Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/5f2e31-9ad6-438e-ad7c-e3e0c2dbf067/1/EshnkAfWO8eFLgg4a-j1BF7kiEk.roa
File: EshnkAfWO8eFLgg4a-j1BF7kiEk.roa (raw, json)
Hash identifier: 4rvyoNuwcBd/paTDeEc/fovbp1Ezr9dzm/pZczw0brE=
Subject key identifier: 12:C8:67:90:07:D6:3B:C7:85:2E:08:38:6B:E8:F5:04:5E:E4:88:49
Certificate issuer: /CN=04aaff87f6dc0d3699bc2937a34dc717f94f007e
Certificate serial: 019294A40BD46612776008DB7CF5CDD235E9
Authority key identifier: 04:AA:FF:87:F6:DC:0D:36:99:BC:29:37:A3:4D:C7:17:F9:4F:00:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKr_h_bcDTaZvCk3o03HF_lPAH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/5f2e31-9ad6-438e-ad7c-e3e0c2dbf067/1/EshnkAfWO8eFLgg4a-j1BF7kiEk.roa
Signing time: Wed 16 Oct 2024 09:23:51 +0000
ROA not before: Wed 16 Oct 2024 09:23:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 24771
IP address blocks: 151.88.0.0/16 maxlen: 16
151.88.113.0/24 maxlen: 24
151.92.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/5f2e31-9ad6-438e-ad7c-e3e0c2dbf067/1/BKr_h_bcDTaZvCk3o03HF_lPAH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/5f2e31-9ad6-438e-ad7c-e3e0c2dbf067/1/BKr_h_bcDTaZvCk3o03HF_lPAH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BKr_h_bcDTaZvCk3o03HF_lPAH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:94:a4:0b:d4:66:12:77:60:08:db:7c:f5:cd:d2:35:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04aaff87f6dc0d3699bc2937a34dc717f94f007e
Validity
Not Before: Oct 16 09:23:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=12c8679007d63bc7852e08386be8f5045ee48849
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:0b:5e:f5:42:9a:bb:b1:c8:22:ff:cc:97:70:
c0:9f:a4:58:28:09:f0:38:42:68:c7:89:8b:12:9d:
3d:e9:4f:26:88:c2:f4:89:16:68:96:df:ac:45:9d:
1e:cf:9e:f3:50:c9:b2:31:92:b7:92:b9:6f:f6:41:
d9:58:b7:3e:f5:e7:e2:26:a7:e0:4c:09:27:73:b5:
49:9a:d0:49:7a:25:25:a3:49:e9:e9:84:c0:38:2b:
79:61:04:c1:cc:ea:ca:13:54:7d:b0:db:0f:32:0f:
e3:ee:8b:94:84:82:ad:a4:88:62:1d:d4:8d:95:20:
c7:eb:7e:5d:41:33:46:30:f7:f0:b4:88:f3:42:49:
c3:cf:e0:f0:a5:06:c4:4a:71:b3:72:8d:c0:5c:c1:
4d:fd:1e:86:61:b0:7c:86:9c:e6:fc:99:47:61:26:
61:01:6b:28:2a:48:f5:0b:f0:d1:e3:24:a3:02:c2:
32:54:dc:91:20:ed:2b:5b:2a:e6:b0:58:22:40:ab:
fa:8a:eb:07:4c:8a:d4:7e:2d:05:a3:a2:13:90:8d:
57:88:67:c4:13:39:25:ea:7b:ef:1a:24:7d:49:5c:
1c:bd:07:ef:70:9e:93:8f:27:b1:29:6f:30:35:40:
c7:10:aa:2d:bc:3c:e6:eb:73:6a:48:db:96:95:31:
e8:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:C8:67:90:07:D6:3B:C7:85:2E:08:38:6B:E8:F5:04:5E:E4:88:49
X509v3 Authority Key Identifier:
keyid:04:AA:FF:87:F6:DC:0D:36:99:BC:29:37:A3:4D:C7:17:F9:4F:00:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKr_h_bcDTaZvCk3o03HF_lPAH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/5f2e31-9ad6-438e-ad7c-e3e0c2dbf067/1/EshnkAfWO8eFLgg4a-j1BF7kiEk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/5f2e31-9ad6-438e-ad7c-e3e0c2dbf067/1/BKr_h_bcDTaZvCk3o03HF_lPAH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.88.0.0/16
151.92.0.0/16
Signature Algorithm: sha256WithRSAEncryption
55:b0:7a:1d:1f:09:eb:97:5b:8d:c2:8e:1b:9a:92:4e:8b:3c:
2b:20:3e:77:6e:c0:15:6a:3e:14:7b:a6:df:96:f6:eb:1a:d8:
5c:6b:30:73:05:f2:95:66:c1:e3:d5:2e:e0:6e:b1:bc:e7:f2:
87:22:15:7e:e3:33:22:94:20:d2:ae:1c:af:43:19:a9:65:b2:
c8:69:95:14:f7:62:ec:39:0d:0b:0a:53:9e:d7:33:c9:21:83:
01:a1:88:3c:ae:64:67:c5:e2:64:cd:d2:96:da:b3:d0:19:48:
ca:17:69:05:d8:81:ee:68:bf:4b:f9:68:c2:bd:81:12:59:43:
68:87:ce:f2:a1:48:71:96:4c:55:3b:3f:77:1d:5a:69:9f:b6:
b8:ac:7c:3c:7f:0e:e7:57:8b:ad:ef:eb:03:8a:38:e0:29:74:
76:4c:04:f6:80:be:dc:42:a7:48:15:fe:69:cf:53:a3:ac:ef:
aa:21:38:13:dd:b1:a5:22:7d:ca:2e:e4:20:64:2a:53:57:cf:
92:28:1d:b7:b5:99:d0:42:00:df:65:9c:37:60:05:84:88:bf:
fd:c9:62:52:4f:25:ce:56:00:70:a2:cd:49:c3:a2:a3:37:53:
a3:e0:49:7c:70:6c:ac:54:3e:70:49:69:45:03:50:bf:bb:a2:
68:36:63:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:21:48 2024 by rpki-client on console-ams.rpki-client.org