Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/eyd9mYBiy1QWZ6eLRCi7H1QcORI.roa
File: eyd9mYBiy1QWZ6eLRCi7H1QcORI.roa (raw, json)
Hash identifier: kFMsYJHjYrwcyvDYbkIFRERNd4DIOW6is4VTwSXZp+I=
Subject key identifier: 7B:27:7D:99:80:62:CB:54:16:67:A7:8B:44:28:BB:1F:54:1C:39:12
Certificate issuer: /CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Certificate serial: 018CC86F51B24F4E1A2200140ED919CC4732
Authority key identifier: 07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/eyd9mYBiy1QWZ6eLRCi7H1QcORI.roa
Signing time: Tue 02 Jan 2024 04:29:47 +0000
ROA not before: Tue 02 Jan 2024 04:29:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44587
IP address blocks: 217.151.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:51:b2:4f:4e:1a:22:00:14:0e:d9:19:cc:47:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Validity
Not Before: Jan 2 04:29:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7b277d998062cb541667a78b4428bb1f541c3912
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:7f:fb:7a:1e:6f:3c:04:cf:4c:6e:08:d9:d2:
6c:4d:92:b3:e0:33:cd:cc:35:c9:92:51:fa:6c:a1:
98:29:da:aa:d5:ce:c0:f2:54:88:e2:3e:32:38:06:
7f:8f:c6:04:a3:86:c2:b0:a0:35:b9:48:7f:4e:32:
ee:ca:24:e3:cd:d5:de:d2:56:a6:ff:2b:e1:81:70:
23:af:e1:18:4d:53:44:76:87:c1:95:f6:ca:61:5c:
8d:c4:d7:cf:3b:85:41:78:49:de:8e:6c:f7:10:9f:
05:5f:c9:da:64:e1:ca:56:4d:ae:72:72:23:5c:65:
95:74:91:34:c5:6b:08:11:3f:fd:eb:06:c1:52:2a:
e0:7b:19:5c:26:33:0a:14:a0:35:47:dd:30:21:ac:
2c:c4:06:28:2b:c1:25:64:9f:91:7d:a5:c5:71:6d:
8b:ec:10:83:d4:61:88:dc:93:b1:97:11:a9:9c:3c:
27:ee:30:92:84:23:0a:71:5a:06:dd:48:90:dc:a5:
3e:ca:ff:93:64:e1:9c:85:19:bb:0a:1d:20:77:62:
85:91:f0:c3:37:81:55:d0:ec:c9:25:a5:9d:45:bc:
be:c7:36:9e:63:6e:df:fa:14:bb:13:16:5a:56:8e:
db:24:ed:47:ac:18:45:14:ad:50:2d:13:59:b5:72:
82:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:27:7D:99:80:62:CB:54:16:67:A7:8B:44:28:BB:1F:54:1C:39:12
X509v3 Authority Key Identifier:
keyid:07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/eyd9mYBiy1QWZ6eLRCi7H1QcORI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.151.228.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:7a:37:18:89:17:4f:2a:f4:a1:f3:9c:c6:50:46:ed:b1:a4:
b7:53:a9:73:d6:1b:83:79:40:a7:a4:01:69:6e:83:04:af:27:
41:9e:9f:8d:e1:2c:87:2e:f7:8d:9f:87:f4:3c:5b:9d:d6:db:
1d:a0:4d:8e:7e:c8:f3:47:bf:2d:8c:84:60:df:a7:3b:83:df:
f8:3c:20:c8:f9:96:d3:39:13:b0:46:b8:9a:05:6b:e7:45:3f:
b1:0e:a9:b7:67:e0:f5:1e:77:e4:ab:11:73:51:a0:3a:56:25:
6f:90:3f:06:40:19:5e:d7:ea:ac:01:6a:79:88:b1:be:ac:f2:
55:f8:e6:4d:91:62:c5:73:a5:19:6e:01:7c:3a:c4:87:39:5d:
95:a7:e8:33:95:2e:26:67:6c:cf:db:e3:9d:31:a0:73:d5:12:
a3:cb:e5:e9:64:27:89:fc:45:f8:a5:0f:90:cc:a7:c0:77:52:
be:71:06:bc:89:d1:b5:c3:35:af:31:c8:46:8f:e4:28:44:b6:
83:62:9d:03:53:e0:46:3b:20:b8:35:81:54:4e:05:2f:ac:a2:
cc:33:4f:71:7a:9c:92:51:3a:93:36:e7:68:82:85:da:77:b0:
d9:9d:7a:39:f4:58:19:01:60:2a:cc:a8:eb:5a:20:92:72:5a:
0a:10:41:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 20:06:24 2024 by rpki-client on console-ams.rpki-client.org