Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/raqhEap8gAYBAdHrxHqH49XaUGw.roa
File: raqhEap8gAYBAdHrxHqH49XaUGw.roa (raw, json)
Hash identifier: bp2uQrYWlHfRnFAAWxbghlcv8jxMiVu7BSk8m3UgttY=
Subject key identifier: AD:AA:A1:11:AA:7C:80:06:01:01:D1:EB:C4:7A:87:E3:D5:DA:50:6C
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 018DE560E294E073264DAFADE9D7424E5500
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/raqhEap8gAYBAdHrxHqH49XaUGw.roa
Signing time: Mon 26 Feb 2024 12:25:48 +0000
ROA not before: Mon 26 Feb 2024 12:25:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41075
IP address blocks: 79.172.194.0/23 maxlen: 23
79.172.197.0/24 maxlen: 24
79.172.205.0/24 maxlen: 24
87.229.7.0/24 maxlen: 24
87.229.24.0/24 maxlen: 24
87.229.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 11:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:e5:60:e2:94:e0:73:26:4d:af:ad:e9:d7:42:4e:55:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Feb 26 12:25:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=adaaa111aa7c80060101d1ebc47a87e3d5da506c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:5a:85:79:38:ed:e2:c5:45:7e:2b:38:24:3f:
52:3e:c2:48:8b:e8:41:52:09:0d:93:c2:46:82:71:
d9:27:cb:aa:73:a5:3c:8b:19:eb:a3:e2:26:c5:f6:
0c:0f:be:9b:5f:8e:40:a0:0e:f8:f2:6b:49:11:ce:
d3:51:d7:31:37:c9:12:91:0d:a3:c2:01:18:ee:ab:
ec:6d:84:ac:5b:30:88:8c:c4:2a:96:67:87:df:57:
9f:33:af:ea:05:d9:2a:1f:0e:6a:4f:93:3a:db:a0:
f0:fb:7d:c0:36:67:f4:26:98:07:d0:e8:8b:8b:5d:
2e:1d:cf:67:9f:5d:22:f7:e3:62:4a:2c:b6:1f:f0:
df:89:45:dd:55:51:65:5d:28:28:bd:c5:6f:55:76:
d7:99:34:63:2f:ae:f6:2a:e9:33:33:e1:3b:3c:71:
54:3c:db:93:1a:d5:6e:46:bc:67:f9:3e:d4:44:af:
92:e0:d8:a1:4f:2b:64:83:a0:ea:c6:04:1a:87:db:
04:eb:bb:ba:81:bd:d1:f3:c0:e1:c9:67:97:47:31:
17:16:73:ab:5c:03:13:ae:80:7d:34:cf:df:53:d3:
97:76:16:c8:85:59:82:22:3c:8b:e2:5d:e0:cd:3c:
6f:92:75:79:8a:59:01:34:15:f2:81:f8:13:33:e1:
6e:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:AA:A1:11:AA:7C:80:06:01:01:D1:EB:C4:7A:87:E3:D5:DA:50:6C
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/raqhEap8gAYBAdHrxHqH49XaUGw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.172.194.0/23
79.172.197.0/24
79.172.205.0/24
87.229.7.0/24
87.229.24.0/24
87.229.111.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:7b:9e:5d:60:1f:71:48:27:c7:66:8f:bd:91:d6:a8:b4:c5:
d5:97:33:b3:4e:20:c9:33:0b:48:99:91:cc:8c:80:44:4b:5d:
b4:81:d0:4a:81:28:28:84:5b:81:e3:0f:f2:a0:81:e5:c2:48:
da:5b:a8:c4:72:0b:45:4c:86:03:02:e0:1e:09:34:dd:d0:84:
32:44:9b:49:3b:b1:b4:fe:b1:00:9c:b9:bf:40:8a:6a:fe:21:
ae:7e:71:34:23:37:0f:4b:56:02:0f:a3:92:9a:13:37:25:e2:
a2:8a:6b:cd:29:22:d7:f0:37:f1:4d:e1:50:4f:62:6b:d9:44:
77:b5:ad:3a:5c:af:9a:2e:ad:55:cb:a6:3f:24:3e:bf:4c:d5:
f3:b4:42:ba:57:c9:78:52:0e:cc:99:c7:c6:a6:80:66:c9:c9:
fd:86:2e:84:ab:f8:95:44:6b:61:7d:d0:8b:91:d9:3c:ad:9a:
2f:8c:6e:20:e2:07:1f:db:bc:d9:24:56:10:c2:77:12:9d:77:
c5:11:b9:07:9b:bc:0d:ed:d9:08:08:4f:40:23:63:fe:83:51:
8c:1c:8a:ec:9d:54:3b:7c:f6:33:5c:62:19:eb:32:3c:e6:d8:
e3:91:70:4a:51:83:13:7f:f2:9b:1c:d3:df:7f:93:b9:5f:37:
a9:cd:90:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 19:30:57 2024 by rpki-client on console-ams.rpki-client.org