Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/eGMfGfuwwz3y5AzckW812mtA1WE.roa
File: eGMfGfuwwz3y5AzckW812mtA1WE.roa (raw, json)
Hash identifier: uj2O753G6QQfUB8WwELgBjYM8OrtKtYXW/3Qk2bngvc=
Subject key identifier: 78:63:1F:19:FB:B0:C3:3D:F2:E4:0C:DC:91:6F:35:DA:6B:40:D5:61
Certificate issuer: /CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d
Certificate serial: 01911D50910A8521312EB2BB4D2A210DEDE0
Authority key identifier: 9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/eGMfGfuwwz3y5AzckW812mtA1WE.roa
Signing time: Sun 04 Aug 2024 12:15:04 +0000
ROA not before: Sun 04 Aug 2024 12:15:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 138968
IP address blocks: 103.76.85.0/24 maxlen: 24
103.76.87.0/24 maxlen: 24
116.206.92.0/22 maxlen: 24
203.189.232.0/23 maxlen: 24
2a0f:6700::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 09:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:1d:50:91:0a:85:21:31:2e:b2:bb:4d:2a:21:0d:ed:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d
Validity
Not Before: Aug 4 12:15:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=78631f19fbb0c33df2e40cdc916f35da6b40d561
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e7:b8:2b:e1:72:74:8f:cb:68:18:1e:0d:a9:
41:3f:5e:38:94:5d:71:a8:e1:dc:24:70:a1:69:12:
43:3b:a3:ee:3e:12:8b:2f:2c:19:78:28:8f:c2:44:
d6:e4:bc:b4:86:9c:02:0d:4a:28:fc:1a:1a:a2:7c:
51:ce:20:6e:df:a6:f8:11:33:71:dc:40:f2:12:ba:
93:7a:9e:f4:72:83:a3:cc:c1:a3:72:98:b7:c0:8b:
a1:6b:e2:8e:a6:17:7b:ea:76:6c:11:e0:04:bd:fd:
48:c7:cd:93:a3:b9:ca:00:fe:df:58:36:0d:bf:a8:
24:61:11:47:05:5e:cf:5f:f3:f9:53:79:1d:1c:f4:
35:bc:d1:5d:ab:af:94:85:a5:4c:bf:f6:cb:a3:86:
09:15:a7:bb:0a:b8:e2:a1:61:b7:79:36:e7:62:f2:
55:6d:4f:03:cd:26:81:8e:fe:57:1e:3c:6d:e7:ee:
f6:a8:30:55:7f:21:6a:a5:0d:71:34:bd:b0:5b:a0:
f3:11:5f:7c:da:a8:59:74:9b:da:fb:ef:77:3a:2a:
77:8a:81:a6:01:17:0e:89:bb:9f:59:ac:7d:64:e7:
ee:7b:c0:1d:56:46:45:5f:f3:b5:82:fc:75:59:9f:
0a:c8:d6:d1:17:69:7a:af:cd:9f:6b:98:4a:cd:51:
3b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:63:1F:19:FB:B0:C3:3D:F2:E4:0C:DC:91:6F:35:DA:6B:40:D5:61
X509v3 Authority Key Identifier:
keyid:9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/eGMfGfuwwz3y5AzckW812mtA1WE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.76.85.0/24
103.76.87.0/24
116.206.92.0/22
203.189.232.0/23
IPv6:
2a0f:6700::/29
Signature Algorithm: sha256WithRSAEncryption
8d:68:95:d9:26:c9:9b:d0:1b:35:ca:37:0a:21:b5:97:39:90:
c6:f5:f3:9a:fb:df:c1:66:0b:50:f0:f8:f7:91:37:7d:1b:8a:
7e:58:c8:e3:a5:31:89:dd:c3:b1:b3:41:72:e3:ae:e1:b7:ad:
9c:36:62:b7:ea:33:78:de:e1:5c:6b:fc:4d:1d:a3:d5:fe:47:
af:34:80:66:11:32:73:20:fa:07:bf:07:f7:0e:30:a4:7c:62:
11:20:35:c0:76:5f:a1:65:d3:e6:1d:ee:8b:83:75:db:43:4a:
2e:5f:ab:d1:8c:2b:38:50:24:67:db:b3:3a:af:15:8c:ea:83:
9a:f8:4a:98:29:e7:dd:63:3e:7d:5d:82:89:7b:34:24:75:3b:
f1:a3:10:ed:eb:84:31:a6:77:d2:9e:e3:18:e2:83:d9:1c:d1:
69:81:10:12:47:9d:d1:58:e4:4c:f0:13:40:9f:75:67:ba:bd:
44:44:bb:93:06:7e:31:31:ef:c6:1e:fb:7a:37:d6:36:d4:95:
a3:03:aa:13:0f:9c:d4:b4:85:1c:f2:c3:ff:f3:e0:cc:20:a5:
cc:87:9a:d2:b0:55:ea:7e:e9:52:e2:a6:ee:fa:d1:5d:97:25:
1c:90:bf:e5:76:d6:83:75:ef:5e:7d:d4:92:b3:eb:7d:ec:ca:
e0:a0:70:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:07:33 2024 by rpki-client on console-fra.rpki-client.org