Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/070630-5234-49c4-84fe-15bda6b867cb/1/EAcaatg2s9z3L_Uioc1Ugx5oSi8.roa
File: EAcaatg2s9z3L_Uioc1Ugx5oSi8.roa (raw, json)
Hash identifier: 72ljhRhluE8EZulGxHAjOYNOLbp40s4xIiARGQ/3dC0=
Subject key identifier: 10:07:1A:6A:D8:36:B3:DC:F7:2F:F5:22:A1:CD:54:83:1E:68:4A:2F
Certificate issuer: /CN=53b1a8ebc3ecf7f5db7f6cacd00e920af85ae8b4
Certificate serial: 018CC64B8C1B1740323A334EAA5C09AD61E3
Authority key identifier: 53:B1:A8:EB:C3:EC:F7:F5:DB:7F:6C:AC:D0:0E:92:0A:F8:5A:E8:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/070630-5234-49c4-84fe-15bda6b867cb/1/EAcaatg2s9z3L_Uioc1Ugx5oSi8.roa
Signing time: Mon 01 Jan 2024 18:31:28 +0000
ROA not before: Mon 01 Jan 2024 18:31:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50575
IP address blocks: 45.147.220.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/070630-5234-49c4-84fe-15bda6b867cb/1/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/070630-5234-49c4-84fe-15bda6b867cb/1/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:8c:1b:17:40:32:3a:33:4e:aa:5c:09:ad:61:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53b1a8ebc3ecf7f5db7f6cacd00e920af85ae8b4
Validity
Not Before: Jan 1 18:31:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=10071a6ad836b3dcf72ff522a1cd54831e684a2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:b3:83:5e:5f:40:b0:b6:d8:41:2c:bf:0e:33:
2b:40:52:11:63:5d:4a:ea:61:10:a0:ee:c9:ef:15:
81:82:3c:7b:18:23:2b:70:70:54:e3:b1:88:11:60:
f3:4f:e5:0c:3e:b1:e2:c1:b0:d3:53:a2:ef:c5:95:
00:30:3e:75:ec:ee:fa:f1:a3:59:ff:17:1a:14:81:
e8:cb:78:eb:d5:2a:bc:0d:e2:d0:ed:a6:eb:00:e7:
ee:16:14:67:1d:7e:41:f7:52:12:7e:32:3b:76:17:
5f:a1:44:48:7e:f2:2b:2d:54:c4:7a:5f:7b:53:31:
77:68:78:63:a3:18:fc:a6:42:68:82:7d:c8:b8:63:
08:66:70:3a:78:54:28:6e:41:f7:c4:91:d5:ed:83:
42:95:c8:9d:63:d4:1a:9a:fc:f3:3a:bb:67:6f:e8:
bd:54:1f:e0:1f:e0:d3:63:2c:e2:15:99:7a:a8:df:
03:fe:01:9d:61:bc:75:bb:4c:e0:15:00:b5:7f:2a:
d1:3e:9a:c6:9b:ab:16:09:2e:ec:1d:89:51:89:b5:
31:ac:c0:14:28:89:71:24:1c:a9:59:8d:66:57:a5:
f3:a2:01:92:40:89:34:88:08:05:98:1c:4f:50:65:
ed:b7:6d:f9:ec:f4:1f:b8:d3:14:d3:f9:ca:9c:d1:
89:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:07:1A:6A:D8:36:B3:DC:F7:2F:F5:22:A1:CD:54:83:1E:68:4A:2F
X509v3 Authority Key Identifier:
keyid:53:B1:A8:EB:C3:EC:F7:F5:DB:7F:6C:AC:D0:0E:92:0A:F8:5A:E8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/070630-5234-49c4-84fe-15bda6b867cb/1/EAcaatg2s9z3L_Uioc1Ugx5oSi8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/070630-5234-49c4-84fe-15bda6b867cb/1/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.147.220.0/22
Signature Algorithm: sha256WithRSAEncryption
52:1d:b1:25:bc:f3:fa:36:71:92:ac:c7:c3:2a:1d:1d:a8:b6:
e4:45:ca:5a:5b:94:58:bb:27:8d:8e:a1:f4:07:e8:fa:1d:08:
19:e7:2c:0d:e5:cc:7f:66:7f:7e:4a:a0:f5:44:78:47:12:ab:
d5:51:09:20:a3:0f:78:d1:9f:6d:ca:50:3d:74:db:be:04:6c:
1e:7b:07:2d:3a:6c:cd:68:44:1f:ea:c4:f1:18:76:c3:46:f3:
f2:4d:42:b2:fc:70:55:bc:35:97:a6:1c:3e:54:5b:52:7a:d5:
7e:13:35:21:e3:f4:7d:79:a8:98:2f:08:81:bc:ae:19:ab:6c:
a3:db:02:26:f2:f3:55:06:fe:13:90:32:a2:92:ce:05:a6:4b:
b1:2d:89:c7:33:71:48:ca:c2:17:38:f1:38:3e:7d:76:0a:cf:
d4:b5:a2:33:80:56:33:a6:07:42:e2:ed:da:8d:7a:e2:99:cd:
fd:4e:1d:b9:4b:a7:bd:e8:9e:54:50:3d:62:93:cc:8d:3a:d8:
a2:5c:76:23:07:be:f5:24:e9:21:10:e1:15:be:ad:f4:b2:10:
c0:23:bd:84:4e:b2:d1:a2:af:fb:80:48:77:17:ef:c8:8d:a6:
d3:ce:2c:b0:0c:73:c7:60:a0:03:4c:de:b2:e4:ef:aa:c5:99:
2e:be:6b:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 04:45:55 2024 by rpki-client on console-ams.rpki-client.org