Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/e_6MIEu7XfD3bIMMpEC1PEzISPU.roa
File: e_6MIEu7XfD3bIMMpEC1PEzISPU.roa (raw, json)
Hash identifier: ho1JagFt/nEt3D3B0HKApzVRMsiTaYg2m/dTJB8++t4=
Subject key identifier: 7B:FE:8C:20:4B:BB:5D:F0:F7:6C:83:0C:A4:40:B5:3C:4C:C8:48:F5
Certificate issuer: /CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055
Certificate serial: 018CC86FE8862BEDFB6C2D86C361B5C14266
Authority key identifier: 09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/e_6MIEu7XfD3bIMMpEC1PEzISPU.roa
Signing time: Tue 02 Jan 2024 04:30:26 +0000
ROA not before: Tue 02 Jan 2024 04:30:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 54339
IP address blocks: 89.187.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Jun 2024 07:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:e8:86:2b:ed:fb:6c:2d:86:c3:61:b5:c1:42:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055
Validity
Not Before: Jan 2 04:30:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7bfe8c204bbb5df0f76c830ca440b53c4cc848f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f6:7f:23:b5:4e:dd:fd:2d:e1:8e:11:a4:47:
d0:ed:69:6d:b1:f0:5c:04:43:97:24:a9:9d:fc:50:
09:4d:d3:3a:8f:4d:a2:8f:1e:5f:26:bb:9b:38:5c:
85:1a:29:97:2f:70:10:5e:97:3a:3f:9c:9c:3b:db:
e8:ce:be:fc:03:c3:a4:93:31:05:f5:5c:8b:13:f6:
6e:fb:8a:c7:7f:4e:ec:2e:8e:b9:75:c2:7e:ab:7d:
d1:5d:48:40:65:04:f8:cb:5d:b9:9d:0f:93:e2:24:
d8:ba:7e:8f:23:7d:00:e6:d6:ba:79:51:ae:5f:10:
d2:32:60:0b:d4:cd:92:40:2f:f6:fc:fe:05:62:94:
39:04:74:7d:f1:e3:17:b8:f2:01:5c:83:ef:8e:4b:
44:14:94:ae:ff:ed:59:1b:51:c3:7e:c5:e2:36:04:
6e:70:96:55:24:86:6f:60:14:c2:82:ae:02:3e:d5:
24:5b:91:2c:5d:4e:f1:53:c2:82:fd:fe:5a:15:c6:
fc:00:eb:8f:52:e7:ac:82:69:40:ca:ba:27:4c:63:
32:ab:0b:5f:9d:d6:9b:00:b5:00:bb:ef:c3:4a:16:
18:aa:f5:26:be:66:b5:f8:65:8d:8f:77:bc:b2:57:
96:57:3c:e5:cb:98:96:d5:1e:59:fd:06:a9:d0:72:
fc:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:FE:8C:20:4B:BB:5D:F0:F7:6C:83:0C:A4:40:B5:3C:4C:C8:48:F5
X509v3 Authority Key Identifier:
keyid:09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/e_6MIEu7XfD3bIMMpEC1PEzISPU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.187.21.0/24
Signature Algorithm: sha256WithRSAEncryption
dc:71:fd:90:ff:f6:f0:a3:20:e4:70:0c:fe:ba:d2:1d:c7:95:
58:ee:4e:85:7c:8f:26:0e:f1:6f:4e:e4:13:1f:71:75:5c:1b:
5c:6c:5a:35:8c:3f:f3:d6:81:b7:f6:3f:7e:ec:c5:84:2e:de:
61:3f:8f:a2:1d:74:08:9b:4e:0d:f1:5a:02:c8:d7:3b:b9:d4:
f0:55:9e:c7:c8:da:a7:49:7e:18:89:bb:1e:99:5d:0a:35:10:
ba:1c:65:ce:ae:05:f1:cf:04:f3:bd:c7:0e:d4:15:93:0c:c5:
fb:20:99:ea:cc:e9:c9:8b:cd:c8:03:fb:d1:f7:96:5c:8a:c8:
56:4b:b2:4b:47:8b:63:6f:39:ee:c3:98:36:e8:6b:8d:fe:56:
3d:a0:cd:64:62:6f:62:50:9a:77:b5:df:af:40:7e:a6:f4:48:
b6:be:89:ad:c9:4a:77:06:ea:29:20:7d:51:ab:63:c9:95:bd:
dc:41:30:e3:cf:85:50:c0:fd:28:c1:b1:e3:2c:89:b5:ba:64:
2e:0d:42:0a:2b:02:74:cf:a0:94:c1:95:63:d0:6c:e0:37:b7:
a1:91:14:d4:82:77:fd:2e:c0:b0:33:69:32:5d:9f:45:97:c9:
bd:be:ee:99:ed:cb:3b:bb:f0:be:2b:93:e0:16:2b:a8:bb:fa:
55:37:c9:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 14:26:46 2024 by rpki-client on console-ams.rpki-client.org