Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/eu77SitSjXvyhgxxaPXBCVBrT3A.roa
File: eu77SitSjXvyhgxxaPXBCVBrT3A.roa (raw, json)
Hash identifier: u1uwpAfvEEC27bhAHMM7oRwfGH0US401+fAS3DAaCfg=
Subject key identifier: 7A:EE:FB:4A:2B:52:8D:7B:F2:86:0C:71:68:F5:C1:09:50:6B:4F:70
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 0190E354345C6E7CDCABC15A05FB7CD3DFD3
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/eu77SitSjXvyhgxxaPXBCVBrT3A.roa
Signing time: Wed 24 Jul 2024 06:01:04 +0000
ROA not before: Wed 24 Jul 2024 06:01:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211975
IP address blocks: 89.43.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 02:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:e3:54:34:5c:6e:7c:dc:ab:c1:5a:05:fb:7c:d3:df:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jul 24 06:01:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7aeefb4a2b528d7bf2860c7168f5c109506b4f70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:40:2a:73:a7:21:f4:c5:b4:a0:66:a7:69:fc:
86:e0:62:24:1f:78:3a:82:11:55:c8:06:ef:cf:44:
84:f8:91:b2:01:b2:10:36:9a:db:4b:e3:74:fd:5b:
01:60:8a:4e:a4:12:61:df:29:f1:fa:e8:6f:cf:e7:
4e:b0:d4:7f:19:94:15:92:e5:d7:d2:0b:05:dc:2d:
e7:23:75:66:53:da:d5:6e:85:3a:37:01:ee:37:36:
f7:58:7c:b9:e9:28:91:bb:cc:67:7d:d2:4f:7f:38:
39:bb:e1:ba:88:0c:81:ae:05:56:e2:95:2e:ca:ec:
1f:de:f0:eb:9c:d5:ac:ea:0c:54:1f:19:db:89:ce:
7a:fa:1e:e6:95:9b:ac:67:60:ec:2c:08:1f:83:5b:
77:4b:50:3c:24:59:59:99:5f:0f:05:ed:49:8e:eb:
fd:c5:26:91:67:53:8c:34:f7:a2:34:d9:d2:3c:d7:
6f:63:a3:04:b7:f6:12:90:67:bf:84:00:6a:d7:10:
b2:42:a8:36:55:49:03:e2:31:1a:36:6c:18:68:21:
79:d7:ae:30:46:a0:9e:1b:c7:02:15:4f:03:ea:e7:
f8:cd:5b:05:6f:a0:e8:a4:57:45:28:49:1d:92:fd:
4e:e4:7d:c9:f5:cb:6e:60:cf:a6:da:a5:09:b9:e7:
82:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:EE:FB:4A:2B:52:8D:7B:F2:86:0C:71:68:F5:C1:09:50:6B:4F:70
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/eu77SitSjXvyhgxxaPXBCVBrT3A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.43.141.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:2d:96:af:a5:c3:8e:0a:eb:43:d8:c6:dd:2c:e6:8e:25:94:
be:33:74:be:02:ec:2f:83:95:da:a8:ca:88:ae:1a:4f:0a:62:
e1:15:10:24:bd:bf:67:28:19:b7:ff:39:9b:d2:73:18:57:c2:
26:dc:a6:47:da:ab:a6:25:63:c7:98:c0:8e:a3:94:9d:b0:4e:
98:ea:ac:e7:78:d9:1f:04:ee:6d:b8:59:ee:a8:61:45:0d:7b:
07:09:a9:7b:3d:05:03:88:19:3f:ac:90:87:78:a9:f0:e8:92:
1b:7e:4a:4a:0a:01:56:91:77:99:08:b7:a1:0e:06:04:1d:70:
24:8e:b8:08:2e:d2:d3:e7:51:1d:a5:5c:bb:30:63:0f:28:4e:
3f:76:66:a9:97:6b:a1:e3:36:f5:fa:61:65:28:ed:84:1d:7c:
9b:8b:8d:17:0a:1e:e6:da:62:f9:34:83:b7:72:16:d0:01:7e:
47:32:9a:a7:a4:a4:6f:c2:77:39:a4:e0:c1:11:c0:03:2a:00:
67:20:28:dc:64:a6:27:a1:fd:61:77:7a:89:36:cc:7e:cb:e8:
79:d2:6a:ef:da:0d:3e:4c:60:78:c3:56:73:04:09:07:ec:f8:
53:d3:f7:81:d6:54:87:0d:bd:aa:97:3d:e5:49:ec:71:4e:49:
40:4a:f3:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:54:40 2024 by rpki-client on console-fra.rpki-client.org