Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/eeg0P3ydaEqBySoS1sXHIQZ_s-c.roa
File: eeg0P3ydaEqBySoS1sXHIQZ_s-c.roa (raw, json)
Hash identifier: Oj0dUpOWbbEv4+SvXS278ROAmsY9/VyeefDaTROmgfM=
Subject key identifier: 79:E8:34:3F:7C:9D:68:4A:81:C9:2A:12:D6:C5:C7:21:06:7F:B3:E7
Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial: 019257D9DDBB10173FC3A93DAABFF1A4B444
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/eeg0P3ydaEqBySoS1sXHIQZ_s-c.roa
Signing time: Fri 04 Oct 2024 14:05:48 +0000
ROA not before: Fri 04 Oct 2024 14:05:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20473
IP address blocks: 5.102.112.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:57:d9:dd:bb:10:17:3f:c3:a9:3d:aa:bf:f1:a4:b4:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Validity
Not Before: Oct 4 14:05:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=79e8343f7c9d684a81c92a12d6c5c721067fb3e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:c0:d9:14:e3:73:fd:be:78:c8:e7:3b:a0:57:
c0:b0:31:ff:57:ac:bb:39:4a:c6:80:a3:cb:d4:82:
c7:1e:7e:21:a7:69:14:5f:4f:61:31:32:b8:b9:c2:
a9:47:41:6a:a6:06:15:5c:bc:e4:51:fb:1b:d0:87:
5d:aa:ac:ba:51:18:da:c1:d5:4a:56:52:46:6f:a5:
7f:64:70:87:3b:d0:f8:49:0a:ed:4f:2c:45:48:97:
b8:a7:7f:22:55:5f:d0:96:c4:89:8b:f0:42:d5:f7:
a3:23:06:20:84:1f:19:34:3a:cd:22:92:8a:3d:6e:
5c:26:2e:b3:16:3b:29:72:1d:01:f2:75:a3:49:f7:
8f:cd:f5:c7:c2:20:34:fe:03:dc:b8:f7:cc:f2:62:
69:8f:9f:be:22:78:2f:b4:bb:c6:4d:df:0b:e9:6f:
59:cc:c2:81:a5:76:3f:84:c4:b9:24:d1:4a:8b:e9:
e6:51:c4:15:a5:f4:27:82:2d:98:79:69:a4:0c:25:
a1:0e:3f:98:7d:3c:80:67:c7:a3:be:e8:85:c0:42:
47:8e:cf:38:1b:f5:4d:dc:81:37:f5:26:24:bf:f4:
ba:93:5f:b2:99:42:ff:ca:83:9b:a5:06:5c:98:8d:
30:7a:6a:b6:7c:55:0d:a2:32:b6:14:fd:4a:76:58:
a9:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:E8:34:3F:7C:9D:68:4A:81:C9:2A:12:D6:C5:C7:21:06:7F:B3:E7
X509v3 Authority Key Identifier:
keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/eeg0P3ydaEqBySoS1sXHIQZ_s-c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.102.112.0/22
Signature Algorithm: sha256WithRSAEncryption
9e:4c:f2:e8:8d:6b:04:d4:93:37:67:4a:c7:03:03:d7:13:41:
be:aa:b4:e5:81:76:60:fe:d3:45:c8:03:ae:76:c9:db:df:08:
ae:37:5d:81:0e:81:f9:27:68:70:80:fe:21:60:61:73:c5:b9:
7c:66:00:13:fb:ba:ed:fd:d1:85:2e:c0:a6:f1:ae:45:d8:69:
