Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/J7EuqQK4OIYkTGAWIhQHAePBUhM.roa
File: J7EuqQK4OIYkTGAWIhQHAePBUhM.roa (raw, json)
Hash identifier: qBdxz2k/Igp/+WkNl+mMKEfF+BzZc38wqgKqhz/k5YM=
Subject key identifier: 27:B1:2E:A9:02:B8:38:86:24:4C:60:16:22:14:07:01:E3:C1:52:13
Certificate issuer: /CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
Certificate serial: 0192D1C849EC76136C3C0872107EECC83593
Authority key identifier: 98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/J7EuqQK4OIYkTGAWIhQHAePBUhM.roa
Signing time: Mon 28 Oct 2024 06:20:17 +0000
ROA not before: Mon 28 Oct 2024 06:20:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212477
IP address blocks: 45.15.208.0/24 maxlen: 24
45.84.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 00:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:d1:c8:49:ec:76:13:6c:3c:08:72:10:7e:ec:c8:35:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
Validity
Not Before: Oct 28 06:20:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=27b12ea902b83886244c601622140701e3c15213
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:f9:be:dc:c4:f8:6f:52:91:0f:2f:d5:c1:d3:
32:20:64:56:c6:5e:ae:35:ef:63:d2:72:0b:e2:35:
e2:3c:06:d6:8d:40:4c:1d:0f:c5:05:f5:76:2a:5b:
13:7e:f3:58:32:5b:77:71:e9:89:b2:34:35:d7:37:
6b:76:e4:4b:d2:e8:b5:bb:be:5e:08:e7:e2:c6:ad:
32:b6:9c:39:c6:da:10:86:25:a6:b2:12:13:39:73:
d9:4a:2b:1c:ae:bc:f7:be:79:38:f0:dd:fb:ec:20:
c7:59:1e:93:81:6c:b5:8e:72:e6:88:b3:70:ed:36:
32:e2:40:9d:90:ea:9f:60:37:eb:ca:2e:f6:16:dd:
4d:5a:16:47:5c:27:08:65:b4:9d:4f:1c:a1:00:dd:
c1:6d:35:eb:b4:d4:51:56:70:ed:8c:11:3e:26:4f:
cf:47:6f:8b:4a:8a:0a:cb:95:50:2e:da:80:74:da:
23:9e:e7:42:6c:1e:84:3c:c6:33:0a:1f:56:8b:02:
a5:b1:da:57:7f:00:37:c9:43:6b:d2:b6:22:c9:f0:
35:0c:ad:12:a2:66:5b:2c:e9:f6:32:a0:cc:69:dd:
8f:62:03:e5:ae:4a:24:7d:0b:cc:15:29:65:13:55:
16:a8:71:27:8a:b1:1b:14:a2:f3:07:ab:ca:1f:b1:
d8:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:B1:2E:A9:02:B8:38:86:24:4C:60:16:22:14:07:01:E3:C1:52:13
X509v3 Authority Key Identifier:
keyid:98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/J7EuqQK4OIYkTGAWIhQHAePBUhM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.208.0/24
45.84.59.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:82:b7:4a:a4:37:04:f4:9f:47:a7:64:e5:db:0f:73:6e:7b:
f7:9f:4a:46:90:10:ed:c2:db:73:d1:c6:22:0c:4f:8d:88:9c:
27:24:87:71:ec:95:dc:a3:cc:b9:43:a9:7b:f3:1f:ef:9f:85:
ec:9b:42:98:34:a4:4c:98:91:6a:38:66:4b:64:06:b9:78:3f:
dc:3b:ec:30:79:c9:c6:f7:f2:e0:2c:0b:d3:69:0a:3a:20:35:
63:18:38:4d:e4:be:e0:ab:ac:02:fd:e0:83:4f:bb:2c:c6:69:
75:b6:8f:87:e5:64:43:ec:04:3a:1d:78:81:e6:c3:88:ba:f0:
6c:27:e8:66:61:92:aa:9d:a3:1d:a9:0e:55:b2:56:ff:96:f8:
b4:10:97:b1:f1:ec:7e:1b:39:a6:f5:8b:ba:58:bd:77:32:d8:
d2:84:8f:cc:c9:54:20:0e:2a:4a:90:ab:a2:7d:0f:c0:a5:de:
33:a8:31:4b:3c:8d:34:d6:b9:d7:df:f8:a0:02:08:72:38:62:
f3:bf:7f:50:5f:45:ce:6d:8d:74:5a:e5:f9:cb:34:bd:74:99:
19:71:96:1e:15:d0:39:c9:2e:b0:42:75:45:2c:6e:42:f2:1f:
6d:57:0a:81:01:90:09:69:d6:2c:25:00:b6:76:3e:36:f5:29:
4a:4b:5c:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:39:15 2024 by rpki-client on console-fra.rpki-client.org