Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/7sUybcmEI5DrMe92GoSGvF2zA30.roa
File: 7sUybcmEI5DrMe92GoSGvF2zA30.roa (raw, json)
Hash identifier: IzUeuPL9Zn0w/ZiFVif4BsWrzBiFpupoUSS83ZxJMhw=
Subject key identifier: EE:C5:32:6D:C9:84:23:90:EB:31:EF:76:1A:84:86:BC:5D:B3:03:7D
Certificate issuer: /CN=a254a9f3a266513ddc6935d8be022e7e5230ea10
Certificate serial: 018CC94D8997F72CB9D69104AB80C9F671D5
Authority key identifier: A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/7sUybcmEI5DrMe92GoSGvF2zA30.roa
Signing time: Tue 02 Jan 2024 08:32:31 +0000
ROA not before: Tue 02 Jan 2024 08:32:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208119
IP address blocks: 92.62.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 11:37:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:89:97:f7:2c:b9:d6:91:04:ab:80:c9:f6:71:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a254a9f3a266513ddc6935d8be022e7e5230ea10
Validity
Not Before: Jan 2 08:32:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eec5326dc9842390eb31ef761a8486bc5db3037d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4f:04:b6:61:ff:bb:9c:00:dc:b9:da:93:bc:
6b:03:f7:05:aa:bc:07:34:61:75:63:64:b9:59:93:
93:a0:c4:d9:10:26:46:fc:86:28:05:8d:57:17:7b:
1e:fb:25:ad:f3:54:c5:2e:cf:cf:5b:34:ff:0d:a5:
69:df:49:3b:0d:c9:dd:0f:c3:93:38:f6:ab:e1:8c:
01:7e:4b:7e:5d:83:43:85:4a:4a:3a:bd:d2:65:b7:
f9:26:e6:a6:00:ff:22:73:43:5c:7b:fb:93:63:3e:
db:60:e0:67:62:46:b5:66:78:05:9f:b9:d4:b3:ec:
da:1b:96:c4:3e:75:09:29:2f:cf:44:d0:f5:56:5e:
8c:90:51:e0:96:68:01:3f:2a:3d:db:81:27:fb:e9:
93:d4:24:d8:ba:48:ef:bb:fe:84:ac:e2:99:16:0e:
86:13:fc:29:c3:06:35:3e:db:9f:7f:10:59:7c:9d:
5f:63:73:87:cf:93:ff:1a:a0:32:69:cc:a3:38:cb:
3a:6a:1a:18:81:03:9e:19:13:a4:d9:d8:2c:c4:23:
1f:93:1b:d8:db:72:fc:7b:ff:00:91:8b:62:6c:6f:
e4:6f:03:31:3f:f1:8e:58:11:ba:f8:de:1e:61:e8:
89:58:9f:9c:c4:ff:21:0a:3a:83:3d:ed:8e:60:3f:
74:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:C5:32:6D:C9:84:23:90:EB:31:EF:76:1A:84:86:BC:5D:B3:03:7D
X509v3 Authority Key Identifier:
keyid:A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/7sUybcmEI5DrMe92GoSGvF2zA30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.62.134.0/24
Signature Algorithm: sha256WithRSAEncryption
66:0f:ff:a5:f6:f2:e9:d7:22:ae:3e:d0:f2:94:6f:64:a3:ac:
cf:f8:2e:0f:58:3b:4f:b9:31:63:80:36:33:42:dc:7d:66:51:
02:20:83:6c:22:f5:84:e3:ff:1d:c9:68:e5:ce:86:19:2d:13:
c8:8e:90:4a:9d:c4:7c:77:1c:2e:da:f8:86:e8:5c:51:00:09:
60:79:c3:3a:3f:c0:cb:e3:7f:19:96:51:cb:9a:41:67:14:b5:
79:14:93:12:58:5b:ef:13:98:27:20:65:00:60:4a:54:ba:ba:
68:74:58:a2:94:ef:50:7f:dd:bb:d5:ab:0b:6c:9c:c6:3c:4c:
50:db:25:ac:48:27:55:de:ae:2a:fc:aa:0e:12:95:c8:04:94:
4f:9d:fa:38:47:7a:fc:5e:bf:50:a3:0a:07:90:64:c4:7b:51:
52:aa:d5:f1:15:eb:5d:60:5d:24:16:6a:77:b6:d3:62:c3:db:
2f:d3:52:0a:49:ae:da:80:70:58:78:d3:6a:33:6e:40:a3:71:
2f:d0:56:d4:eb:e2:e2:2c:87:6c:f1:d4:90:ee:4b:3c:ed:39:
96:50:91:49:b9:83:db:58:a4:e5:da:54:53:75:a4:76:1d:d4:
42:9d:49:2f:29:2c:eb:b2:c3:42:df:fc:30:c3:52:89:b9:01:
fd:9e:86:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 20:22:27 2024 by rpki-client on console-ams.rpki-client.org