Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/EQAqqn6JAXESt6NRtxb30SuX_JE.roa
File: EQAqqn6JAXESt6NRtxb30SuX_JE.roa (raw, json)
Hash identifier: BzvqnrsgKF2OiLjdw5ENIKEKBNITWjkWzMJOo9W6ey4=
Subject key identifier: 11:00:2A:AA:7E:89:01:71:12:B7:A3:51:B7:16:F7:D1:2B:97:FC:91
Certificate issuer: /CN=3aba1172472ea80265d12982967de0a8b0bc5901
Certificate serial: 019011228A6DC4C491AC1915091239014863
Authority key identifier: 3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/EQAqqn6JAXESt6NRtxb30SuX_JE.roa
Signing time: Thu 13 Jun 2024 10:26:34 +0000
ROA not before: Thu 13 Jun 2024 10:26:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 185.243.154.0/24 maxlen: 24
185.243.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Jun 2024 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:11:22:8a:6d:c4:c4:91:ac:19:15:09:12:39:01:48:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aba1172472ea80265d12982967de0a8b0bc5901
Validity
Not Before: Jun 13 10:26:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=11002aaa7e89017112b7a351b716f7d12b97fc91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:da:fb:16:5c:9a:9c:f0:c9:d8:1d:9d:e4:18:
37:0b:bc:7c:be:83:e3:ad:65:f6:c5:ec:78:dd:e4:
f7:aa:8c:15:94:2a:51:75:0f:98:3c:d0:c6:83:30:
33:1c:75:b1:59:15:d4:9a:75:cf:d3:9d:ff:bc:b8:
fc:90:84:45:83:0c:1f:32:49:e2:57:ca:b2:c4:a2:
af:d6:24:99:ee:eb:51:88:b9:08:5b:b2:f9:f6:67:
98:c4:bf:38:4c:4f:3d:16:32:b5:bc:49:cb:e3:b4:
93:16:1b:c3:93:d2:ca:11:c1:65:ef:14:cb:fc:93:
8f:0b:13:5c:68:7c:ab:80:61:a2:35:be:e1:2d:1d:
9a:8b:6c:7d:4b:87:77:6b:7a:fb:b9:c1:e5:de:68:
2c:6c:29:1e:37:d4:ab:8f:f4:be:4b:4c:e3:28:c9:
43:86:46:1e:a1:ef:d2:d8:f8:97:d8:11:8f:8a:a6:
43:87:15:2f:d5:ec:91:52:01:09:23:e6:25:29:78:
a6:f9:79:c5:6d:43:92:c3:7d:d8:16:08:02:a1:39:
67:97:24:24:a5:e5:30:d4:40:7f:fe:03:bc:30:9f:
8f:90:91:a8:f3:4b:d0:db:4d:3d:1f:43:be:48:7a:
a0:6e:e1:31:d6:c2:ef:8c:c1:3d:f0:83:01:1d:af:
21:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:00:2A:AA:7E:89:01:71:12:B7:A3:51:B7:16:F7:D1:2B:97:FC:91
X509v3 Authority Key Identifier:
keyid:3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/EQAqqn6JAXESt6NRtxb30SuX_JE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.243.154.0/23
Signature Algorithm: sha256WithRSAEncryption
4d:70:0b:6b:f0:d7:c5:75:f5:a6:24:4f:e6:43:01:f7:70:dc:
90:08:1a:21:6f:33:02:3c:6d:45:9c:44:b7:3e:62:87:eb:38:
01:a6:bc:34:c6:d5:1d:33:8f:53:38:d2:56:e9:7f:db:f5:d1:
3c:76:1c:69:f4:3f:76:f5:ca:22:de:17:09:e3:55:9f:c8:70:
9e:04:01:dc:6a:52:ac:60:06:35:bc:f3:00:f8:62:26:b9:87:
95:45:66:d4:bd:af:c7:78:68:c4:9a:ea:d5:01:ba:c0:27:97:
28:f5:54:71:04:ad:f6:78:de:73:9c:9c:aa:bd:be:f7:49:17:
b4:f5:bb:bb:e2:a9:f6:f5:c1:ab:89:2c:9c:79:c1:55:c6:a6:
2a:cb:c1:25:59:31:11:e1:5d:6b:a5:0f:70:22:6e:b3:fb:08:
2c:df:34:af:88:04:de:70:a7:68:00:b8:2d:b0:d1:5b:b5:5c:
d6:12:47:d2:27:ef:a3:c2:35:d3:71:6b:2b:34:a2:b3:33:c4:
75:bf:c0:38:ea:9b:ab:eb:e0:40:98:75:ac:0d:2c:8f:84:9d:
b9:9a:2f:72:0c:18:4c:1f:bc:43:19:9e:ec:71:6a:be:a9:79:
2a:67:37:e9:4e:8f:9b:4b:d6:03:ef:b9:11:fc:08:d1:18:eb:
b4:73:1b:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 13 15:18:37 2024 by rpki-client on console-ams.rpki-client.org