Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/eqhReVJTlY_C_xmKTdiAHpsjp2k.roa
File: eqhReVJTlY_C_xmKTdiAHpsjp2k.roa (raw, json)
Hash identifier: 8R66GB5XeslDd3ICxIE78YHmDgzaezPZTchKnZuHBtw=
Subject key identifier: 7A:A8:51:79:52:53:95:8F:C2:FF:19:8A:4D:D8:80:1E:9B:23:A7:69
Certificate issuer: /CN=35216a360277876e3e93b29bd4bb9c9231fad2f7
Certificate serial: 018CC4255835F9E717D5DFB13944BE5C109B
Authority key identifier: 35:21:6A:36:02:77:87:6E:3E:93:B2:9B:D4:BB:9C:92:31:FA:D2:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NSFqNgJ3h24-k7Kb1LuckjH60vc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/eqhReVJTlY_C_xmKTdiAHpsjp2k.roa
Signing time: Mon 01 Jan 2024 08:30:30 +0000
ROA not before: Mon 01 Jan 2024 08:30:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208802
IP address blocks: 45.84.200.0/23 maxlen: 23
45.84.200.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NSFqNgJ3h24-k7Kb1LuckjH60vc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:58:35:f9:e7:17:d5:df:b1:39:44:be:5c:10:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35216a360277876e3e93b29bd4bb9c9231fad2f7
Validity
Not Before: Jan 1 08:30:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7aa851795253958fc2ff198a4dd8801e9b23a769
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:36:54:5e:be:3a:43:d7:74:20:ea:41:45:a6:
dc:57:46:e2:56:66:13:62:b8:97:bf:b9:2a:97:6c:
1b:29:08:5a:53:f0:c9:15:4a:53:dd:b7:f3:f7:92:
c6:2e:49:75:35:a2:70:6d:9c:86:71:2a:4b:bf:8b:
a2:73:fa:c9:40:41:b2:47:35:e0:dc:57:03:60:ae:
96:44:2e:2f:70:ff:05:9d:82:91:79:e9:78:34:28:
cd:b8:b5:c7:c6:0b:ed:9c:0a:c9:bc:74:9b:49:1f:
54:55:39:0a:84:1a:5a:7b:f9:26:09:d6:5a:81:a5:
17:96:52:ad:92:a4:01:9e:15:d2:5a:30:ad:15:14:
9d:1f:76:3a:ba:de:e4:00:43:e9:b6:89:39:18:16:
6c:6e:9c:92:a8:dc:09:ce:cf:4a:b1:56:b9:ff:f7:
7f:21:a9:5a:67:61:3d:b3:16:2c:ac:6d:73:1f:8e:
28:1b:10:fc:72:f3:c7:24:da:45:65:64:66:e8:86:
df:fa:98:03:61:4e:ec:75:35:ad:2f:1a:2b:01:b8:
77:29:7d:c2:98:6f:f8:21:51:ee:ff:ec:a7:b2:9e:
0d:41:6a:fc:b8:26:ee:f7:6f:e4:30:c3:31:b3:44:
14:de:6f:49:7e:a5:dc:ab:bf:1f:55:6a:59:3d:aa:
aa:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:A8:51:79:52:53:95:8F:C2:FF:19:8A:4D:D8:80:1E:9B:23:A7:69
X509v3 Authority Key Identifier:
keyid:35:21:6A:36:02:77:87:6E:3E:93:B2:9B:D4:BB:9C:92:31:FA:D2:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NSFqNgJ3h24-k7Kb1LuckjH60vc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/eqhReVJTlY_C_xmKTdiAHpsjp2k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.200.0/22
Signature Algorithm: sha256WithRSAEncryption
76:07:f9:25:e3:7c:42:d7:a0:bf:69:34:06:26:7f:e3:72:62:
30:0a:3b:1b:f3:4b:7a:5a:75:1c:f4:35:ce:0f:63:c8:18:fe:
da:23:43:db:26:65:1d:f9:2a:75:3a:ad:19:37:c5:32:51:16:
2c:e7:a6:80:21:15:0e:e5:96:f3:1a:12:81:15:61:80:65:76:
15:d3:d1:87:95:c5:b9:8b:42:09:59:76:cd:c7:3f:91:d9:93:
5d:46:60:c0:ba:47:d1:66:f1:0c:4c:38:86:84:b9:81:76:1d:
35:ba:03:5e:41:6f:c5:ae:b6:b7:5c:8c:0e:e6:f8:e2:9b:77:
26:85:86:d3:ce:5b:30:21:a4:14:25:42:15:67:e5:68:92:c3:
f2:31:62:6f:f9:f3:43:8d:7e:04:54:fd:b3:f6:91:a5:de:a2:
f6:be:49:a9:70:20:41:e7:62:5c:67:0d:e2:6e:e5:cc:90:08:
02:dc:e5:bd:47:2e:b4:5c:f7:fa:3a:11:3f:50:5e:8e:74:69:
d3:a5:45:0a:12:8b:6f:8e:bb:1a:cd:68:4a:38:4a:39:6a:46:
c7:92:cf:6f:87:60:d2:b7:68:0d:ba:5e:19:58:98:91:3f:f2:
e1:68:13:61:88:19:22:f1:bd:dc:df:36:d8:39:fa:86:37:55:
2b:b6:b6:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 07:13:24 2024 by rpki-client on console-ams.rpki-client.org