Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/eJIDug9Sh1lHxFySmnK0bxoLkgQ.roa
File: eJIDug9Sh1lHxFySmnK0bxoLkgQ.roa (raw, json)
Hash identifier: I8WJMlpGEgGl77b3BQTnjC4XnEu148r3S0AF7O/8WVg=
Subject key identifier: 78:92:03:BA:0F:52:87:59:47:C4:5C:92:9A:72:B4:6F:1A:0B:92:04
Certificate issuer: /CN=acf910f36291c3c224ddb596d956543197f163de
Certificate serial: 018CC72721495B06D160E0A15773CE15CA11
Authority key identifier: AC:F9:10:F3:62:91:C3:C2:24:DD:B5:96:D9:56:54:31:97:F1:63:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rPkQ82KRw8Ik3bWW2VZUMZfxY94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/eJIDug9Sh1lHxFySmnK0bxoLkgQ.roa
Signing time: Mon 01 Jan 2024 22:31:19 +0000
ROA not before: Mon 01 Jan 2024 22:31:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14537
IP address blocks: 217.147.124.0/24 maxlen: 24
217.147.125.0/24 maxlen: 24
217.147.124.0/22 maxlen: 22
217.147.121.0/24 maxlen: 24
217.147.120.0/24 maxlen: 24
217.147.126.0/24 maxlen: 24
217.147.127.0/24 maxlen: 24
92.249.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/rPkQ82KRw8Ik3bWW2VZUMZfxY94.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/rPkQ82KRw8Ik3bWW2VZUMZfxY94.mft
rsync://rpki.ripe.net/repository/DEFAULT/rPkQ82KRw8Ik3bWW2VZUMZfxY94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 10:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:21:49:5b:06:d1:60:e0:a1:57:73:ce:15:ca:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acf910f36291c3c224ddb596d956543197f163de
Validity
Not Before: Jan 1 22:31:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=789203ba0f52875947c45c929a72b46f1a0b9204
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6e:71:00:07:49:63:e6:96:8c:f9:74:52:90:
bc:2a:cd:7c:f3:69:7a:cd:ca:89:95:e6:fb:1a:73:
13:23:5a:98:57:cd:37:d1:2d:6e:e8:a6:38:c8:af:
ae:42:8c:ed:64:14:cb:bd:7b:df:41:48:8c:29:ed:
81:1f:0a:a5:19:de:96:d1:a0:02:63:dc:99:ec:2e:
b5:ac:3e:51:39:33:b1:cf:d3:69:18:7a:72:fd:24:
67:70:be:2b:f7:03:94:ce:74:e5:c3:86:f0:5d:27:
37:22:f6:65:46:e5:6e:8f:ee:ad:d9:97:b3:c2:ae:
39:42:44:19:ee:09:3f:79:54:1e:35:0f:91:30:1e:
ca:04:37:de:7a:a9:dc:57:d1:86:df:88:e2:39:47:
77:f5:a1:df:b7:d3:6c:25:72:26:53:d6:5f:9c:0a:
a2:54:32:df:7b:49:76:0b:f6:00:af:58:30:e3:9e:
d0:0b:92:42:f0:c4:90:24:e4:bb:86:81:4c:92:61:
81:8e:81:de:3d:63:c1:d1:7f:b2:c0:60:e1:59:01:
cc:39:fe:b5:e2:75:a4:62:4d:19:ab:de:fa:0b:2d:
ad:c0:37:59:d9:fc:4f:1d:99:27:34:cc:47:db:25:
4f:3d:39:9f:66:7a:1c:a8:99:f6:9c:b9:e9:2b:0e:
2a:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:92:03:BA:0F:52:87:59:47:C4:5C:92:9A:72:B4:6F:1A:0B:92:04
X509v3 Authority Key Identifier:
keyid:AC:F9:10:F3:62:91:C3:C2:24:DD:B5:96:D9:56:54:31:97:F1:63:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rPkQ82KRw8Ik3bWW2VZUMZfxY94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/eJIDug9Sh1lHxFySmnK0bxoLkgQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/rPkQ82KRw8Ik3bWW2VZUMZfxY94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.249.5.0/24
217.147.120.0/23
217.147.124.0/22
Signature Algorithm: sha256WithRSAEncryption
9d:42:4d:29:a6:b1:b3:d2:a9:0a:10:6c:d0:29:05:9e:f0:0e:
7a:43:c3:cc:02:9c:58:42:b2:99:a1:a4:83:d3:c7:cc:d2:f9:
b7:21:38:a4:dd:52:36:c0:57:e2:d2:70:7d:f7:1e:b7:f3:c2:
f9:fe:08:50:74:3c:eb:a5:9a:54:46:ef:6f:a0:e8:9c:4c:67:
84:a3:72:48:9a:19:8d:4e:8f:f7:a9:0b:5a:9a:e6:f8:27:49:
a0:a2:72:0e:26:a6:99:c0:28:bb:e6:b6:6d:1a:ca:78:e9:5f:
a0:9f:b4:52:21:2d:a0:81:63:fe:a2:d3:bc:54:c3:e6:f2:e6:
e5:39:3a:c5:9f:8b:da:6b:b2:13:ae:a4:32:1c:5f:38:0c:7a:
25:ba:32:bc:11:f0:80:15:52:bf:1a:0e:25:a6:b9:c1:cb:66:
3b:44:e8:4d:89:2c:71:73:44:7d:c2:c9:cb:e1:0c:da:3e:aa:
af:1c:5b:34:3e:31:3e:6a:70:b1:00:ad:11:33:ac:07:9d:5f:
98:61:e5:f1:b5:f0:8b:13:07:07:2b:80:41:8c:13:0f:38:80:
f7:8a:0a:2b:c1:47:e1:96:0f:63:ef:14:86:3a:d5:c7:4d:89:
77:a3:01:a0:bc:1e:5d:cb:b4:95:8b:e2:38:b9:18:0c:b7:1b:
0b:a0:6a:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:51:52 2024 by rpki-client on console-ams.rpki-client.org