Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/7pGT1_EMUCKfOff6iCP3BToZq6c.roa
File: 7pGT1_EMUCKfOff6iCP3BToZq6c.roa (raw, json)
Hash identifier: xOXeo/HjHR2hnjYg/1sp0zsnb1m3QsL9ZCl17dotlX8=
Subject key identifier: EE:91:93:D7:F1:0C:50:22:9F:39:F7:FA:88:23:F7:05:3A:19:AB:A7
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 01932AAAB1B65BC459B26FCBE9DCBF9AE794
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/7pGT1_EMUCKfOff6iCP3BToZq6c.roa
Signing time: Thu 14 Nov 2024 12:34:09 +0000
ROA not before: Thu 14 Nov 2024 12:34:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 13335
IP address blocks: 45.155.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:2a:aa:b1:b6:5b:c4:59:b2:6f:cb:e9:dc:bf:9a:e7:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Nov 14 12:34:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ee9193d7f10c50229f39f7fa8823f7053a19aba7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:4f:36:c5:0d:cc:01:14:a1:08:08:5f:2e:ed:
a7:63:74:5f:1f:48:6a:c3:35:a0:a6:1f:6e:ca:ba:
fc:60:c3:a0:8b:e3:9b:6f:ef:22:fe:33:83:c6:4c:
4a:a6:45:5f:3e:5e:fb:9c:b1:7c:e1:3d:46:d5:07:
f9:82:08:1f:4b:25:53:5f:45:70:5e:d2:2a:53:31:
a9:9e:94:64:48:c1:29:5e:da:f3:b9:78:6d:41:72:
39:57:44:61:a3:d6:f1:b2:18:9d:1e:87:68:06:34:
58:9c:14:2f:8e:79:9d:15:ff:3f:c1:34:a4:49:cc:
2c:de:35:47:db:bd:2f:f2:49:b9:09:ea:de:ba:80:
9f:70:93:89:b0:3c:ae:12:29:05:81:4a:8f:4c:b0:
50:44:75:b4:1d:37:40:c9:c5:85:b3:bc:1f:af:6e:
8e:a6:6f:db:06:98:1c:a1:c2:3e:8a:30:66:54:9a:
d1:d6:c3:d6:d4:d6:ed:13:24:a5:d8:89:a1:f3:32:
1c:3e:64:ce:40:f3:45:e4:83:6a:3c:3c:20:7f:26:
94:ad:fd:a1:30:ac:9e:7b:bd:91:f4:85:19:e6:83:
f8:8b:a4:dd:76:4a:1d:63:0b:cb:de:85:06:ce:f2:
aa:5f:ef:0e:c5:bf:7b:28:eb:7e:86:38:1a:70:61:
0f:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:91:93:D7:F1:0C:50:22:9F:39:F7:FA:88:23:F7:05:3A:19:AB:A7
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/7pGT1_EMUCKfOff6iCP3BToZq6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.255.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:5c:b0:27:30:d5:0c:cf:f7:eb:8c:be:9c:49:df:24:8b:63:
28:21:18:a9:8f:88:13:8a:87:90:36:3a:8b:1b:b7:5b:67:54:
60:61:33:eb:3f:e5:90:7b:a8:51:6d:a8:d3:71:23:91:cd:68:
b6:b9:10:a5:13:d9:91:d9:49:81:0f:ab:9b:a7:70:31:02:1b:
bf:31:23:29:de:5a:4f:ca:1a:bf:8e:f7:46:12:69:14:75:b0:
12:7b:09:25:d6:ec:c1:5c:df:69:52:97:21:56:6a:1a:24:0d:
1a:e2:56:8e:53:d4:f3:e9:62:5d:7a:ae:26:8d:91:24:0c:8b:
78:23:c3:8e:87:c7:4e:e1:f0:cb:69:39:bd:12:7d:b3:58:55:
8e:94:52:af:09:cd:3a:a1:e3:02:ef:6b:53:2d:81:f0:f6:22:
14:5a:2c:84:93:aa:b2:a1:ba:c8:68:9c:0c:eb:9d:ba:1c:ba:
90:13:3d:6e:15:88:76:36:0c:25:1c:17:d3:0e:10:06:bc:54:
09:d5:d5:bc:4d:63:a5:6a:30:51:55:ff:fc:84:0f:10:4c:3c:
f9:91:24:c6:8c:68:fd:ee:54:d7:1c:89:72:be:d3:d1:c8:18:
d1:f8:de:12:a4:6c:39:b5:91:56:32:33:aa:89:04:50:1c:e1:
b7:91:11:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:50:04 2024 by rpki-client on console-fra.rpki-client.org