Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/86d1aa-6475-4013-86ea-38c756aa4b50/1/Eocmti4sNxDKzoOnNwZVGGLPfs4.roa
File: Eocmti4sNxDKzoOnNwZVGGLPfs4.roa (raw, json)
Hash identifier: tB3w24OGnh+NLouyCYoRFX6mG1RCMfF9nBctUfhOqOw=
Subject key identifier: 12:87:26:B6:2E:2C:37:10:CA:CE:83:A7:37:06:55:18:62:CF:7E:CE
Certificate issuer: /CN=f3544e923d883bace4aa3f7ef70072afe3511f28
Certificate serial: 019247A3C77407EC7F8EC02A85C52EE4D3C8
Authority key identifier: F3:54:4E:92:3D:88:3B:AC:E4:AA:3F:7E:F7:00:72:AF:E3:51:1F:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/81ROkj2IO6zkqj9-9wByr-NRHyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/86d1aa-6475-4013-86ea-38c756aa4b50/1/Eocmti4sNxDKzoOnNwZVGGLPfs4.roa
Signing time: Tue 01 Oct 2024 10:32:48 +0000
ROA not before: Tue 01 Oct 2024 10:32:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41536
IP address blocks: 91.198.59.0/24 maxlen: 24
193.222.57.0/24 maxlen: 24
195.14.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/86d1aa-6475-4013-86ea-38c756aa4b50/1/81ROkj2IO6zkqj9-9wByr-NRHyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/86d1aa-6475-4013-86ea-38c756aa4b50/1/81ROkj2IO6zkqj9-9wByr-NRHyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/81ROkj2IO6zkqj9-9wByr-NRHyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:47:a3:c7:74:07:ec:7f:8e:c0:2a:85:c5:2e:e4:d3:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3544e923d883bace4aa3f7ef70072afe3511f28
Validity
Not Before: Oct 1 10:32:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=128726b62e2c3710cace83a73706551862cf7ece
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:8c:11:5e:a8:39:cb:ff:86:09:ad:6c:9c:0c:
5a:94:47:d3:ee:c8:db:ac:f6:8b:db:73:4e:3a:77:
97:01:ac:b2:d0:75:79:35:45:d1:b3:39:0f:7a:44:
68:87:66:b4:7c:9d:28:2d:53:c4:21:05:90:9c:c9:
ff:23:15:5c:88:34:4f:5d:76:13:b3:87:03:16:af:
21:29:ec:dd:71:64:53:94:eb:de:c6:d9:26:d1:44:
4f:a5:af:76:b1:08:a4:61:1e:8e:22:c8:43:63:1a:
56:ac:6a:5b:5b:e1:bf:d2:bc:15:2c:0f:87:b9:cd:
e2:35:cb:b0:19:ec:f5:03:a1:1d:99:7c:b4:ba:8f:
30:57:e6:f8:99:4e:f6:d8:70:b8:62:8d:83:f8:a5:
25:e3:7b:7f:4c:ab:bd:93:83:81:c7:de:b3:b8:54:
08:8f:dc:95:91:ba:8f:55:89:df:17:70:f7:9f:1c:
1a:02:84:d0:20:7d:8b:09:2b:5e:4f:cf:34:65:13:
61:dc:1c:e0:05:4b:df:7e:e4:45:e5:51:5e:16:44:
4a:5d:e5:e3:89:14:d8:ec:4c:06:78:3c:62:72:c2:
b9:0a:76:6e:a5:cc:7a:5c:fe:31:e7:62:dc:46:ba:
61:21:d7:03:96:28:39:16:32:dd:38:c3:9a:3b:d1:
9e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:87:26:B6:2E:2C:37:10:CA:CE:83:A7:37:06:55:18:62:CF:7E:CE
X509v3 Authority Key Identifier:
keyid:F3:54:4E:92:3D:88:3B:AC:E4:AA:3F:7E:F7:00:72:AF:E3:51:1F:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/81ROkj2IO6zkqj9-9wByr-NRHyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/86d1aa-6475-4013-86ea-38c756aa4b50/1/Eocmti4sNxDKzoOnNwZVGGLPfs4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/86d1aa-6475-4013-86ea-38c756aa4b50/1/81ROkj2IO6zkqj9-9wByr-NRHyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.59.0/24
193.222.57.0/24
195.14.6.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:46:d8:d5:61:69:1c:18:5e:9a:15:d3:1c:3d:19:4f:d9:84:
3d:df:4c:96:4f:46:d5:06:3b:c3:73:58:43:b7:09:57:c7:5a:
ec:9b:f1:1c:89:e7:8f:7f:67:20:5a:66:cc:ef:b4:9f:3d:d2:
a7:0d:68:c1:4f:a7:f2:b7:ea:6d:35:d3:fa:58:f7:e5:71:fc:
af:9a:0a:b5:09:fd:5d:43:48:63:4b:ff:52:bb:b8:c7:94:c9:
46:54:d7:8c:6d:e3:76:6f:5b:6c:eb:d9:64:60:da:8c:d2:43:
9f:06:06:0b:e1:a0:c5:01:45:c2:74:b6:0a:24:e7:7e:42:a4:
31:07:90:24:e2:d9:cc:04:42:55:5a:e3:db:73:e7:76:43:94:
a3:e9:7a:51:ba:ca:45:55:e6:80:3f:fb:12:42:40:65:6a:40:
da:2e:ad:48:45:81:58:fb:05:0f:f2:41:56:d2:77:4e:54:2d:
15:79:ca:f3:e0:8b:a3:54:ab:96:5c:ec:80:ed:93:51:91:3b:
4f:cb:5c:b5:1a:7c:ff:99:b0:bc:aa:62:8c:1c:16:2e:9a:91:
03:6b:b2:3d:a8:62:d9:b5:4d:73:74:80:89:29:a1:15:c4:15:
13:4a:55:29:02:14:9e:a9:7a:49:5d:c4:4a:10:91:32:02:ff:
f1:9c:44:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:05:22 2024 by rpki-client on console-ams.rpki-client.org