a8:73:41:54:23:b7:34:8b:7c:d5:ef:f5:70:42:79:4e:72:a9:
d5:68:54:53:7a:41:ae:88:7f:39:84:19:c9:bf:c8:c5:1b:a6:
b1:6d:1f:18:8f:8d:d0:8d:71:00:dd:c1:13:0f:c5:f5:f4:77:
e5:0c:47:6c:f1:eb:b6:b0:10:a6:7c:93:6c:1b:01:5f:73:2c:
63:4e:0e:94:37:67:64:69:3e:4c:67:14:dc:0b:0b:51:ae:36:
8c:6e:3c:63:2f:5a:fd:23:36:d0:51:00:34:bc:f7:aa:0b:11:
fa:6f:b0:1b:57:40:c8:83:3f:e8:c4:7d:42:89:4f:be:de:b5:
c7:e6:71:1e:9e:3b:6d:48:2c:7f:0d:42:08:96:48:12:af:c9:
b7:b6:16:cf:3e:0d:c9:94:36:64:83:cb:25:25:57:86:83:3e:
cf:5c:0e:0a:66:a6:b3:fe:6a:b3:46:1e:14:95:55:c3:4f:11:
f4:e6:1a:95
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZJX2d27EBc/w6k9qr/xpLREMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2Y2NlMDZlNzBkZjk3MGQ5MGFiZmUzY2JlN2ZhODgyZjQ2
N2IxZTQwHhcNMjQxMDA0MTQwNTQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OWU4MzQzZjdjOWQ2ODRhODFjOTJhMTJkNmM1YzcyMTA2N2ZiM2U3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9cDZFONz/b54yOc7oFfAsDH/V6y7
OUrGgKPL1ILHHn4hp2kUX09hMTK4ucKpR0FqpgYVXLzkUfsb0Iddqqy6URjawdVK
VlJGb6V/ZHCHO9D4SQrtTyxFSJe4p38iVV/QlsSJi/BC1fejIwYghB8ZNDrNIpKK
PW5cJi6zFjspch0B8nWjSfePzfXHwiA0/gPcuPfM8mJpj5++IngvtLvGTd8L6W9Z
zMKBpXY/hMS5JNFKi+nmUcQVpfQngi2YeWmkDCWhDj+YfTyAZ8ejvuiFwEJHjs84
G/VN3IE39SYkv/S6k1+ymUL/yoObpQZcmI0wemq2fFUNojK2FP1KdlipkwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHnoND98nWhKgckqEtbFxyEGf7PnMB8GA1UdIwQY
MBaAFIbM4G5w35cNkKv+PL5/qIL0Z7HkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHN6Z2JuRGZsdzJRcV80OHZuLW9ndlJuc2VRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC82NmYwNWMtNzQxYy00NzIwLWJjN2Ut
ODk3MTRhN2U4ZDU4LzEvZWVnMFAzeWRhRXFCeVNvUzFzWEhJUVpfcy1jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC82NmYwNWMtNzQxYy00NzIwLWJjN2UtODk3MTRhN2U4ZDU4
LzEvaHN6Z2JuRGZsdzJRcV80OHZuLW9ndlJuc2VRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCBWZwMA0G
CSqGSIb3DQEBCwUAA4IBAQCeTPLojWsE1JM3Z0rHAwPXE0G+qrTlgXZg/tNFyAOu
dsnb3wiuN12BDoH5J2hwgP4hYGFzxbl8ZgAT+7rt/dGFLsCm8a5F2Gmoc0FUI7c0
i3zV7/VwQnlOcqnVaFRTekGuiH85hBnJv8jFG6axbR8Yj43QjXEA3cETD8X19Hfl
DEds8eu2sBCmfJNsGwFfcyxjTg6UN2dkaT5MZxTcCwtRrjaMbjxjL1r9IzbQUQA0
vPeqCxH6b7AbV0DIgz/oxH1CiU++3rXH5nEenjttSCx/DUIIlkgSr8m3thbPPg3J
lDZkg8slJVeGgz7PXA4KZqaz/mqzRh4UlVXDTxH05hqV
-----END CERTIFICATE-----
Generated at Mon Nov 25 03:26:27 2024 by rpki-client on console-ams.rpki-client.org