Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/eYglMEbaC-pcRnhACdptth9OQpw.roa
File: eYglMEbaC-pcRnhACdptth9OQpw.roa (raw, json)
Hash identifier: XNEAvBTl0fmgtmiwiatb7ajuvRwuEjoOcP0YMO14ZuU=
Subject key identifier: 79:88:25:30:46:DA:0B:EA:5C:46:78:40:09:DA:6D:B6:1F:4E:42:9C
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 018CC26D29691718ABF0D4E0C9832C211514
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/eYglMEbaC-pcRnhACdptth9OQpw.roa
Signing time: Mon 01 Jan 2024 00:29:43 +0000
ROA not before: Mon 01 Jan 2024 00:29:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60984
IP address blocks: 89.41.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:29:69:17:18:ab:f0:d4:e0:c9:83:2c:21:15:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jan 1 00:29:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7988253046da0bea5c46784009da6db61f4e429c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:09:97:4f:fc:77:ca:2c:30:95:d8:2e:8a:4f:
bd:8d:1a:20:62:09:58:df:4b:0c:4b:40:41:66:38:
1e:06:b5:9e:bf:82:64:e8:f6:b6:88:95:4e:49:8f:
98:4b:9f:4e:14:20:81:e5:dd:4b:fc:a0:dc:a7:97:
36:36:2d:50:a2:73:5f:4d:fe:2a:64:00:1b:f1:10:
a2:cc:65:d0:e4:15:e2:2a:c7:96:d8:67:d1:6b:ab:
47:31:72:14:8a:5f:ea:03:ac:65:e1:1f:cc:d9:57:
4f:37:fd:fc:ce:e5:52:a2:55:82:4c:57:e3:d0:c3:
f0:93:26:c8:ed:51:de:f9:e2:b7:2f:17:16:e4:cd:
17:88:e9:6c:fd:02:a9:d8:95:c8:f4:56:38:50:ab:
bd:f3:18:e3:1b:90:b1:b2:07:f0:69:73:ab:06:73:
dc:d2:2e:b2:4a:ce:ca:b4:f9:24:bd:ee:ec:b8:ba:
44:c4:65:a3:7d:3e:29:8e:e3:45:81:64:57:06:2a:
9d:0d:a0:72:bc:fb:83:e4:52:fc:f8:60:56:a9:10:
c4:c2:73:55:6f:55:9b:e8:55:92:4d:72:81:b1:b0:
91:17:5f:11:e8:c6:dd:f4:7b:e5:9f:a0:0f:e7:3d:
7b:68:6a:9c:cb:14:ea:a1:06:37:61:c9:88:17:a7:
0a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:88:25:30:46:DA:0B:EA:5C:46:78:40:09:DA:6D:B6:1F:4E:42:9C
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/eYglMEbaC-pcRnhACdptth9OQpw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.41.178.0/24
Signature Algorithm: sha256WithRSAEncryption
59:8f:25:ef:a8:a4:29:b1:be:08:10:57:e0:a4:97:ff:09:f4:
1e:43:18:90:a2:54:fc:2b:7f:59:7d:7c:55:d7:43:b1:92:c9:
ef:60:81:6b:81:26:7c:0b:a7:cd:ca:bc:99:30:8f:db:09:d2:
f0:25:93:f8:ea:9c:07:64:87:af:2d:35:3d:39:81:83:02:bc:
2c:c2:86:e9:a9:ee:cd:00:78:cb:1a:53:e5:8b:88:33:72:84:
02:3a:67:d4:5a:25:9c:6f:74:f0:46:e0:6d:f8:84:ba:cf:b4:
1e:22:60:7b:69:56:db:86:18:91:17:d3:cf:5b:60:9d:1f:df:
8c:05:5a:a7:87:f1:dd:b3:3d:1b:6f:62:38:92:c1:8f:21:b2:
e3:c2:6f:f4:55:f2:97:2f:5f:bd:a6:4d:95:4a:6c:42:d9:46:
e7:58:c5:a1:96:1f:6a:22:92:d0:6e:07:47:da:dc:48:ca:6f:
42:f4:ff:5d:c2:73:b6:cb:ae:6e:f8:e9:6a:41:0e:f8:51:cb:
d1:eb:d5:d7:4e:be:d1:24:82:8d:b6:6c:55:b0:6a:b3:42:c4:
20:8f:fa:0b:1f:88:9d:51:33:07:91:b9:94:65:7c:5d:81:d7:
5c:21:37:1e:4c:db:28:a1:8d:54:46:36:76:19:6f:97:fa:0e:
4d:62:5e:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:05:51 2024 by rpki-client on console-fra.rpki-client.org