Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/eYThNfAl8B6zjhanpQ5L2ZAV-A8.roa
File: eYThNfAl8B6zjhanpQ5L2ZAV-A8.roa (raw, json)
Hash identifier: aiDmKF5kCdsY+X9o5N+sK8GGeqTIxXPC7+4bDkDJMkQ=
Subject key identifier: 79:84:E1:35:F0:25:F0:1E:B3:8E:16:A7:A5:0E:4B:D9:90:15:F8:0F
Certificate issuer: /CN=ed4cd386ab33787fcd4002622b83876406fff190
Certificate serial: 018CC802EED8A764CD630B629F9BF61AEBA5
Authority key identifier: ED:4C:D3:86:AB:33:78:7F:CD:40:02:62:2B:83:87:64:06:FF:F1:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7UzThqszeH_NQAJiK4OHZAb_8ZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/eYThNfAl8B6zjhanpQ5L2ZAV-A8.roa
Signing time: Tue 02 Jan 2024 02:31:24 +0000
ROA not before: Tue 02 Jan 2024 02:31:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35048
IP address blocks: 45.89.16.0/22 maxlen: 22
2a0a:5687::/32 maxlen: 32
2a0a:5680::/32 maxlen: 32
2a0a:5686::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/7UzThqszeH_NQAJiK4OHZAb_8ZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/7UzThqszeH_NQAJiK4OHZAb_8ZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7UzThqszeH_NQAJiK4OHZAb_8ZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:ee:d8:a7:64:cd:63:0b:62:9f:9b:f6:1a:eb:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed4cd386ab33787fcd4002622b83876406fff190
Validity
Not Before: Jan 2 02:31:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7984e135f025f01eb38e16a7a50e4bd99015f80f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:31:4a:8c:d5:9d:ee:76:9a:be:07:7d:14:4c:
9f:83:04:2b:a3:96:e3:c7:e1:43:0c:95:1f:2a:94:
cf:cb:e6:01:79:c3:95:fb:2c:66:ff:1e:5e:1e:4b:
5e:e0:0d:59:b8:4e:5c:76:46:5d:fb:cd:bf:19:5c:
af:3a:76:d7:0b:2f:63:21:6b:36:7e:2b:0a:1b:a1:
4c:93:b6:b4:e8:82:7a:c6:5b:fc:f8:3e:ac:78:80:
26:b1:e6:3b:6d:2c:d2:67:1e:57:84:0f:03:f1:f0:
0e:59:07:2b:bc:72:3b:18:83:91:20:0b:ee:2d:e9:
a4:e3:ac:c0:a8:00:a8:d9:d7:33:69:de:67:ff:39:
35:61:00:ef:e6:1e:ea:5a:78:82:6c:74:65:e7:27:
c0:91:a7:d3:d1:db:26:ea:b8:ec:c0:4c:88:8d:d1:
84:09:2f:3d:ce:cc:66:bf:0b:70:62:d4:ff:57:cf:
76:68:1a:8a:68:15:94:1a:a6:93:e7:26:4b:d4:7b:
14:36:d7:f7:ea:9b:be:84:b3:6f:cc:e8:4f:68:06:
b5:4d:8b:8e:80:8a:d2:51:1a:35:55:9f:f0:a0:b7:
1c:90:29:ee:83:b4:20:cc:2a:3d:c5:18:69:0b:24:
db:a6:02:bc:49:a7:1f:85:b3:3f:7d:52:73:04:69:
f6:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:84:E1:35:F0:25:F0:1E:B3:8E:16:A7:A5:0E:4B:D9:90:15:F8:0F
X509v3 Authority Key Identifier:
keyid:ED:4C:D3:86:AB:33:78:7F:CD:40:02:62:2B:83:87:64:06:FF:F1:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7UzThqszeH_NQAJiK4OHZAb_8ZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/eYThNfAl8B6zjhanpQ5L2ZAV-A8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/7UzThqszeH_NQAJiK4OHZAb_8ZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.16.0/22
IPv6:
2a0a:5680::/32
2a0a:5686::/31
Signature Algorithm: sha256WithRSAEncryption
59:04:4c:76:f8:9c:52:cb:24:80:d7:ce:82:bc:35:52:dd:47:
4a:3b:7a:5c:86:a2:7e:d6:07:4d:2c:b2:fb:0c:68:80:98:8c:
a3:db:4d:63:57:f3:f8:6d:90:30:f9:6e:de:67:59:16:8e:c9:
31:2f:24:68:66:d4:55:01:b8:30:3e:a0:13:37:84:28:a0:4c:
4e:79:17:1c:19:c2:45:2b:8f:89:9d:f2:b9:a1:3a:26:df:2d:
fd:f3:d4:d4:77:9a:11:b4:d6:2f:49:fa:38:70:43:c1:7e:93:
39:45:86:cd:6c:a7:92:02:3c:0e:f8:2c:8d:26:b4:9a:f4:74:
90:32:cb:d6:e9:17:02:a4:1f:f3:0d:61:e6:0c:f8:bf:0e:54:
55:66:c8:aa:2b:20:39:7f:f1:bf:d7:97:5e:48:4a:40:53:e7:
8f:19:d7:d2:ac:4c:23:a2:1c:0a:10:a2:ea:c2:ba:4e:27:4a:
5b:69:ae:89:3d:9a:4b:e6:59:93:45:92:36:2e:7c:03:41:c8:
93:d5:eb:15:14:33:83:35:79:fc:39:0c:dd:3c:f4:66:7a:3c:
aa:59:35:ea:37:77:2f:5b:36:ac:4a:12:70:1a:ad:48:3e:2b:
6b:b2:78:27:0c:40:af:c8:eb:41:b7:8c:e8:31:25:34:da:e6:
c3:7c:e9:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 20:25:27 2024 by rpki-client on console-ams.rpki-client.org