Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/eylr20YxvgY72NlAYZbSVaB6gkA.roa
File: eylr20YxvgY72NlAYZbSVaB6gkA.roa (raw, json)
Hash identifier: lv+alscRs2FRfG6jxBUMiiJmrG59ZB04CKAmnyi/y+4=
Subject key identifier: 7B:29:6B:DB:46:31:BE:06:3B:D8:D9:40:61:96:D2:55:A0:7A:82:40
Certificate issuer: /CN=f8651b1194f12e98e70d3da78efe4dd2467cd423
Certificate serial: 018CC79465667961086111140136ABA361A2
Authority key identifier: F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/eylr20YxvgY72NlAYZbSVaB6gkA.roa
Signing time: Tue 02 Jan 2024 00:30:40 +0000
ROA not before: Tue 02 Jan 2024 00:30:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212335
IP address blocks: 45.143.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 May 2024 19:03:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:65:66:79:61:08:61:11:14:01:36:ab:a3:61:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8651b1194f12e98e70d3da78efe4dd2467cd423
Validity
Not Before: Jan 2 00:30:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7b296bdb4631be063bd8d9406196d255a07a8240
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:15:fe:bd:fa:3d:b2:f8:62:58:f1:39:a6:d5:
d9:b8:b5:a1:2f:e3:1e:ea:b7:15:2e:57:12:fa:ed:
33:ab:fe:22:6b:30:7a:b2:5f:bb:15:b1:f6:69:bc:
94:a7:ff:2b:85:5b:13:68:b5:0a:a4:f5:77:ec:89:
e7:f8:aa:87:54:55:66:74:f5:5e:76:bb:e6:9c:0a:
4a:29:71:d9:0f:2f:89:2f:be:66:d7:20:96:ea:7d:
9d:3d:f8:e2:28:7b:de:96:25:77:95:b8:05:b3:5e:
41:b5:5e:d0:58:60:aa:e0:d6:aa:1a:d8:bb:61:22:
91:b0:e6:64:b3:1a:10:51:96:f3:d4:8d:20:b0:bf:
43:a7:eb:ba:f6:36:b5:54:b1:ef:85:c6:cc:1a:31:
46:37:d2:50:40:66:53:7c:5a:2f:9d:4a:f7:5e:cf:
e1:ef:20:9b:56:dc:17:66:9c:aa:2a:d2:87:f8:e3:
1b:42:1f:39:f8:5d:22:c4:38:b1:48:8f:45:45:26:
a9:18:99:bf:3f:2a:5a:95:80:5b:7f:7d:4f:02:0b:
b1:12:65:34:d0:f5:d0:de:0a:a5:53:69:44:4f:50:
aa:79:7d:ba:d3:e8:af:cd:17:0e:56:c4:45:ad:8a:
24:99:f1:bd:18:5d:d1:da:3c:bd:0d:04:0c:69:47:
18:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:29:6B:DB:46:31:BE:06:3B:D8:D9:40:61:96:D2:55:A0:7A:82:40
X509v3 Authority Key Identifier:
keyid:F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/eylr20YxvgY72NlAYZbSVaB6gkA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.7.0/24
Signature Algorithm: sha256WithRSAEncryption
85:5a:13:23:ca:a2:a9:69:d4:fe:1b:39:96:76:61:ad:8f:16:
60:d9:6b:b5:a1:89:29:9c:02:00:e6:bf:7f:04:8a:a6:ae:da:
4a:a6:3b:52:45:e5:0c:53:20:92:29:6e:0b:fb:36:bc:1c:21:
49:54:f7:8e:f1:4f:72:6b:35:22:8e:2e:1e:02:b9:bf:2d:72:
e8:12:7b:7d:09:01:10:0e:6a:4b:c5:9a:7c:67:6e:2f:73:6f:
46:a0:4f:94:6e:76:c4:0f:46:c8:ef:63:29:a7:e4:d1:a0:b0:
0a:d0:96:32:52:83:85:4a:3b:44:59:b3:59:70:58:5c:cc:4d:
20:d5:ff:9f:04:89:e6:75:ad:06:8c:f5:b7:58:0c:ab:e8:54:
90:e6:8b:f0:77:50:0a:33:de:61:ed:0d:04:56:9f:08:ef:44:
8e:2a:65:c6:44:9a:b3:e3:aa:d5:4c:cf:38:ec:e6:6e:cc:2a:
f2:5f:ee:4c:57:f1:37:14:d0:0c:0b:3b:ab:e7:77:ac:cf:7f:
b4:4a:ff:27:ec:98:4c:59:b5:0a:3c:ca:63:23:bd:94:ff:f7:
2c:1d:c3:38:bc:bd:8c:f8:72:b8:7e:2b:57:0d:e2:8e:61:be:
bd:66:31:43:76:26:87:dd:09:3e:c2:b5:ef:43:38:10:25:b5:
d8:f9:75:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 24 22:17:56 2024 by rpki-client on console-ams.rpki-client.org