Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/E1LJN9Ep5vDpoQc6Qu2EKlEj-II.roa
File: E1LJN9Ep5vDpoQc6Qu2EKlEj-II.roa (raw, json)
Hash identifier: AQ4q7T5nGnsIUtvVdH3MuRFT1c5RSnaExn86R41iaYI=
Subject key identifier: 13:52:C9:37:D1:29:E6:F0:E9:A1:07:3A:42:ED:84:2A:51:23:F8:82
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01927D01A2C0361377811F81517EBF9C7D4E
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/E1LJN9Ep5vDpoQc6Qu2EKlEj-II.roa
Signing time: Fri 11 Oct 2024 19:15:12 +0000
ROA not before: Fri 11 Oct 2024 19:15:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48678
IP address blocks: 89.35.73.0/24 maxlen: 24
91.132.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:7d:01:a2:c0:36:13:77:81:1f:81:51:7e:bf:9c:7d:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Oct 11 19:15:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1352c937d129e6f0e9a1073a42ed842a5123f882
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b4:18:40:ad:a3:a5:35:45:ad:99:1a:8b:d5:
de:4e:04:83:c7:78:7a:f1:32:ec:63:cf:23:18:83:
e5:7b:61:71:c3:82:ec:05:dc:ef:71:53:b6:08:dd:
22:16:56:c2:bc:72:ea:4f:4f:22:87:a3:ca:2b:01:
a5:32:e6:79:c1:6a:25:ab:02:a3:e1:91:d0:91:98:
3d:86:34:22:20:32:dc:3b:c1:73:a3:cd:e9:f7:3f:
6b:20:86:8f:5b:ff:2e:3f:e1:52:f2:bd:0b:e5:fb:
62:f2:e6:be:31:dd:97:10:00:4a:c2:32:c2:0f:e3:
70:3c:67:7a:3e:71:cc:fa:1e:e0:b3:36:a7:f6:ca:
bd:50:88:b4:15:03:ec:71:ea:f3:8f:5a:53:be:08:
6a:25:a1:67:88:9d:8e:5d:47:a5:90:61:5d:ce:f3:
94:74:8c:92:f8:ad:b9:ed:1c:b3:74:15:3f:30:f9:
8b:a8:40:46:c8:b8:8b:fc:70:a4:f1:d9:59:dc:dd:
8f:b0:fd:39:b2:fb:b9:35:8c:2c:ef:1b:1b:90:9d:
2f:d6:ac:c9:69:3b:ca:f1:84:e2:fd:7f:fc:2e:45:
7f:fb:6a:f8:03:e9:ee:6a:78:2b:df:48:ba:7e:12:
51:92:7b:0c:ff:f6:77:7c:be:13:76:71:32:3c:c6:
23:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:52:C9:37:D1:29:E6:F0:E9:A1:07:3A:42:ED:84:2A:51:23:F8:82
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/E1LJN9Ep5vDpoQc6Qu2EKlEj-II.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.35.73.0/24
91.132.51.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:ef:7f:34:ef:49:ef:06:a4:81:52:05:19:72:bf:4b:60:d8:
9a:87:c4:03:0a:9c:3b:1a:85:53:5e:92:47:4f:74:50:ec:08:
f6:29:4c:5d:ff:05:83:08:11:21:52:a5:56:a9:38:48:91:d4:
70:39:11:0c:45:9f:31:be:7c:29:d5:00:b6:4e:0b:e7:0b:aa:
64:c5:40:d8:d8:bc:59:4d:ae:28:83:db:52:3e:77:f0:a1:da:
14:a7:54:e9:ef:8d:e2:1e:5c:2e:92:3b:a0:bf:f9:76:ae:f2:
38:ba:44:b8:5a:3c:9c:af:c0:17:71:b9:f0:2d:26:73:b0:b2:
16:e1:16:c0:ff:dc:15:95:ff:86:91:70:9e:6f:57:a6:50:a3:
bd:de:25:3d:d5:5c:3d:57:b1:24:7f:1e:a3:f8:c4:5e:a3:e1:
1f:e6:11:e0:46:33:0f:09:68:c9:52:da:ab:73:a7:96:c0:f5:
4b:10:5b:23:ee:4c:54:ea:85:d1:fc:b1:c7:03:4d:86:fa:6c:
7e:e7:2c:22:82:ab:ca:3a:36:fe:00:03:94:d6:86:8a:71:00:
c6:e6:de:b0:be:ca:f4:39:08:98:4d:3f:8e:b4:60:22:10:76:
74:41:a2:a9:19:82:bb:ee:40:13:42:1f:64:d0:ef:b3:c0:c1:
23:70:29:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:14:15 2024 by rpki-client on console-ams.rpki-client.org