Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/EQHS_X4ZA2vPpeDlxyHkdBLRb0k.roa
File: EQHS_X4ZA2vPpeDlxyHkdBLRb0k.roa (raw, json)
Hash identifier: uYghtR55VIr8gKkft8BN5OGlOHoMMDBkI3ckdNUq4Eg=
Subject key identifier: 11:01:D2:FD:7E:19:03:6B:CF:A5:E0:E5:C7:21:E4:74:12:D1:6F:49
Certificate issuer: /CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
Certificate serial: 018E51B513538C27F50C8C8EFF74C281CB7B
Authority key identifier: FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/EQHS_X4ZA2vPpeDlxyHkdBLRb0k.roa
Signing time: Mon 18 Mar 2024 13:16:45 +0000
ROA not before: Mon 18 Mar 2024 13:16:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212669
IP address blocks: 45.91.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.mft
rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 May 2024 22:35:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:51:b5:13:53:8c:27:f5:0c:8c:8e:ff:74:c2:81:cb:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
Validity
Not Before: Mar 18 13:16:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1101d2fd7e19036bcfa5e0e5c721e47412d16f49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:06:7e:11:d4:5e:0b:9b:f8:5d:a9:65:c2:f6:
44:58:9a:5c:66:b3:33:5b:95:0c:f6:e2:41:cb:3f:
e1:92:6e:0a:d2:99:5b:d3:82:f7:4b:ed:3a:59:f9:
2b:fe:77:e8:b7:e6:af:11:c8:77:e8:90:fa:25:c4:
f1:57:68:bc:62:1c:89:62:0a:d2:f4:98:56:90:af:
09:ca:0d:bc:4b:08:89:f0:29:89:ca:16:4c:98:82:
84:60:f0:9c:ea:c5:24:a4:ee:42:98:80:62:fd:32:
6f:2f:8d:ee:75:cc:18:3e:90:d5:e8:62:74:d2:09:
cb:15:99:4c:78:61:9c:0e:fb:65:b9:21:ef:7e:d6:
52:ca:1f:b5:9b:0e:91:0f:64:2c:ee:c8:93:39:25:
e1:fb:b5:c8:00:2e:7d:22:8a:0a:4c:22:4a:c3:c6:
81:a4:6b:05:34:48:62:38:6f:8f:2e:9a:8d:a1:0b:
70:59:8b:7d:a2:11:d5:24:8d:70:73:de:71:a0:44:
3d:e4:18:12:7c:ea:33:98:3b:cc:44:92:64:f4:49:
4c:8c:b8:a4:b8:2e:e2:8f:70:93:88:92:06:fa:ab:
54:ee:f7:b7:f1:20:18:a8:ab:19:88:29:0d:ad:fa:
f1:6b:d4:05:a4:e1:5c:d4:f2:d9:ad:74:09:a3:d4:
f0:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:01:D2:FD:7E:19:03:6B:CF:A5:E0:E5:C7:21:E4:74:12:D1:6F:49
X509v3 Authority Key Identifier:
keyid:FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/EQHS_X4ZA2vPpeDlxyHkdBLRb0k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.7.0/24
Signature Algorithm: sha256WithRSAEncryption
81:e5:28:ef:89:37:f7:52:5e:c3:fd:07:b1:ea:33:d6:6a:00:
f5:1e:67:03:34:e0:4c:71:b6:8f:42:2b:a8:cf:b3:1c:7b:5b:
10:45:34:c9:b0:cc:44:94:45:3e:0c:a5:48:c1:37:c1:72:0e:
b6:5a:ce:e1:b9:b7:37:a6:78:96:bc:39:40:7d:fe:78:2d:4c:
7d:d6:11:f9:bc:cd:9e:38:6a:c6:67:19:1c:3b:4f:78:ed:f6:
1f:d0:9d:f9:9f:49:f9:8e:cb:26:93:51:2b:fd:42:43:68:9d:
65:ef:26:56:ae:d7:f8:a3:e9:4d:d4:08:fb:cc:64:93:92:2c:
87:a4:21:34:78:1d:da:b1:37:5a:4b:84:ff:5e:15:9a:8b:20:
46:cd:18:3b:b5:1c:13:a1:4d:6b:c1:22:54:78:1b:bc:ed:7e:
f5:6e:f4:1c:7d:8f:e2:cf:c8:9c:f5:11:ba:48:0e:41:85:6a:
a2:6e:6e:ec:d6:6d:4d:12:8b:b6:e9:6d:9e:da:07:3b:15:62:
9a:b9:36:69:a7:60:2d:6b:da:f3:8a:06:c7:92:d6:aa:52:63:
98:1b:19:4c:e8:da:94:7a:c5:10:3a:87:4c:ca:f2:cd:28:8a:
3c:69:48:57:6f:11:90:a0:ea:b9:b6:7e:b9:e4:50:b5:30:f2:
97:0f:8b:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 03:51:32 2024 by rpki-client on console-fra.rpki-client.org