
Certificate serial: 0192F612D22A149949B98CACF4FA95860BCE
Authority key identifier: 17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/7OapzykDBxTGF7m1BCt1PfH9_Eg.roa
Signing time: Mon 04 Nov 2024 07:28:01 +0000
ROA not before: Mon 04 Nov 2024 07:28:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29802
IP address blocks: 86.110.54.0/24 maxlen: 24
86.110.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 14:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:f6:12:d2:2a:14:99:49:b9:8c:ac:f4:fa:95:86:0b:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17067977efd14bc89fb0daba03bb0f600fbb0184
Validity
Not Before: Nov 4 07:28:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ece6a9cf29030714c617b9b5042b753df1fdfc48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:68:0d:a2:38:ce:10:07:c9:08:70:26:86:d1:
9c:8e:c3:1a:c0:a1:88:08:6c:09:0c:7f:23:99:b7:
93:0d:ee:66:22:ee:69:22:07:3d:c2:4b:83:b1:34:
05:9b:8a:4a:f5:af:d9:a9:c8:75:be:88:fe:a6:81:
7d:a8:d6:ad:72:ce:e4:8d:dd:a2:1f:80:21:84:cb:
11:c6:56:b6:6d:4e:82:84:46:12:f1:f0:d7:fc:48:
51:80:eb:f4:13:f9:24:37:5f:4c:81:4b:58:be:b4:
6a:84:aa:2b:5b:01:9c:2b:36:27:c8:f8:b3:f7:6f:
3c:39:13:fd:df:b3:23:d4:79:38:b5:60:a3:ed:91:
c8:72:5f:78:6b:2f:3d:97:d1:2f:6d:b5:d7:c6:80:
b5:d8:8f:96:c3:aa:ce:9a:4e:e7:e2:7c:29:5c:e4:
96:9b:e0:9e:11:77:88:72:c2:d0:29:ea:e6:40:64:
af:85:91:23:ff:a5:17:cf:52:e2:dc:55:fc:f2:98:
24:98:f4:11:8b:73:ba:d0:aa:e3:d0:b3:0a:24:ba:
a8:f3:39:5e:e9:5a:f4:8b:92:4b:84:65:b9:88:4d:
b8:5e:dc:52:94:22:71:b0:1b:b4:ee:6f:ad:75:43:
a5:96:ac:28:29:06:52:e3:98:ff:d9:63:b2:d7:d4:
3c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:E6:A9:CF:29:03:07:14:C6:17:B9:B5:04:2B:75:3D:F1:FD:FC:48
X509v3 Authority Key Identifier:
keyid:17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/7OapzykDBxTGF7m1BCt1PfH9_Eg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.110.54.0/24
86.110.62.0/24
Signature Algorithm: sha256WithRSAEncryption
81:4d:7f:cd:c7:87:cb:70:b4:23:04:8f:3f:cd:d7:79:18:c2:
4e:97:9e:97:2e:13:0b:af:89:04:0b:a3:f8:0f:ea:16:3f:12:
c0:09:32:8d:cf:03:2f:69:4d:75:4e:a2:9c:c1:16:77:6b:72:
d7:f8:70:ba:fa:6a:80:07:0e:8a:b6:2f:d8:70:52:41:73:f1:
da:41:ed:34:60:b7:15:22:bc:6c:76:10:35:76:ae:a0:9c:42:
77:b3:a3:70:c8:70:f6:9b:b6:74:3d:f5:24:36:0f:db:95:0d:
d9:ff:36:c0:52:da:56:04:1c:d0:ab:6c:a8:02:5e:9c:27:29:
b7:42:9e:c2:e5:e5:4d:b6:43:67:9b:e1:4b:56:d7:c9:bf:49:
ef:e5:af:b9:ef:9d:39:60:b6:39:49:51:14:d9:55:1a:d1:e3:
21:dc:c9:f8:07:94:dd:d4:d5:01:10:23:a7:f1:4f:ad:ea:66:
cf:75:83:fb:21:13:79:56:fd:a2:43:6e:07:ce:e5:54:7e:ec:
86:cb:34:13:73:c7:bc:4a:70:14:e9:59:4e:e2:bd:f3:21:df:
c0:58:da:2e:c8:1d:29:78:13:6e:c8:3b:5c:36:3b:ad:ac:41:
89:53:68:46:96:bf:7d:28:90:77:57:a7:20:a7:27:99:eb:c7:
51:1f:75:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 23:16:41 2024 by rpki-client on console-ams.rpki-client.org