Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/51d177-9bb4-4dae-983b-2e9b2d88d547/1/E-JHUc5H66LstcTKTXvSBqJ0OfU.roa
File: E-JHUc5H66LstcTKTXvSBqJ0OfU.roa (raw, json)
Hash identifier: oI3di4LCDMJmS4QX+QT1aUYpmhB69KkXbDDz/KtOkjw=
Subject key identifier: 13:E2:47:51:CE:47:EB:A2:EC:B5:C4:CA:4D:7B:D2:06:A2:74:39:F5
Certificate issuer: /CN=7b7de8d13533d1e36b1135a5d2e9a6ff3985cda2
Certificate serial: 018CF93B94C39FA7C70698B04EE5D6995EEC
Authority key identifier: 7B:7D:E8:D1:35:33:D1:E3:6B:11:35:A5:D2:E9:A6:FF:39:85:CD:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e33o0TUz0eNrETWl0umm_zmFzaI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/51d177-9bb4-4dae-983b-2e9b2d88d547/1/E-JHUc5H66LstcTKTXvSBqJ0OfU.roa
Signing time: Thu 11 Jan 2024 15:54:40 +0000
ROA not before: Thu 11 Jan 2024 15:54:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15623
IP address blocks: 45.94.88.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/51d177-9bb4-4dae-983b-2e9b2d88d547/1/e33o0TUz0eNrETWl0umm_zmFzaI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/51d177-9bb4-4dae-983b-2e9b2d88d547/1/e33o0TUz0eNrETWl0umm_zmFzaI.mft
rsync://rpki.ripe.net/repository/DEFAULT/e33o0TUz0eNrETWl0umm_zmFzaI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 09:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:f9:3b:94:c3:9f:a7:c7:06:98:b0:4e:e5:d6:99:5e:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b7de8d13533d1e36b1135a5d2e9a6ff3985cda2
Validity
Not Before: Jan 11 15:54:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=13e24751ce47eba2ecb5c4ca4d7bd206a27439f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:11:3e:88:00:24:08:87:8e:75:0f:48:8b:14:
0f:52:55:3a:83:5e:88:21:2c:32:0a:22:a5:74:d3:
5b:e2:f0:8e:38:a1:8c:7c:86:c1:f2:72:71:77:a7:
1d:88:1c:e5:d3:d6:6f:59:b7:3d:8a:68:c3:55:6e:
75:00:5a:35:d9:64:93:e7:00:a0:82:93:fb:10:0c:
4a:3e:e5:af:39:3d:a3:b3:40:88:37:d8:d0:ac:df:
b8:47:41:d7:ee:e1:bd:26:c5:28:9b:d5:66:1d:ca:
7e:c7:52:6c:1e:c2:15:25:e3:66:4e:af:95:6b:26:
64:59:df:7f:60:4a:10:fc:51:fc:4a:51:8f:66:94:
99:af:7d:8c:95:d7:80:5c:83:56:b5:62:17:9e:53:
0d:be:db:c2:d3:74:ce:55:b7:d9:d6:c0:20:bc:b2:
a8:93:a1:43:50:ad:9e:ba:e0:aa:ce:b3:fb:3f:7e:
55:fb:5d:2b:59:5a:61:cf:99:56:12:8d:a3:d7:a7:
14:62:5f:eb:e3:50:8e:3a:95:70:5e:a8:81:ca:94:
3b:4d:55:db:b8:48:1e:3b:1a:97:52:2c:8b:ad:51:
64:fe:e9:af:a3:9f:ee:11:12:c3:e4:f4:3f:2d:77:
89:de:d9:75:9c:67:6f:f1:40:d1:e6:6e:c0:25:c4:
81:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:E2:47:51:CE:47:EB:A2:EC:B5:C4:CA:4D:7B:D2:06:A2:74:39:F5
X509v3 Authority Key Identifier:
keyid:7B:7D:E8:D1:35:33:D1:E3:6B:11:35:A5:D2:E9:A6:FF:39:85:CD:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e33o0TUz0eNrETWl0umm_zmFzaI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/51d177-9bb4-4dae-983b-2e9b2d88d547/1/E-JHUc5H66LstcTKTXvSBqJ0OfU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/51d177-9bb4-4dae-983b-2e9b2d88d547/1/e33o0TUz0eNrETWl0umm_zmFzaI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.88.0/22
Signature Algorithm: sha256WithRSAEncryption
9e:b6:26:f2:57:56:ba:7a:7f:e5:48:ba:53:72:bd:3c:79:a5:
dd:4e:78:ed:7f:4c:57:75:01:f1:a1:4d:68:84:66:d5:c9:41:
63:62:8f:44:cd:8b:ad:a5:5f:8c:62:63:bc:26:c7:3b:5b:70:
ef:94:66:ff:5a:5f:1f:28:28:63:4e:3b:59:7b:a1:cf:05:80:
0d:da:7b:57:1f:b7:50:23:6f:47:6f:7c:2a:77:d8:33:e2:d4:
09:05:b0:d3:b3:08:93:da:bb:e6:1d:19:00:e0:07:20:38:c7:
78:a9:a3:e8:ee:db:e9:5e:71:22:d7:6a:89:a9:df:15:79:63:
fa:df:03:55:d3:5a:40:c5:a7:73:86:62:99:91:65:9a:4d:3a:
bd:d2:8e:1a:69:5b:d6:07:e9:4f:34:f0:f7:6c:34:90:16:55:
71:95:c4:9a:64:57:2d:80:ee:ec:3d:09:c3:dc:3c:34:ef:13:
8b:a1:60:b3:20:7a:2a:2e:f5:3e:b9:07:83:33:c9:eb:ca:ca:
03:ce:d0:c6:bf:3e:36:c3:18:88:31:d3:85:14:a2:2e:c4:45:
57:26:09:db:b7:61:ee:bf:b1:b8:8f:cb:87:58:20:2e:01:5b:
0b:42:0b:c1:7c:d0:68:d0:e6:e4:2e:56:72:d3:25:be:91:fa:
5a:9c:72:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 14:08:02 2024 by rpki-client on console-ams.rpki-client.org