Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Epyipeab3DzHw5GFIWO0lGgVuQA.roa
File: Epyipeab3DzHw5GFIWO0lGgVuQA.roa (raw, json)
Hash identifier: GEn8VzgjTdOGyCbiAyjWQM/yl2hXFgy19P8hxlCMqmU=
Subject key identifier: 12:9C:A2:A5:E6:9B:DC:3C:C7:C3:91:85:21:63:B4:94:68:15:B9:00
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01928FED63BC653FFF887E681203A106AD5E
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Epyipeab3DzHw5GFIWO0lGgVuQA.roa
Signing time: Tue 15 Oct 2024 11:25:52 +0000
ROA not before: Tue 15 Oct 2024 11:25:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215224
IP address blocks: 217.145.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:8f:ed:63:bc:65:3f:ff:88:7e:68:12:03:a1:06:ad:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Oct 15 11:25:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=129ca2a5e69bdc3cc7c391852163b4946815b900
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:96:31:82:ec:f9:8e:d4:49:30:c1:34:90:d8:
75:c8:c8:fa:5a:09:92:b2:5f:a3:cb:20:74:91:71:
42:b6:4d:50:c9:c6:ac:7c:96:d9:f3:56:b1:d3:6f:
be:db:4a:45:fa:69:fb:14:cf:f5:da:ee:ed:39:47:
66:55:6e:6c:41:8f:43:77:5c:d1:ea:96:fb:0f:0b:
aa:6d:5a:b0:46:a1:60:4c:10:c3:76:1c:a6:fc:20:
a4:61:97:04:e3:3d:87:5f:23:c3:02:e2:33:77:d4:
2d:7e:cd:be:67:5c:a6:2e:dd:9b:1f:e1:68:9a:11:
ae:45:ef:8d:17:21:98:4b:ea:6c:96:32:fa:ec:f7:
48:a8:cf:a8:c6:01:1f:c2:e9:28:49:4b:66:82:d4:
4a:d6:65:57:2c:83:9b:cc:57:6c:04:33:29:1f:53:
e5:4e:66:65:33:c9:50:79:65:32:28:86:9a:c2:df:
a9:58:67:85:98:13:e3:43:c7:47:32:e8:b4:15:d6:
df:c7:1c:7e:b9:3c:94:55:4b:64:9a:d6:8a:29:28:
f0:b6:5c:81:8a:96:9d:35:3c:96:bb:ed:86:fb:54:
8a:f6:e9:14:4e:97:e6:a8:22:ab:a6:aa:1c:a8:ce:
78:53:cf:8f:cb:d1:1e:81:a0:9a:b6:3b:da:78:51:
11:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:9C:A2:A5:E6:9B:DC:3C:C7:C3:91:85:21:63:B4:94:68:15:B9:00
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Epyipeab3DzHw5GFIWO0lGgVuQA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.145.78.0/24
Signature Algorithm: sha256WithRSAEncryption
70:6c:29:58:e1:96:3b:76:28:9b:55:f4:b9:78:54:d2:ec:5c:
2b:d2:ae:8a:b1:28:c2:ea:6b:45:3c:19:bf:f6:b1:f4:5b:34:
5b:63:9b:92:af:2b:65:71:75:ad:58:5a:09:69:1e:9a:c5:38:
71:6a:52:ec:90:ea:bd:95:8c:b9:aa:21:9e:01:dd:08:52:e1:
c2:f1:29:34:4c:31:94:77:55:f5:82:46:38:59:a5:a4:cc:53:
6d:1a:2e:2d:c5:ef:ee:b4:73:4f:22:7d:7f:0c:af:20:50:b5:
9f:48:dd:5b:b3:3e:16:d4:42:c2:b5:31:08:b7:9e:80:29:b1:
c0:9e:26:61:4e:fc:f3:26:31:88:71:a6:4f:98:47:50:d2:8d:
e1:78:42:90:4f:d6:ce:dc:3d:67:44:43:ef:84:12:1a:b9:44:
ef:73:97:f5:42:15:8f:c3:44:b0:b0:bd:cf:8f:3d:87:2f:a6:
0f:b3:ca:1d:7a:d9:19:69:a4:4b:a4:8d:40:91:ea:9c:cc:98:
e5:71:26:03:b7:cc:b8:09:f4:91:cc:ca:25:c0:a0:82:6a:f0:
db:ad:0a:5c:2a:a5:39:7d:a6:5c:9c:30:fb:28:72:54:97:96:
fd:38:50:b7:4a:7d:31:6d:d7:85:9e:da:58:5a:23:aa:e7:c4:
5e:6b:6f:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:57:15 2024 by rpki-client on console-fra.rpki-client.org