Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/eq1Nww8Tq_eq3DgCoi1yTwLA2sE.roa
File: eq1Nww8Tq_eq3DgCoi1yTwLA2sE.roa (raw, json)
Hash identifier: tUtBZrHZhhvlBOV75rmmm3lo7bpwTr8x0ABmbu+V5Jk=
Subject key identifier: 7A:AD:4D:C3:0F:13:AB:F7:AA:DC:38:02:A2:2D:72:4F:02:C0:DA:C1
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 018EE753B369624E14258B4CD412202C6B4C
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/eq1Nww8Tq_eq3DgCoi1yTwLA2sE.roa
Signing time: Tue 16 Apr 2024 14:33:26 +0000
ROA not before: Tue 16 Apr 2024 14:33:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210027
IP address blocks: 91.236.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft
rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Apr 2024 08:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:e7:53:b3:69:62:4e:14:25:8b:4c:d4:12:20:2c:6b:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Apr 16 14:33:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7aad4dc30f13abf7aadc3802a22d724f02c0dac1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:de:bd:84:8f:0a:b3:1d:de:30:a0:4b:84:4e:
ef:a0:cf:51:9a:2c:c5:39:e2:04:35:0e:53:25:a4:
30:a4:4d:d7:eb:3c:9d:b0:92:7c:e8:09:57:c9:b4:
66:1b:38:d2:be:e2:30:dc:af:aa:34:84:a6:4d:11:
cb:0f:cd:e8:87:84:cd:4d:34:6d:9a:83:35:1b:e2:
d9:ef:84:58:08:9e:5d:7f:10:de:2a:9b:88:95:d9:
78:ab:45:c4:98:03:9b:8e:45:ef:cc:5a:07:13:67:
8b:da:17:48:b4:2d:c5:33:d1:4b:1a:69:8f:16:8b:
30:c7:f4:ce:24:9d:3e:93:b7:07:e8:fc:4e:bc:e8:
70:04:f2:3e:70:25:b8:00:78:58:9f:76:49:5a:91:
9e:c7:d1:38:49:91:ed:2e:b2:45:94:b4:47:0e:69:
a4:d4:f2:35:96:66:5b:6d:82:4b:ad:de:ce:9c:d3:
7c:3c:68:01:23:67:bd:c9:ba:8f:e9:9e:97:87:bc:
de:67:97:e5:b7:f7:56:61:46:73:c1:47:06:10:be:
09:33:62:64:a2:00:82:94:9b:88:f8:6a:05:8a:78:
0d:d0:3b:32:b6:a2:41:1a:e5:c6:49:f8:4d:79:7d:
56:e7:61:ba:dc:4e:51:46:53:32:8e:10:32:cf:51:
d9:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:AD:4D:C3:0F:13:AB:F7:AA:DC:38:02:A2:2D:72:4F:02:C0:DA:C1
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/eq1Nww8Tq_eq3DgCoi1yTwLA2sE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.236.195.0/24
Signature Algorithm: sha256WithRSAEncryption
67:03:5a:ba:f8:f9:c1:27:ee:c7:aa:ae:23:34:48:39:94:f7:
06:aa:91:46:7f:1e:01:4e:ce:f1:6d:44:ed:8b:11:1c:a4:22:
7d:2a:e1:07:04:7f:43:6e:63:0d:71:89:4d:a5:1d:ec:8e:7d:
7b:87:39:60:e4:2c:25:59:ae:0b:27:7e:52:ca:29:1a:07:d1:
f4:0a:31:e5:96:6d:f6:3f:f8:02:0f:46:a8:ec:0b:f4:fc:96:
fb:22:96:59:ca:7b:52:f4:3b:b4:39:26:a2:1d:59:0d:2b:e0:
d9:cf:b1:e5:f5:fe:04:9a:a9:fd:5f:12:0c:49:d6:90:13:bc:
4a:5d:6d:df:04:d4:16:85:0d:04:4a:72:a8:47:2c:ee:8b:ce:
2f:6e:ce:06:0a:40:65:77:25:e5:8c:2f:92:45:f9:b9:83:9f:
52:df:4c:13:b4:55:05:2e:4b:11:df:5d:7f:a3:ed:a9:dc:3e:
73:9e:83:d0:e2:ab:71:22:13:9f:01:76:3e:e9:7a:4b:62:15:
f7:4c:9c:b7:d2:16:43:9f:a3:6d:a6:cb:49:69:42:be:02:ac:
cf:6e:48:16:f0:0e:2b:58:10:ad:80:8d:dd:f8:31:00:2c:88:
b6:ad:08:da:94:e8:31:61:5b:26:65:bb:dc:2c:28:d5:18:33:
06:ee:d2:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 29 13:20:10 2024 by rpki-client on console-ams.rpki-client.org