Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/fe6bac-10b3-4256-84b0-a76292e20458/1/71x15irDbi-GCIJt2MQjGdy4wss.roa
File: 71x15irDbi-GCIJt2MQjGdy4wss.roa (raw, json)
Hash identifier: 9TcBa+jo1B/j4bv7lsz2bzAaRfC/etnehsuTXmxaCIs=
Subject key identifier: EF:5C:75:E6:2A:C3:6E:2F:86:08:82:6D:D8:C4:23:19:DC:B8:C2:CB
Certificate issuer: /CN=e7f26134830ee20dc22986dc8a7366d0972b2930
Certificate serial: 018CCA2A2D50A02C565BB295BF830600510E
Authority key identifier: E7:F2:61:34:83:0E:E2:0D:C2:29:86:DC:8A:73:66:D0:97:2B:29:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_JhNIMO4g3CKYbcinNm0JcrKTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/fe6bac-10b3-4256-84b0-a76292e20458/1/71x15irDbi-GCIJt2MQjGdy4wss.roa
Signing time: Tue 02 Jan 2024 12:33:30 +0000
ROA not before: Tue 02 Jan 2024 12:33:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210423
IP address blocks: 93.157.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/fe6bac-10b3-4256-84b0-a76292e20458/1/5_JhNIMO4g3CKYbcinNm0JcrKTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/fe6bac-10b3-4256-84b0-a76292e20458/1/5_JhNIMO4g3CKYbcinNm0JcrKTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5_JhNIMO4g3CKYbcinNm0JcrKTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 01:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:2d:50:a0:2c:56:5b:b2:95:bf:83:06:00:51:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7f26134830ee20dc22986dc8a7366d0972b2930
Validity
Not Before: Jan 2 12:33:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ef5c75e62ac36e2f8608826dd8c42319dcb8c2cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e4:a9:63:0b:dc:77:6d:17:54:b2:ab:b5:4b:
ec:be:87:ab:6a:ea:2b:3d:96:b6:6d:d9:d0:53:d2:
ab:52:65:13:e4:97:28:e7:f4:c2:c7:06:7a:d1:55:
e5:08:c9:8b:98:8b:ce:9a:78:70:38:23:99:aa:44:
dc:d8:3a:6a:f6:32:56:9d:34:f4:fe:b7:6b:56:da:
c6:65:9a:70:d6:fd:70:e6:7e:41:72:2c:60:9e:68:
f5:fa:f3:e2:41:28:fe:be:b2:16:de:d7:62:e1:1e:
bc:b2:b7:78:63:c5:3f:28:de:dc:9a:30:1f:3f:32:
ff:31:2f:ba:f1:96:0d:a0:72:03:55:b2:2b:0d:6f:
a2:89:44:61:a1:e1:23:77:74:a1:95:3d:41:04:0d:
fd:b8:a5:38:fa:61:7f:76:c9:3d:06:07:62:7d:1b:
33:14:ee:b6:4a:a1:c2:cd:aa:7b:ae:3a:39:75:6c:
4a:26:a6:c4:39:43:90:f7:cd:18:24:31:5c:69:64:
a4:b4:1c:97:11:fe:31:3a:7d:56:36:88:4a:e1:12:
7b:00:dd:dd:f9:6d:b4:76:0b:a1:38:59:76:61:bd:
96:34:b8:6e:c2:5b:07:db:3b:3f:39:8a:b4:e1:40:
35:39:be:45:cd:91:65:9e:45:d1:c1:5d:3e:72:25:
06:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:5C:75:E6:2A:C3:6E:2F:86:08:82:6D:D8:C4:23:19:DC:B8:C2:CB
X509v3 Authority Key Identifier:
keyid:E7:F2:61:34:83:0E:E2:0D:C2:29:86:DC:8A:73:66:D0:97:2B:29:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_JhNIMO4g3CKYbcinNm0JcrKTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/fe6bac-10b3-4256-84b0-a76292e20458/1/71x15irDbi-GCIJt2MQjGdy4wss.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/fe6bac-10b3-4256-84b0-a76292e20458/1/5_JhNIMO4g3CKYbcinNm0JcrKTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.157.107.0/24
Signature Algorithm: sha256WithRSAEncryption
22:56:01:05:37:72:97:f4:7b:46:be:a9:cc:45:c3:f1:fc:5a:
7a:3e:cf:bf:23:3b:82:2a:82:90:59:b6:7d:fd:e4:b4:e5:c7:
8d:35:6a:69:f2:13:11:cf:d5:45:0c:45:4a:97:d6:e8:d1:48:
5e:c7:bd:4e:6a:2d:65:1e:e2:a7:c8:5b:bd:5f:4e:0a:96:6c:
8d:b1:1d:03:ce:2a:15:8e:89:df:93:cb:20:07:75:e6:c2:8b:
62:56:63:2b:88:d9:77:22:de:8b:a7:bd:e1:d0:c6:43:5d:46:
bc:d3:94:44:8d:0c:7a:1e:74:d8:cb:c3:54:a3:43:e5:c4:02:
75:95:d2:76:70:41:48:58:31:50:23:53:62:84:5a:00:6e:ce:
d6:c0:f1:4b:6e:65:02:a0:73:ae:77:c3:c5:45:78:94:7b:d8:
54:70:4f:77:50:c0:79:f8:d9:d9:07:47:46:9a:29:26:e2:2d:
c3:de:25:1a:5c:ee:86:4b:62:fe:78:68:e8:c9:a8:fa:b0:a8:
f0:45:0a:57:be:18:b1:39:32:8f:69:06:7f:ae:ce:85:51:8d:
e5:3c:ed:cd:88:7a:f3:ee:e6:a8:b1:c7:35:37:dc:e5:08:cc:
c2:9c:12:f6:b1:9b:4f:d7:9e:50:b2:11:de:a5:07:7d:d6:da:
6e:eb:f2:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 06:04:07 2024 by rpki-client on console-ams.rpki-client.org