Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/EQ4l5UjfNzWUFhc5bMZJfmX1QBk.roa
File: EQ4l5UjfNzWUFhc5bMZJfmX1QBk.roa (raw, json)
Hash identifier: SUEVdgq//QvtQ04EtQj8MecUj5SmjXMyBnQfFg/mJN8=
Subject key identifier: 11:0E:25:E5:48:DF:37:35:94:16:17:39:6C:C6:49:7E:65:F5:40:19
Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial: 018CC5DCE1F3073E3FC9E863E04900A18AAD
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/EQ4l5UjfNzWUFhc5bMZJfmX1QBk.roa
Signing time: Mon 01 Jan 2024 16:30:36 +0000
ROA not before: Mon 01 Jan 2024 16:30:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 11426
IP address blocks: 130.255.64.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Apr 2024 23:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:e1:f3:07:3e:3f:c9:e8:63:e0:49:00:a1:8a:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Validity
Not Before: Jan 1 16:30:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=110e25e548df3735941617396cc6497e65f54019
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:ac:fa:c4:3e:98:1a:07:43:41:7f:f7:b5:6c:
02:4f:b4:a9:6b:e8:39:56:07:4d:87:10:b9:f1:12:
ee:35:24:c0:9c:60:29:a4:9b:c7:57:7e:e9:ce:9d:
a1:f5:50:73:e5:95:39:93:b1:58:df:bb:3c:f4:d2:
06:eb:f7:3d:de:45:90:b6:96:35:10:fc:c3:3f:f7:
f0:db:79:58:c4:0b:4f:0d:d7:5f:d4:3d:0f:d5:ea:
8b:2c:ac:4f:91:d0:c7:94:17:ce:26:32:96:12:80:
f7:cf:be:57:86:77:ec:d7:a8:6e:c7:4a:83:10:c2:
2d:36:2d:c0:60:1c:1e:bf:33:77:e5:28:15:b5:f4:
be:c0:2a:2e:cd:89:b1:e4:2f:15:29:ed:f1:c4:a4:
e1:4b:ea:ea:0e:7f:fb:f6:ae:f7:16:20:9c:54:4c:
f6:8c:69:cd:d6:2d:f2:8e:23:e8:34:3e:3d:ab:89:
cd:4e:b8:f7:4f:e3:72:aa:41:0a:50:1c:f9:ee:86:
f1:88:df:50:c0:45:71:8e:ef:13:8b:38:d2:a5:34:
6a:56:dc:e1:fd:4b:23:35:5b:41:c7:c6:be:0a:47:
9e:ba:4e:50:e2:44:5b:af:c9:b9:67:76:e9:9c:5a:
f5:2e:66:59:f2:34:8a:38:d6:3d:14:55:64:58:aa:
92:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:0E:25:E5:48:DF:37:35:94:16:17:39:6C:C6:49:7E:65:F5:40:19
X509v3 Authority Key Identifier:
keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/EQ4l5UjfNzWUFhc5bMZJfmX1QBk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.255.64.0/22
Signature Algorithm: sha256WithRSAEncryption
67:01:4c:bd:8c:a0:a3:bb:94:87:96:85:89:04:0a:6e:8e:74:
b9:b8:14:2c:40:70:15:34:ce:39:27:0a:05:55:47:3a:df:82:
79:bf:17:75:01:76:4d:6c:48:b8:af:db:82:34:3a:df:67:22:
86:65:d5:56:11:4c:20:51:e4:fd:08:01:1c:3e:43:22:5e:e7:
d7:a8:70:c4:5d:50:6d:cd:b3:22:e2:93:82:50:14:1a:e1:38:
be:e9:c3:d9:89:15:af:9c:c3:53:e9:da:43:eb:c5:a1:0e:b4:
5e:be:f8:35:bf:2c:d1:1d:65:f0:6e:81:8c:11:13:5e:fd:9a:
22:b7:0b:39:20:08:82:48:ce:67:83:90:0c:5f:06:ef:bd:68:
d2:6f:66:c3:30:c8:43:42:af:27:18:b9:d1:61:bc:01:ad:b1:
5b:40:e1:1b:ae:39:2e:69:d8:88:21:f7:a5:b3:c6:bc:59:b0:
40:37:f7:8a:2e:35:c5:1e:9f:b7:3a:2d:62:11:cb:57:7f:54:
e2:d4:b2:e3:87:28:56:8b:8f:3b:04:90:9f:0a:d4:4c:98:83:
b0:5f:62:40:53:40:91:b3:8f:49:97:b0:84:24:99:2c:2b:68:
7a:96:3e:d7:82:14:bf:57:3a:c0:ff:57:83:c8:1a:a0:a7:6d:
0e:94:49:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 08:14:47 2024 by rpki-client on console-fra.rpki-client.org