Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/Ieu5arN-DX6oc7zK4zHs8K8bemA.roa
File: Ieu5arN-DX6oc7zK4zHs8K8bemA.roa (raw, json)
Hash identifier: 7zfTp+2QjrxI/CJoSLEvdtLu4hjl4t3tRcMH/lPeWH4=
Subject key identifier: 21:EB:B9:6A:B3:7E:0D:7E:A8:73:BC:CA:E3:31:EC:F0:AF:1B:7A:60
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 0192E85BC6F00CB3516CDF85C5C48A8EDABC
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/Ieu5arN-DX6oc7zK4zHs8K8bemA.roa
Signing time: Fri 01 Nov 2024 15:33:01 +0000
ROA not before: Fri 01 Nov 2024 15:33:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31715
IP address blocks: 77.111.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:e8:5b:c6:f0:0c:b3:51:6c:df:85:c5:c4:8a:8e:da:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Nov 1 15:33:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=21ebb96ab37e0d7ea873bccae331ecf0af1b7a60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:09:b5:80:4c:23:71:61:da:62:c3:21:10:8e:
f3:b8:d9:60:c6:d2:f4:e8:00:4c:c9:1d:79:13:9a:
79:23:3e:ad:e1:ba:6e:e7:e4:a8:9a:2f:31:86:2e:
2e:96:04:03:fb:b3:a9:06:c2:d2:d9:58:95:5f:0a:
d6:27:0e:48:29:76:0f:9d:6e:3d:cc:b5:24:66:16:
6c:dd:a1:3d:21:9b:b3:4a:d2:62:e7:aa:9a:be:a6:
a5:f9:72:9c:69:f8:4b:35:e8:74:09:91:f1:aa:8b:
36:ac:89:57:27:73:be:ab:db:d7:d2:9a:65:f5:a0:
b2:e3:95:11:22:29:01:d3:88:56:09:59:e5:cb:74:
14:ab:6f:74:04:51:9f:af:2f:eb:92:6e:36:d3:8d:
9e:b0:f1:d1:2f:b8:56:5b:6d:75:94:9f:0c:57:50:
8d:b0:c0:86:02:fa:cb:26:66:ff:21:40:f3:8e:ab:
f7:35:62:0d:22:79:74:b7:47:41:ed:f9:ab:8b:55:
e7:14:35:76:3b:8e:28:ea:6e:61:43:f9:db:3d:3d:
f2:5d:c4:71:57:b2:6f:8a:3f:4a:f9:e2:85:c8:35:
43:82:4a:1f:21:a4:78:ef:fc:c9:2e:60:b8:f2:55:
93:7d:d7:6d:41:38:6a:93:20:93:f6:93:33:f8:e8:
55:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:EB:B9:6A:B3:7E:0D:7E:A8:73:BC:CA:E3:31:EC:F0:AF:1B:7A:60
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/Ieu5arN-DX6oc7zK4zHs8K8bemA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.111.109.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:81:e0:9b:f7:f3:fc:6f:9d:c8:1d:3c:67:14:0f:27:3f:ee:
d9:b9:a3:f2:2d:e6:c9:82:14:51:32:b6:43:7f:68:e1:61:41:
03:d6:58:d2:fa:e1:3f:f3:7a:ef:70:b5:d1:88:49:a2:8c:72:
81:c4:30:8c:7d:ad:6c:fe:f2:3a:4b:ac:87:29:d7:40:2e:4d:
74:4a:39:d4:87:3e:db:c6:05:4a:fd:d3:4d:12:2a:cf:c9:d9:
27:b8:47:8a:af:64:32:e6:75:d5:a7:b7:f6:85:13:dc:b3:33:
f5:c4:64:04:31:1c:60:39:e4:8d:f6:16:1b:ca:a5:f7:6f:8a:
83:d3:53:ff:54:a7:73:6d:33:3c:67:a3:60:82:32:5c:54:10:
53:27:44:38:ae:4e:df:04:d5:a3:24:f5:21:52:c0:e3:55:25:
17:f4:10:67:11:10:89:ad:fd:9f:74:b1:47:4c:a8:9f:72:77:
45:20:0b:1f:a6:ef:a4:da:e7:f3:0f:95:fe:30:00:0a:05:27:
94:45:1e:a6:8d:c2:c4:73:11:14:9a:50:c2:02:4a:b6:ae:0b:
1b:fb:91:ce:89:7d:59:73:3e:2a:3c:f9:02:9e:04:4f:83:74:
21:c8:4e:a3:41:6c:7c:9f:4a:d0:5f:b4:b2:06:5d:52:ed:9a:
05:12:eb:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:41:11 2024 by rpki-client on console-ams.rpki-client.org