Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/ejajdk45-Eq4t262sBIeGEWpK4Y.roa
File: ejajdk45-Eq4t262sBIeGEWpK4Y.roa (raw, json)
Hash identifier: wUCO8W657Iqx5q4oha2yarlO5Wkca0EevtxLcwycd/Y=
Subject key identifier: 7A:36:A3:76:4E:39:F8:4A:B8:B7:6E:B6:B0:12:1E:18:45:A9:2B:86
Certificate issuer: /CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Certificate serial: 018CC86FF746BAA88987216AA2BA1D1C2F95
Authority key identifier: 8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/ejajdk45-Eq4t262sBIeGEWpK4Y.roa
Signing time: Tue 02 Jan 2024 04:30:30 +0000
ROA not before: Tue 02 Jan 2024 04:30:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206192
IP address blocks: 85.153.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:f7:46:ba:a8:89:87:21:6a:a2:ba:1d:1c:2f:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Validity
Not Before: Jan 2 04:30:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7a36a3764e39f84ab8b76eb6b0121e1845a92b86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:df:12:cd:8a:b2:dc:c7:34:23:3a:9d:7e:44:
ae:93:68:16:6e:00:bf:dd:73:2b:f4:04:db:23:b0:
cd:5f:94:db:62:ab:a3:77:51:58:a0:00:2b:a8:5d:
2c:ea:ad:c0:fa:a7:7e:5c:a7:c7:f3:6f:7b:71:55:
fa:81:66:50:fb:eb:c4:cc:6d:12:5f:ff:8a:9b:6a:
1e:94:56:33:80:ae:02:8a:35:b6:20:15:b1:ec:13:
90:b1:f8:69:ce:b2:68:14:fd:16:62:65:13:1a:c0:
da:76:d7:91:b3:36:e5:db:a0:5d:4a:ff:c0:a4:8e:
da:d9:ee:93:74:94:25:fc:6b:65:06:70:fc:36:54:
bd:cf:2c:4a:22:5d:c6:02:fa:c7:5f:9a:4d:6f:0a:
69:aa:bc:b6:ce:b7:26:71:3a:a3:49:09:35:9c:7d:
ba:16:6e:b6:9d:02:b4:dd:07:44:f0:d2:cd:2c:8d:
27:e8:89:37:8d:1e:5b:dd:48:b5:6b:e2:ab:da:4b:
26:d2:b2:46:7d:52:2f:7e:b7:5b:bd:38:d1:df:49:
17:af:e3:80:e2:b3:54:f1:82:2e:b4:d9:95:17:9f:
0c:91:75:c0:b3:5a:19:53:0a:01:93:89:8c:07:b0:
19:5f:92:cf:1a:ed:ff:d6:73:6b:47:52:b2:26:3f:
01:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:36:A3:76:4E:39:F8:4A:B8:B7:6E:B6:B0:12:1E:18:45:A9:2B:86
X509v3 Authority Key Identifier:
keyid:8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/ejajdk45-Eq4t262sBIeGEWpK4Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.153.155.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:53:ac:0c:f1:cc:bc:d3:f4:0e:63:f0:3a:aa:34:32:65:6e:
a2:fa:76:84:53:39:da:8b:ed:d7:29:86:4a:80:da:af:3f:44:
76:db:34:56:b9:8c:e5:cc:56:3d:52:78:e3:51:22:19:1c:2c:
a9:a7:a0:7c:55:a7:56:c9:ce:9a:93:49:db:89:8f:69:0d:4b:
0a:e1:af:d1:37:ff:ee:b4:e2:61:72:41:02:0f:e3:e7:c9:10:
ee:19:3a:c5:55:81:bb:7b:2e:21:e5:62:f9:a2:f3:9a:09:66:
71:aa:ed:85:41:e7:77:57:34:93:25:17:34:93:c2:db:0e:5c:
f5:41:5e:e8:df:cc:33:76:0a:53:42:1b:07:8e:59:7e:fa:51:
ec:33:a5:91:4c:41:ac:b6:74:f6:8d:23:6b:cd:35:14:36:f2:
1e:95:83:ab:ab:59:ba:c0:7b:d7:20:8b:fb:7e:58:85:d7:b4:
c1:15:27:5d:e3:02:a4:e4:9e:7b:c1:d1:3f:33:6d:54:2a:0a:
e2:d8:e5:cd:2c:f7:44:95:a6:25:b7:cb:e5:6d:59:fa:a8:11:
09:34:e4:27:d2:ee:56:a6:42:7e:15:b7:dc:d8:96:f8:89:b1:
9e:f6:ae:c1:ba:82:89:c4:79:4a:b5:3e:5a:13:4a:f5:9c:42:
d3:78:5d:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:15:09 2024 by rpki-client on console-fra.rpki-client.org