Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ee4c8a-1eb2-4518-8b5b-8616a310e803/1/IXDRDCqK9Rxn4oTrRq54TUphbB4.roa
File: IXDRDCqK9Rxn4oTrRq54TUphbB4.roa (raw, json)
Hash identifier: AFKhYUUSrXx5UEjaTN/L9UZAOAWWzfTdhtmSVoZANJo=
Subject key identifier: 21:70:D1:0C:2A:8A:F5:1C:67:E2:84:EB:46:AE:78:4D:4A:61:6C:1E
Certificate issuer: /CN=2e30b4f5222a4685c54cd25c4cb8d6f93233ac7b
Certificate serial: 0191B3128C3B858AA198A289F613ABFDDEB8
Authority key identifier: 2E:30:B4:F5:22:2A:46:85:C5:4C:D2:5C:4C:B8:D6:F9:32:33:AC:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LjC09SIqRoXFTNJcTLjW-TIzrHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/ee4c8a-1eb2-4518-8b5b-8616a310e803/1/IXDRDCqK9Rxn4oTrRq54TUphbB4.roa
Signing time: Mon 02 Sep 2024 14:10:22 +0000
ROA not before: Mon 02 Sep 2024 14:10:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206476
IP address blocks: 45.87.64.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/ee4c8a-1eb2-4518-8b5b-8616a310e803/1/LjC09SIqRoXFTNJcTLjW-TIzrHs.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/ee4c8a-1eb2-4518-8b5b-8616a310e803/1/LjC09SIqRoXFTNJcTLjW-TIzrHs.mft
rsync://rpki.ripe.net/repository/DEFAULT/LjC09SIqRoXFTNJcTLjW-TIzrHs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:b3:12:8c:3b:85:8a:a1:98:a2:89:f6:13:ab:fd:de:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e30b4f5222a4685c54cd25c4cb8d6f93233ac7b
Validity
Not Before: Sep 2 14:10:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2170d10c2a8af51c67e284eb46ae784d4a616c1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:85:ff:5d:7b:1e:fd:5a:22:b5:a0:24:48:5a:
35:76:93:e1:4a:dd:b0:cf:16:73:8c:96:b2:32:a3:
fa:18:ca:2a:10:f6:d9:10:5e:40:90:90:ec:fc:31:
03:35:ec:c5:6f:56:c9:23:35:11:db:14:74:39:2c:
fd:d9:19:3b:ef:ca:e3:a5:da:82:4b:69:e7:73:fe:
11:d8:1c:09:29:75:e0:6f:75:ab:df:7a:84:da:a8:
60:dd:27:b3:36:cf:9b:76:8c:53:40:8d:a6:a4:1c:
67:e1:41:a5:3e:53:a6:d5:86:fb:9d:64:4d:66:91:
1e:0d:3f:7d:69:6e:3d:b9:f4:ce:be:83:67:f9:f3:
50:6e:5d:5b:27:77:1d:d7:73:99:87:f4:87:ec:8e:
02:fb:61:2e:07:f8:c9:77:e7:a8:67:bc:f5:54:52:
ca:91:3f:f2:a9:35:7c:b4:21:69:0b:e7:96:bf:71:
7b:5c:ad:8c:7e:fa:0e:ad:2e:cd:cf:6a:b6:61:19:
d5:eb:38:ac:7a:2f:c7:28:74:56:00:81:63:28:8f:
0c:a1:fc:7e:f1:55:04:37:e2:bd:94:88:ad:c0:3a:
5c:c5:67:95:5a:51:82:74:36:34:2d:06:55:e7:18:
65:86:a8:7b:86:18:72:93:1e:93:dd:20:c5:99:c5:
0d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:70:D1:0C:2A:8A:F5:1C:67:E2:84:EB:46:AE:78:4D:4A:61:6C:1E
X509v3 Authority Key Identifier:
keyid:2E:30:B4:F5:22:2A:46:85:C5:4C:D2:5C:4C:B8:D6:F9:32:33:AC:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LjC09SIqRoXFTNJcTLjW-TIzrHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ee4c8a-1eb2-4518-8b5b-8616a310e803/1/IXDRDCqK9Rxn4oTrRq54TUphbB4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ee4c8a-1eb2-4518-8b5b-8616a310e803/1/LjC09SIqRoXFTNJcTLjW-TIzrHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.64.0/22
Signature Algorithm: sha256WithRSAEncryption
72:39:98:c4:87:3a:e1:81:15:bd:b0:6f:ef:a9:6d:c7:50:0b:
2a:1d:2c:ff:d6:53:c7:ae:d4:33:2b:31:d4:7d:11:aa:28:56:
56:b7:6a:90:f3:7f:f7:e3:27:a7:b0:27:61:8b:f3:a4:1f:c1:
a7:a3:46:29:d7:4c:48:2d:a8:72:46:ad:ed:00:0b:60:b7:3a:
96:2a:5e:0e:ed:39:e9:71:3b:b3:53:c5:97:55:d5:d6:86:9b:
6f:29:b5:fd:43:c7:b6:e5:49:84:d5:30:0d:57:b5:91:81:c9:
89:52:5e:83:b7:3e:57:1d:ef:7a:93:73:64:18:c2:39:b9:c6:
23:68:82:73:03:fa:fb:68:a8:96:e1:e4:4a:e8:78:d5:98:04:
33:8b:1d:a4:c3:12:b2:1a:0f:dc:5d:75:cb:18:59:ee:0d:ab:
7d:41:e8:0f:de:0c:79:af:88:3c:39:a3:4e:f8:b5:34:95:30:
07:39:a3:c5:1a:4f:4c:98:8d:49:63:87:dc:97:dc:98:2c:eb:
6d:9c:68:39:1f:f5:a1:6a:3a:99:03:d6:1f:29:e2:a2:ac:f5:
45:6b:bf:1a:d9:a9:49:e6:c1:9c:2e:b5:3e:c2:a1:17:b8:ec:
8c:c0:8c:f6:fc:ac:e9:36:9a:52:3c:7f:1b:f1:e5:83:83:91:
95:7a:a6:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:26:09 2024 by rpki-client on console-ams.rpki-client.org