Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/dd7beb-6f78-419b-957d-37a60c335a5d/1/ey-U2SqQrhuVcMadYo4Oin89g1I.roa
File: ey-U2SqQrhuVcMadYo4Oin89g1I.roa (raw, json)
Hash identifier: b5g4oLSaIZtVHpJqKN5w7SxI35OV93CJf2jvoj55hf4=
Subject key identifier: 7B:2F:94:D9:2A:90:AE:1B:95:70:C6:9D:62:8E:0E:8A:7F:3D:83:52
Certificate issuer: /CN=7e45a9a0353a33c6a4f93608f9d25f27c85948b7
Certificate serial: 018CC802407E5586749DEB4F60DBD881F6D9
Authority key identifier: 7E:45:A9:A0:35:3A:33:C6:A4:F9:36:08:F9:D2:5F:27:C8:59:48:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fkWpoDU6M8ak-TYI-dJfJ8hZSLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/dd7beb-6f78-419b-957d-37a60c335a5d/1/ey-U2SqQrhuVcMadYo4Oin89g1I.roa
Signing time: Tue 02 Jan 2024 02:30:39 +0000
ROA not before: Tue 02 Jan 2024 02:30:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5089
IP address blocks: 91.209.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/dd7beb-6f78-419b-957d-37a60c335a5d/1/fkWpoDU6M8ak-TYI-dJfJ8hZSLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/dd7beb-6f78-419b-957d-37a60c335a5d/1/fkWpoDU6M8ak-TYI-dJfJ8hZSLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/fkWpoDU6M8ak-TYI-dJfJ8hZSLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 May 2024 14:34:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:40:7e:55:86:74:9d:eb:4f:60:db:d8:81:f6:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e45a9a0353a33c6a4f93608f9d25f27c85948b7
Validity
Not Before: Jan 2 02:30:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7b2f94d92a90ae1b9570c69d628e0e8a7f3d8352
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:79:32:a6:f0:ab:5e:61:e6:9f:08:84:3b:6c:
67:1f:20:c8:dc:0a:35:c4:ee:25:34:37:24:c7:0c:
c2:2d:51:7b:99:28:18:9b:5f:62:a7:be:59:39:c3:
91:c3:bf:a1:1c:c3:81:76:ef:c0:a0:8e:49:6c:88:
c5:05:2c:16:57:4a:5b:3a:44:8e:8d:d0:02:e3:df:
7e:91:1c:75:27:be:99:ad:26:ba:5a:49:3a:3e:37:
b6:6a:d6:4f:28:f9:53:77:16:ae:41:10:f4:74:5d:
6f:5b:f6:54:32:32:c0:a9:92:a5:7d:ce:80:6e:a6:
df:4f:83:3d:12:30:e4:ca:fb:2a:55:f9:f7:2d:98:
50:3d:e3:96:0c:10:06:71:65:27:4c:cb:86:63:46:
ad:86:fa:4c:1c:80:ab:31:b0:3c:82:2e:de:b2:1d:
5f:28:0f:8b:fa:90:ff:a7:bf:26:21:0e:1d:b9:59:
ce:32:97:22:d2:0f:dc:34:c6:a1:d6:09:35:25:c6:
42:cc:f2:b3:73:56:ac:fb:3d:c9:fc:b2:34:56:6d:
d8:d6:20:0f:7c:c0:aa:40:4b:1f:3a:34:c0:2a:25:
a7:88:bd:1e:2e:76:17:a6:c3:68:b1:94:e4:3d:21:
c6:fc:eb:d0:2e:00:c3:53:36:b8:d1:8d:8f:9a:da:
a6:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:2F:94:D9:2A:90:AE:1B:95:70:C6:9D:62:8E:0E:8A:7F:3D:83:52
X509v3 Authority Key Identifier:
keyid:7E:45:A9:A0:35:3A:33:C6:A4:F9:36:08:F9:D2:5F:27:C8:59:48:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fkWpoDU6M8ak-TYI-dJfJ8hZSLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/dd7beb-6f78-419b-957d-37a60c335a5d/1/ey-U2SqQrhuVcMadYo4Oin89g1I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/dd7beb-6f78-419b-957d-37a60c335a5d/1/fkWpoDU6M8ak-TYI-dJfJ8hZSLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.142.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:aa:d7:6e:d5:03:95:7a:f0:b0:2c:47:ec:08:70:af:02:67:
44:18:d2:b6:66:28:5c:85:d2:cf:f5:2d:8e:6c:58:3e:4f:52:
a1:3e:38:5c:2d:d0:0c:6f:71:72:9e:3d:9b:e6:7b:05:ad:f7:
24:20:bc:2b:af:43:0d:06:d3:6d:2c:64:42:00:51:bc:f3:9a:
c6:bc:e2:a6:dd:46:40:1e:a7:f7:9d:7c:2f:45:5a:c8:f1:9c:
cf:39:7f:6e:59:45:5d:e9:ed:a0:64:c6:ee:00:21:f2:6c:f9:
13:c6:ae:d6:bf:b5:85:3c:7f:04:5c:4d:88:74:78:da:b0:9b:
c9:0f:91:a3:45:91:cf:db:c4:13:30:4c:35:20:3a:90:59:c0:
40:2f:e4:0a:4d:70:fd:da:95:af:d2:8e:7d:34:7a:39:d1:54:
88:1a:5e:25:e2:47:b4:53:5b:5c:6b:b8:1f:f2:05:62:56:20:
81:9f:30:7e:b8:cb:25:d7:15:7a:2a:1a:9a:13:95:29:be:bc:
e5:86:8d:2c:73:0e:bc:4c:24:c9:c0:bd:b9:a1:1a:0d:b1:da:
f6:4e:00:1b:0a:bc:20:3a:e7:57:23:7d:01:b9:9f:f7:b1:e0:
b1:11:a5:99:59:7c:57:21:0a:91:77:f6:44:8a:49:c9:dc:5f:
f1:f2:e6:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 19:16:18 2024 by rpki-client on console-fra.rpki-client.org