Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/jEeiCwltrxPpbVEHb94obdjMcrk.roa
File: jEeiCwltrxPpbVEHb94obdjMcrk.roa (raw, json)
Hash identifier: fUJj9nT0ugSKDwluLx5uy1Eqdk24fEqOm2lzvTrvoG8=
Subject key identifier: 8C:47:A2:0B:09:6D:AF:13:E9:6D:51:07:6F:DE:28:6D:D8:CC:72:B9
Certificate issuer: /CN=ef57c2d9d93ac7cf9b2f17caa7859b6985b39b9d
Certificate serial: 018CC348E44B12AAE10F42DFA5B754AE56C1
Authority key identifier: EF:57:C2:D9:D9:3A:C7:CF:9B:2F:17:CA:A7:85:9B:69:85:B3:9B:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/jEeiCwltrxPpbVEHb94obdjMcrk.roa
Signing time: Mon 01 Jan 2024 04:29:43 +0000
ROA not before: Mon 01 Jan 2024 04:29:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209588
IP address blocks: 92.51.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.mft
rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:e4:4b:12:aa:e1:0f:42:df:a5:b7:54:ae:56:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef57c2d9d93ac7cf9b2f17caa7859b6985b39b9d
Validity
Not Before: Jan 1 04:29:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8c47a20b096daf13e96d51076fde286dd8cc72b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:96:b8:bb:e1:cf:af:ec:75:0d:d5:4f:7f:8f:
d0:f9:77:4b:41:3b:51:ee:b8:53:6e:83:1e:46:f5:
8b:5e:ea:ae:b2:30:bf:97:2b:db:ef:d7:33:04:42:
dc:4a:52:c4:1a:dd:42:25:0d:0f:29:5d:d9:7d:2a:
b7:73:8b:65:37:1d:59:05:d9:d3:d5:9a:d9:e9:7a:
d4:35:7d:0c:53:be:d1:b7:fc:33:96:ce:f2:34:ef:
65:30:5b:7a:65:5f:8f:6f:b6:15:e4:8e:d8:62:06:
de:90:e6:26:98:a8:dd:8f:0d:b8:b9:eb:94:f7:4f:
be:a5:72:ea:92:a1:ba:39:3b:f3:25:e0:b3:59:9b:
f2:1d:12:ca:12:18:ba:c8:e5:31:83:c3:a7:e7:bf:
e5:dc:4c:8f:3b:f8:a3:be:dd:93:cb:70:0f:bc:27:
aa:9f:34:f2:b6:c3:05:b5:1b:6f:86:bc:c5:fa:db:
fe:1d:d2:8f:7e:6f:8c:55:22:34:6f:0f:31:b4:0e:
38:57:aa:53:6e:94:bd:33:4a:87:ff:c5:4f:96:0f:
2b:a1:28:14:4e:a9:16:7d:ec:1a:a1:cc:ae:5b:dd:
3e:25:c1:93:20:65:8d:8c:22:64:34:03:7f:34:a4:
c1:a0:50:16:aa:eb:5e:19:9d:50:1a:e5:e9:96:0b:
9e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:47:A2:0B:09:6D:AF:13:E9:6D:51:07:6F:DE:28:6D:D8:CC:72:B9
X509v3 Authority Key Identifier:
keyid:EF:57:C2:D9:D9:3A:C7:CF:9B:2F:17:CA:A7:85:9B:69:85:B3:9B:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/jEeiCwltrxPpbVEHb94obdjMcrk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.51.2.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:6b:66:b1:d5:d3:96:a9:e7:7e:29:97:84:db:ed:3a:99:02:
8c:48:59:75:bf:79:28:9a:0f:8f:23:a1:eb:91:6b:30:20:55:
46:3d:a3:eb:cb:f3:7d:bf:cd:38:5e:aa:ed:dc:0f:1e:8a:5d:
82:4e:94:44:04:d0:1a:c1:31:ae:4e:4d:ae:b1:f1:72:b9:f8:
cc:b3:ac:a5:02:1d:a8:8b:d0:54:22:82:03:d2:bd:ca:19:e5:
0c:f2:55:26:43:46:53:af:21:b3:75:47:62:64:33:3c:e4:5c:
24:ef:d2:e1:66:7b:a2:d5:52:bf:74:32:00:3c:a6:13:81:6a:
13:b0:55:3c:59:9b:7a:83:1a:b3:a8:43:54:ba:2d:ae:c4:28:
62:69:6f:42:b1:5d:10:10:ab:68:a9:f0:a5:60:81:0a:2e:08:
0a:cd:91:04:23:b9:d0:aa:39:dd:e9:72:08:89:95:96:8b:a7:
f8:80:39:ba:91:35:2b:43:45:35:00:cf:7e:9a:c4:d9:20:fd:
4a:19:c0:1e:f6:a4:17:2a:48:5f:14:d8:55:2c:66:58:01:3c:
a0:4b:5c:27:6b:cd:ec:a8:a2:84:ff:c3:93:82:c1:53:e1:cb:
d1:be:22:30:63:d7:e4:34:44:db:f1:2b:ea:e5:ed:21:ee:6b:
de:76:07:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:59:13 2024 by rpki-client on console-ams.rpki-client.org