Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/EoHuQB5gssXyb-g8ycqeh13VlvI.roa
File: EoHuQB5gssXyb-g8ycqeh13VlvI.roa (raw, json)
Hash identifier: kByRKC+OzCn4HVekcm/oju/4DsOTZUxfVWUGuSwvekk=
Subject key identifier: 12:81:EE:40:1E:60:B2:C5:F2:6F:E8:3C:C9:CA:9E:87:5D:D5:96:F2
Certificate issuer: /CN=91f5fcedbdb84dd52fc6770d7ccfd3fc6684fa41
Certificate serial: 018EE1D52878CE636304088AC844AA052084
Authority key identifier: 91:F5:FC:ED:BD:B8:4D:D5:2F:C6:77:0D:7C:CF:D3:FC:66:84:FA:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kfX87b24TdUvxncNfM_T_GaE-kE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/EoHuQB5gssXyb-g8ycqeh13VlvI.roa
Signing time: Mon 15 Apr 2024 12:57:06 +0000
ROA not before: Mon 15 Apr 2024 12:57:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211908
IP address blocks: 45.82.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/kfX87b24TdUvxncNfM_T_GaE-kE.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/kfX87b24TdUvxncNfM_T_GaE-kE.mft
rsync://rpki.ripe.net/repository/DEFAULT/kfX87b24TdUvxncNfM_T_GaE-kE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Jun 2024 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:e1:d5:28:78:ce:63:63:04:08:8a:c8:44:aa:05:20:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91f5fcedbdb84dd52fc6770d7ccfd3fc6684fa41
Validity
Not Before: Apr 15 12:57:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1281ee401e60b2c5f26fe83cc9ca9e875dd596f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:b7:be:de:ae:32:d4:d5:a3:96:e1:11:3b:7b:
83:1e:c4:db:52:83:f8:b6:05:e4:a9:a1:75:9b:20:
4f:b1:61:94:87:13:ee:53:b3:ea:32:0f:75:7d:38:
ad:5a:de:b4:fc:87:b2:5b:16:5a:b5:0d:b0:7c:99:
d4:a4:c0:a8:c3:6d:8a:58:5c:b9:c5:ae:85:e2:30:
d6:b2:5b:97:69:ea:eb:d2:fc:c1:27:88:4e:46:bf:
b7:d2:e2:65:26:5c:c5:c9:c6:3f:8a:cf:0b:4c:fb:
9f:eb:0d:28:e0:34:62:3c:0b:ea:40:67:20:99:1a:
c1:73:25:37:8b:7d:4b:36:30:88:8b:4c:8a:eb:42:
52:82:78:1f:ce:5c:6d:84:8c:80:25:ab:49:38:e9:
51:c3:98:e6:0d:19:34:8e:27:45:ff:fc:ae:b8:e2:
22:35:4c:d0:f2:ff:49:92:77:62:fe:bc:fb:46:e6:
e7:5d:91:10:8d:2f:58:40:19:17:93:68:20:21:08:
02:a7:8e:cd:16:4c:f6:2e:cf:67:ef:4e:24:1a:9f:
8c:c9:02:69:23:63:e7:ac:ac:95:8c:5d:43:42:dd:
5e:fe:87:9f:67:05:89:67:27:39:4d:8e:9e:2f:d3:
ec:c1:4e:76:e6:7f:db:43:5c:0f:36:26:b3:72:eb:
15:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:81:EE:40:1E:60:B2:C5:F2:6F:E8:3C:C9:CA:9E:87:5D:D5:96:F2
X509v3 Authority Key Identifier:
keyid:91:F5:FC:ED:BD:B8:4D:D5:2F:C6:77:0D:7C:CF:D3:FC:66:84:FA:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kfX87b24TdUvxncNfM_T_GaE-kE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/EoHuQB5gssXyb-g8ycqeh13VlvI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/kfX87b24TdUvxncNfM_T_GaE-kE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.82.60.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:2c:17:bf:76:a4:fb:5b:5f:87:b2:f7:bf:a4:08:35:d0:c4:
3b:c2:4b:54:cb:e9:fa:8e:e8:f7:9f:de:39:6f:52:99:5d:b2:
f2:c5:72:cb:60:28:53:b2:96:3c:5f:4b:ab:25:f2:4c:db:ef:
b4:21:68:e8:f6:db:9f:36:45:4e:dc:01:6b:3a:09:d1:36:32:
fd:d5:e9:49:a8:00:f0:c9:2d:f0:ca:b8:81:94:a3:35:47:a5:
43:f9:10:4b:17:79:6e:18:52:ff:4c:00:84:e9:ba:e8:66:b3:
13:0f:36:ed:16:b2:c1:3f:c2:cd:d3:0b:67:b1:66:a5:03:f1:
93:02:9d:cf:56:2d:75:9f:45:d8:5d:e9:8a:41:46:de:68:9d:
53:a6:7c:08:a4:3c:e7:fe:76:24:82:83:dc:8c:8d:6d:32:b9:
88:d5:5b:13:e2:af:ee:6b:f3:11:54:78:5f:7a:3c:20:88:aa:
51:68:45:30:fd:72:aa:98:d9:a1:91:26:f4:21:d2:8f:52:a4:
2a:37:fa:82:e4:e2:ac:ff:a7:f6:94:38:c9:de:d1:34:9f:25:
74:8f:64:41:80:43:6d:20:ec:f9:ba:04:df:0f:2b:5e:2d:33:
c0:8b:66:8e:06:f9:25:16:c4:d8:27:43:fa:c2:96:24:0e:dd:
db:7a:8b:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 14 12:15:51 2024 by rpki-client on console-ams.rpki-client.org