Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/eCb1hAaCq6HpLZcUPAR0ADRqlq0.roa
File: eCb1hAaCq6HpLZcUPAR0ADRqlq0.roa (raw, json)
Hash identifier: SF8dccJkNqDSPbaBFqjUAlBiELzAANIe5XyB8JzoQtM=
Subject key identifier: 78:26:F5:84:06:82:AB:A1:E9:2D:97:14:3C:04:74:00:34:6A:96:AD
Certificate issuer: /CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Certificate serial: 019306E48C1481769A2E18793B6FA149D118
Authority key identifier: 93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/eCb1hAaCq6HpLZcUPAR0ADRqlq0.roa
Signing time: Thu 07 Nov 2024 13:51:01 +0000
ROA not before: Thu 07 Nov 2024 13:51:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212238
IP address blocks: 5.134.80.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:06:e4:8c:14:81:76:9a:2e:18:79:3b:6f:a1:49:d1:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Validity
Not Before: Nov 7 13:51:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7826f5840682aba1e92d97143c047400346a96ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:c3:87:26:33:cc:2d:21:8b:12:ae:ca:bf:ba:
8c:85:ca:5e:d6:f8:69:20:57:73:b7:1f:bb:c8:82:
91:d2:dd:00:c1:6c:fc:6c:f6:75:83:87:b1:3d:6a:
21:34:03:20:92:d7:74:9e:7c:56:f2:8b:13:52:f8:
c4:cd:fb:1f:94:81:c1:dc:93:a7:0c:30:d9:3c:ee:
4a:b0:a7:ac:a7:24:1f:19:9c:ee:c8:0e:1f:42:da:
1e:a5:ce:ec:17:80:1a:9f:7e:5d:9b:e0:61:fb:e4:
75:e7:6d:c0:b4:62:2e:c4:52:85:a3:93:f3:f1:e7:
f9:69:82:21:be:1c:0a:d9:73:ce:be:3c:47:c9:67:
f0:14:8b:07:59:05:aa:9f:42:5c:a1:2a:f5:14:eb:
90:c0:cd:32:46:d2:60:17:b8:56:b1:e0:5d:85:37:
08:59:18:05:7d:02:62:af:79:36:fe:1e:68:90:bc:
df:22:39:5c:fb:87:50:d5:b8:73:5d:08:bd:c6:f1:
2c:53:dc:40:70:f7:32:93:3b:40:19:f6:4b:7d:ec:
62:be:5a:42:e5:a2:3b:e4:c3:52:62:37:9d:ee:d4:
6e:e4:03:5b:a1:c4:f9:da:ca:60:d9:2a:50:99:94:
48:fa:3d:1d:ad:d4:79:43:cc:07:e8:5b:25:88:33:
cb:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:26:F5:84:06:82:AB:A1:E9:2D:97:14:3C:04:74:00:34:6A:96:AD
X509v3 Authority Key Identifier:
keyid:93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/eCb1hAaCq6HpLZcUPAR0ADRqlq0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.134.80.0/22
Signature Algorithm: sha256WithRSAEncryption
ac:9f:ba:5c:53:82:86:bb:6f:ca:c4:4e:51:33:8e:7d:53:62:
0f:83:84:59:9c:02:e8:37:d9:54:cf:8b:03:ab:78:36:0f:c7:
66:6c:35:8e:28:12:69:72:7c:81:90:c0:b1:67:30:b1:29:ba:
b0:3a:5c:ea:09:06:64:5e:21:be:7e:3f:40:ce:68:d0:b5:d4:
07:37:73:ee:51:4c:c1:2e:ee:f9:c8:81:23:5c:a6:cd:3c:d5:
93:b3:20:c7:1c:45:46:e8:00:1e:e5:3b:8a:6d:f1:0c:c5:5e:
c6:d5:1e:29:f4:91:27:72:24:24:75:45:4f:e0:bf:97:55:10:
3f:a1:09:86:b4:98:19:c0:62:f9:7b:9d:61:99:a1:d1:31:c7:
1e:27:b5:08:8b:02:e8:83:91:49:32:a7:24:48:32:02:3d:9b:
67:11:95:2a:77:53:0e:b7:54:b8:da:fb:3a:b9:a8:56:19:41:
0f:09:c5:0c:09:c8:2c:81:4e:dd:9e:86:d9:fe:9d:85:ed:75:
84:ae:b6:fb:8a:8e:0c:67:a2:ca:bd:c4:48:da:9a:18:8e:cb:
8d:09:65:45:69:ec:1b:b7:b5:4d:c5:74:67:b5:2e:38:e8:d2:
95:96:61:38:e6:91:19:5c:9b:da:0d:92:73:b8:bc:52:ca:ed:
d4:aa:18:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:34:00 2024 by rpki-client on console-fra.rpki-client.org