Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/EzHwgsFq3xd-pCwJ6W-wQl1EmmM.roa
File: EzHwgsFq3xd-pCwJ6W-wQl1EmmM.roa (raw, json)
Hash identifier: Qm7e/CIVJL1dhjSNVtPJRUkGV7nOnAa2tNy78psSrp4=
Subject key identifier: 13:31:F0:82:C1:6A:DF:17:7E:A4:2C:09:E9:6F:B0:42:5D:44:9A:63
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0190ED8DB24A4EF41535614E687E4781C034
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/EzHwgsFq3xd-pCwJ6W-wQl1EmmM.roa
Signing time: Fri 26 Jul 2024 05:40:04 +0000
ROA not before: Fri 26 Jul 2024 05:40:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 400304
IP address blocks: 86.107.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:ed:8d:b2:4a:4e:f4:15:35:61:4e:68:7e:47:81:c0:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jul 26 05:40:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1331f082c16adf177ea42c09e96fb0425d449a63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:07:de:75:86:85:c4:96:ca:75:e8:b5:f5:1a:
a9:d4:b6:2e:5e:32:a2:53:87:e7:16:55:22:d6:93:
52:0c:5a:4a:1e:dd:d8:ad:fb:fa:77:3e:e0:8c:60:
7e:fa:46:48:dc:88:b4:0b:97:72:9f:fb:7c:8e:d7:
61:25:97:9a:ed:cd:93:20:93:99:df:55:54:b3:a1:
c3:7a:c2:62:4f:db:1f:53:2d:b9:f5:ec:85:3d:97:
70:87:d2:b5:44:af:eb:01:44:f4:6e:dd:fe:c6:9e:
e3:1d:27:54:b6:6f:fb:00:99:10:36:d9:0c:70:54:
9b:50:9b:2f:41:5f:95:3c:51:fe:6a:41:b4:a8:83:
ad:fa:29:88:90:1c:5a:ab:c7:27:d1:32:0c:74:e5:
cf:75:01:b2:d6:27:05:27:3f:4e:36:9f:dc:85:ab:
27:44:77:70:b5:a2:9f:80:45:f9:0a:52:a9:81:69:
2e:71:82:36:1b:93:ad:b1:5f:4e:a6:6d:85:2d:46:
e8:1f:46:df:7a:dc:42:a8:aa:94:0c:5a:0d:bf:c2:
d3:2b:0b:6b:33:59:d8:07:7f:46:e9:a9:16:fa:9a:
5c:91:d6:d7:46:85:19:fb:cf:3a:8c:20:81:3a:b7:
5f:f0:24:a2:0b:95:7d:bc:97:f9:1b:f2:28:f2:f1:
94:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:31:F0:82:C1:6A:DF:17:7E:A4:2C:09:E9:6F:B0:42:5D:44:9A:63
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/EzHwgsFq3xd-pCwJ6W-wQl1EmmM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.107.101.0/24
Signature Algorithm: sha256WithRSAEncryption
42:59:03:82:49:ef:a4:55:bd:f1:d2:6e:63:3f:79:3c:69:d4:
d1:c7:1c:18:ad:a5:c9:05:da:c4:fd:3b:19:09:d1:8e:bf:1d:
6a:83:e8:47:a1:3a:a0:3c:7e:ec:02:55:cc:2b:d3:fa:f4:ce:
09:1e:e1:f1:38:92:66:a3:9b:6f:bc:7f:fb:40:c4:dd:f3:da:
4e:6b:04:02:7b:56:53:4e:fc:c1:ec:df:42:71:ae:00:cc:b7:
43:b1:b5:6b:c5:27:66:a5:bf:4e:ac:24:6e:2b:db:3f:e8:e1:
66:e8:d2:6c:47:3a:24:c8:f5:4f:fe:7f:e8:4f:55:e1:3a:84:
07:74:74:10:48:a4:b4:8a:41:cf:27:a6:38:1c:bd:fb:cb:ef:
9a:03:d0:f8:83:84:8f:17:1c:2e:f9:ae:4b:d2:da:10:23:99:
67:95:64:81:1f:30:a9:38:9a:ee:ab:ee:25:bc:c7:47:61:c6:
4f:0d:0f:a9:c8:32:3d:48:ff:aa:b3:70:fd:34:bc:bc:b2:50:
fc:d0:46:68:bc:bd:9d:af:aa:13:49:95:ae:62:e8:10:00:2a:
30:f3:c4:b0:05:f1:89:56:41:ab:07:ee:eb:65:b8:15:a4:7c:
96:bf:e3:e7:32:53:65:d5:11:77:17:ec:2a:6e:01:e9:f2:ea:
12:d9:c5:4d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZDtjbJKTvQVNWFOaH5HgcA0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjQwNzI2MDU0MDA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMzMxZjA4MmMxNmFkZjE3N2VhNDJjMDllOTZmYjA0MjVkNDQ5YTYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgfedYaFxJbKdei19Rqp1LYuXjKi
U4fnFlUi1pNSDFpKHt3Yrfv6dz7gjGB++kZI3Ii0C5dyn/t8jtdhJZea7c2TIJOZ
31VUs6HDesJiT9sfUy259eyFPZdwh9K1RK/rAUT0bt3+xp7jHSdUtm/7AJkQNtkM
cFSbUJsvQV+VPFH+akG0qIOt+imIkBxaq8cn0TIMdOXPdQGy1icFJz9ONp/chasn
RHdwtaKfgEX5ClKpgWkucYI2G5OtsV9Opm2FLUboH0bfetxCqKqUDFoNv8LTKwtr
M1nYB39G6akW+ppckdbXRoUZ+886jCCBOrdf8CSiC5V9vJf5G/Io8vGUzQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBMx8ILBat8XfqQsCelvsEJdRJpjMB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvRXpId2dzRnEzeGQtcEN3SjZXLXdRbDFFbW1NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVmtlMA0G
CSqGSIb3DQEBCwUAA4IBAQBCWQOCSe+kVb3x0m5jP3k8adTRxxwYraXJBdrE/TsZ
CdGOvx1qg+hHoTqgPH7sAlXMK9P69M4JHuHxOJJmo5tvvH/7QMTd89pOawQCe1ZT
TvzB7N9Cca4AzLdDsbVrxSdmpb9OrCRuK9s/6OFm6NJsRzokyPVP/n/oT1XhOoQH
dHQQSKS0ikHPJ6Y4HL37y++aA9D4g4SPFxwu+a5L0toQI5lnlWSBHzCpOJruq+4l
vMdHYcZPDQ+pyDI9SP+qs3D9NLy8slD80EZovL2dr6oTSZWuYugQACow88SwBfGJ
VkGrB+7rZbgVpHyWv+PnMlNl1RF3F+wqbgHp8uoS2cVN
-----END CERTIFICATE-----
Generated at Fri Nov 22 09:51:07 2024 by rpki-client on console-ams.rpki-client.org