Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/8b856a-38ae-4cfb-81d2-271a9576eae7/1/SoEj_qavwax6dgcyvzmLN783wQU.roa
File: SoEj_qavwax6dgcyvzmLN783wQU.roa (raw, json)
Hash identifier: 9EQJjePcFP8dJRZ+3QxDEBMc3mJOJj8bgaVp1ipXkRI=
Subject key identifier: 4A:81:23:FE:A6:AF:C1:AC:7A:76:07:32:BF:39:8B:37:BF:37:C1:05
Certificate issuer: /CN=2eeec5231d212b310579d78fc41479ca6ec2aa07
Certificate serial: 019091BDF4FFEC620707B9831B96860C81F8
Authority key identifier: 2E:EE:C5:23:1D:21:2B:31:05:79:D7:8F:C4:14:79:CA:6E:C2:AA:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lu7FIx0hKzEFedePxBR5ym7Cqgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/8b856a-38ae-4cfb-81d2-271a9576eae7/1/SoEj_qavwax6dgcyvzmLN783wQU.roa
Signing time: Mon 08 Jul 2024 09:47:43 +0000
ROA not before: Mon 08 Jul 2024 09:47:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61237
IP address blocks: 77.247.239.0/24 maxlen: 24
92.241.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/8b856a-38ae-4cfb-81d2-271a9576eae7/1/Lu7FIx0hKzEFedePxBR5ym7Cqgc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/8b856a-38ae-4cfb-81d2-271a9576eae7/1/Lu7FIx0hKzEFedePxBR5ym7Cqgc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lu7FIx0hKzEFedePxBR5ym7Cqgc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Sep 2024 16:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:91:bd:f4:ff:ec:62:07:07:b9:83:1b:96:86:0c:81:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2eeec5231d212b310579d78fc41479ca6ec2aa07
Validity
Not Before: Jul 8 09:47:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4a8123fea6afc1ac7a760732bf398b37bf37c105
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:64:2c:d6:94:fb:60:e3:ad:1f:e4:6b:58:05:
11:78:b5:94:41:c9:e9:8a:89:5c:04:b1:20:27:d3:
1f:06:c7:a0:33:b9:76:1e:ad:52:76:da:f7:98:7f:
28:fa:cb:ce:85:f4:8c:39:1a:08:84:cc:7d:f6:5d:
c9:72:fb:e4:da:bb:ed:a4:22:12:ff:f4:ac:22:64:
10:59:87:c4:02:ec:fb:e5:ca:17:4a:40:5d:41:2c:
16:ee:01:01:e9:ad:04:5d:d4:71:dd:19:0c:f2:11:
34:03:65:c9:3e:b5:c8:b6:3a:ed:60:2d:8b:2b:b5:
a2:fe:c9:e0:0a:f7:5b:c6:d7:25:12:b8:6c:ce:d1:
e4:f6:9d:68:0a:ca:4d:5e:09:b0:3a:31:07:90:e8:
42:a4:1b:28:5e:13:02:3f:68:3d:f8:da:d3:5b:cc:
aa:c2:aa:b2:af:8d:96:6f:7e:ca:dd:f0:94:e5:34:
90:42:b1:ca:9c:0e:aa:15:e8:ca:a2:09:1d:b1:46:
d7:ac:5f:30:27:a6:12:45:f3:09:a0:5b:8a:a9:59:
c5:73:3f:fc:18:ed:88:53:b1:43:c9:e8:10:dd:61:
dc:23:99:72:d0:84:6a:0d:f8:ad:d3:fc:1a:1e:77:
80:45:e8:12:24:c8:95:bb:b9:1e:aa:de:57:78:8c:
4b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:81:23:FE:A6:AF:C1:AC:7A:76:07:32:BF:39:8B:37:BF:37:C1:05
X509v3 Authority Key Identifier:
keyid:2E:EE:C5:23:1D:21:2B:31:05:79:D7:8F:C4:14:79:CA:6E:C2:AA:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lu7FIx0hKzEFedePxBR5ym7Cqgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/8b856a-38ae-4cfb-81d2-271a9576eae7/1/SoEj_qavwax6dgcyvzmLN783wQU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/8b856a-38ae-4cfb-81d2-271a9576eae7/1/Lu7FIx0hKzEFedePxBR5ym7Cqgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.247.239.0/24
92.241.21.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:bb:5c:23:77:85:53:39:b2:47:e0:27:e3:e3:d4:7b:18:56:
03:f4:db:28:10:3e:61:81:09:25:9a:bb:67:df:ef:9a:06:5f:
2e:81:b7:db:53:c2:4a:cb:9c:6c:ae:1d:0c:c1:56:be:6f:6c:
9e:78:9e:95:b5:d9:b5:fd:86:4e:c6:32:9c:66:3e:5e:d6:2b:
ee:01:29:8d:01:fd:83:45:95:56:87:33:92:06:52:88:85:c6:
b4:8e:b9:54:32:bb:24:86:78:b5:97:f0:2e:f0:6c:ff:5a:45:
d7:58:6a:2f:dc:35:99:9b:b4:a5:1e:d3:23:89:48:9f:4c:20:
ea:9c:48:81:d3:d0:65:73:f3:28:52:17:05:c6:85:a4:9f:73:
8e:d2:fc:07:54:b7:0e:cb:a0:41:48:73:a3:27:8a:1a:a6:3b:
6e:b0:f0:e1:23:8f:d8:8c:f1:29:da:ca:04:8c:63:9a:23:2d:
21:0c:ce:18:d1:48:c8:ac:3d:ca:79:20:41:10:0e:59:ac:04:
aa:31:ae:30:a8:1d:f8:db:f7:5b:30:7e:d6:fa:ec:64:79:75:
f8:18:19:05:4b:69:7e:62:c4:2a:fe:e4:01:7a:04:51:74:38:
79:80:39:51:67:52:c6:97:ea:15:c9:a8:f5:8d:95:6a:86:c9:
e0:fc:c5:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 21 00:43:47 2024 by rpki-client on console-ams.rpki-client.org