Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/epmRXRPqXn9UMxi33b5MKWyZgqM.roa
File: epmRXRPqXn9UMxi33b5MKWyZgqM.roa (raw, json)
Hash identifier: aNB6o1vWqYsUN+qKVrChp5naxX9ZJV0WPpB7CwlbQw0=
Subject key identifier: 7A:99:91:5D:13:EA:5E:7F:54:33:18:B7:DD:BE:4C:29:6C:99:82:A3
Certificate issuer: /CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055
Certificate serial: 018D392831562F3ECF20CB47454B60CFF09C
Authority key identifier: 09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/epmRXRPqXn9UMxi33b5MKWyZgqM.roa
Signing time: Wed 24 Jan 2024 01:49:11 +0000
ROA not before: Wed 24 Jan 2024 01:49:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56913
IP address blocks: 89.187.5.0/24 maxlen: 24
89.187.11.0/24 maxlen: 24
89.187.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 01:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:39:28:31:56:2f:3e:cf:20:cb:47:45:4b:60:cf:f0:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055
Validity
Not Before: Jan 24 01:49:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7a99915d13ea5e7f543318b7ddbe4c296c9982a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:31:56:8a:e6:d9:4e:07:d3:1f:24:79:3d:d4:
1c:31:25:8f:f6:9e:a3:dd:4b:91:bd:75:a4:33:1f:
10:a5:6e:24:31:af:e4:4a:49:21:2c:f4:22:b6:bf:
a0:8f:5f:48:a2:e8:73:2e:a5:49:ac:80:4a:da:85:
63:6f:9a:cf:a2:bc:8f:89:f8:b6:04:9f:f2:5b:b7:
d0:d8:aa:5d:8a:b8:9a:cd:fc:c0:c2:c1:38:bd:99:
25:42:b2:ba:e4:79:00:1c:ef:b2:05:6a:46:03:b6:
8c:90:90:c1:36:e7:41:f1:b5:6f:ac:b3:63:37:69:
2f:a8:c9:32:00:61:d4:b9:b5:9a:46:da:0c:e4:77:
32:f4:24:9d:3e:bf:43:d7:76:39:a5:29:f4:f5:bf:
97:ad:86:3a:4d:88:09:7e:8c:9a:41:60:ca:97:26:
96:3d:3b:60:45:04:53:0d:99:37:3d:a1:dc:0f:46:
ea:67:6a:b8:f8:9c:97:38:1a:11:4f:e7:e7:b1:aa:
59:a5:f4:12:65:c5:27:e4:28:1b:a7:34:66:96:5b:
dc:c2:eb:7e:21:73:fe:7e:9e:82:ea:40:a2:64:93:
b5:0f:bc:6c:e1:29:99:db:55:75:81:90:06:fd:10:
4e:29:6a:1c:63:94:5a:19:9d:e9:c3:19:a8:5c:0c:
6b:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:99:91:5D:13:EA:5E:7F:54:33:18:B7:DD:BE:4C:29:6C:99:82:A3
X509v3 Authority Key Identifier:
keyid:09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/epmRXRPqXn9UMxi33b5MKWyZgqM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.187.5.0/24
89.187.11.0/24
89.187.30.0/24
Signature Algorithm: sha256WithRSAEncryption
35:3b:ae:d1:f2:23:80:6e:e3:e3:b9:53:11:10:c0:1e:62:5e:
cc:5d:24:e4:13:39:8b:09:8a:8f:90:cb:b9:ff:17:e4:2d:01:
03:41:09:06:1d:50:81:08:fd:cc:45:19:07:c2:51:56:b0:1f:
97:05:bd:22:7b:7d:ef:16:c3:04:b4:01:32:82:5a:9b:27:8b:
ee:b2:0b:9c:ab:46:93:43:10:b8:dd:ad:00:a4:d2:2a:0f:07:
af:b0:71:de:98:ad:af:ca:50:de:34:39:63:13:39:68:84:4c:
91:4b:2d:7d:ec:f7:c9:ad:37:c0:51:d9:66:4e:34:77:6f:3d:
59:5b:59:6f:31:38:f6:93:89:dd:0f:9f:59:b1:64:ed:32:a2:
5a:a6:36:a3:bf:98:fd:06:34:27:9c:c3:07:0d:61:eb:bd:ca:
b8:11:7d:0f:4e:22:4a:e7:21:a2:61:53:2d:46:ae:e4:82:52:
f6:7b:7d:b5:9a:68:b3:f4:13:7c:76:eb:bd:8f:4d:8c:4a:c3:
c7:01:0e:2a:30:8d:31:3c:b9:02:7f:4e:6a:da:dc:2d:20:04:
fd:55:de:23:1f:0f:f8:3a:39:be:54:6c:90:1e:dc:eb:b4:d2:
59:87:e1:d9:05:d0:30:c1:ff:a4:3f:a0:6a:33:cc:d1:52:99:
1e:ad:39:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:52:38 2024 by rpki-client on console-ams.rpki-client.org