Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/69ce2b-aa36-4bab-b65e-f9e6539bbe6b/1/E0Q84Ar7pNKX2itgmMU8xB2-i0k.roa
File: E0Q84Ar7pNKX2itgmMU8xB2-i0k.roa (raw, json)
Hash identifier: EGdHt75SP9cjI/vwvzVm1/hKTA8LZnu4uGjLAzEK6JE=
Subject key identifier: 13:44:3C:E0:0A:FB:A4:D2:97:DA:2B:60:98:C5:3C:C4:1D:BE:8B:49
Certificate issuer: /CN=78c236580cc2ee193dbdcc3126df4170cc117cd2
Certificate serial: 018CC50008EFA4DD3A879188A6B380F88031
Authority key identifier: 78:C2:36:58:0C:C2:EE:19:3D:BD:CC:31:26:DF:41:70:CC:11:7C:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eMI2WAzC7hk9vcwxJt9BcMwRfNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/69ce2b-aa36-4bab-b65e-f9e6539bbe6b/1/E0Q84Ar7pNKX2itgmMU8xB2-i0k.roa
Signing time: Mon 01 Jan 2024 12:29:22 +0000
ROA not before: Mon 01 Jan 2024 12:29:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60138
IP address blocks: 185.56.93.0/24 maxlen: 24
185.56.94.0/24 maxlen: 24
185.56.95.0/24 maxlen: 24
185.56.92.0/24 maxlen: 24
2a04:da40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/69ce2b-aa36-4bab-b65e-f9e6539bbe6b/1/eMI2WAzC7hk9vcwxJt9BcMwRfNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/69ce2b-aa36-4bab-b65e-f9e6539bbe6b/1/eMI2WAzC7hk9vcwxJt9BcMwRfNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/eMI2WAzC7hk9vcwxJt9BcMwRfNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 12:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:08:ef:a4:dd:3a:87:91:88:a6:b3:80:f8:80:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78c236580cc2ee193dbdcc3126df4170cc117cd2
Validity
Not Before: Jan 1 12:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=13443ce00afba4d297da2b6098c53cc41dbe8b49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:a7:5f:39:35:aa:f6:9c:c0:78:4e:0d:f7:62:
82:a7:8f:74:2a:a6:bb:41:d9:8c:86:da:c6:a7:ce:
ba:65:86:e9:70:d5:29:76:94:04:14:26:ad:7e:e6:
8a:f0:8d:17:1b:8a:cd:2b:8f:86:12:f3:59:2a:64:
de:56:44:58:de:e9:ba:5f:2b:0a:a9:b7:a4:fa:3c:
46:ca:54:5e:47:0b:d3:8d:dd:65:59:18:a8:68:43:
49:76:64:dc:a6:b0:a5:5d:d8:c4:27:d2:3c:d4:ac:
d7:f1:9a:12:d6:8c:4c:05:36:8f:29:4f:48:3f:da:
f3:22:5f:25:99:ae:fe:0d:cd:f5:5b:0e:97:50:24:
56:68:ee:9f:8f:dd:9d:bb:b7:4d:86:77:1c:3e:7d:
9b:15:8e:f9:24:dc:5b:79:dc:97:01:54:5a:6a:e5:
a2:f4:7d:ac:2a:3b:5d:85:ba:b9:8d:19:93:7c:ee:
fe:c3:79:6e:8c:9a:4e:e2:5c:fe:f2:19:80:9d:d3:
8a:ec:b6:40:68:3e:0a:40:67:2c:e9:59:ef:78:55:
5f:2a:ca:bf:96:79:9b:c9:5c:a9:47:8a:d6:0b:64:
b7:04:42:cc:cf:e7:86:42:d9:e8:c1:a0:da:65:a0:
12:83:4a:1d:ac:28:35:ba:08:87:bb:36:32:67:bf:
2a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:44:3C:E0:0A:FB:A4:D2:97:DA:2B:60:98:C5:3C:C4:1D:BE:8B:49
X509v3 Authority Key Identifier:
keyid:78:C2:36:58:0C:C2:EE:19:3D:BD:CC:31:26:DF:41:70:CC:11:7C:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eMI2WAzC7hk9vcwxJt9BcMwRfNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/69ce2b-aa36-4bab-b65e-f9e6539bbe6b/1/E0Q84Ar7pNKX2itgmMU8xB2-i0k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/69ce2b-aa36-4bab-b65e-f9e6539bbe6b/1/eMI2WAzC7hk9vcwxJt9BcMwRfNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.56.92.0/22
IPv6:
2a04:da40::/29
Signature Algorithm: sha256WithRSAEncryption
90:da:bc:66:99:56:62:97:ba:86:b7:d4:16:65:21:bc:d1:da:
2c:b2:6f:b7:1e:ad:9e:65:82:48:63:0b:f9:9d:b6:8b:c0:a2:
0b:1c:d2:8a:b4:0f:30:fa:59:ea:54:0a:af:8a:23:da:d7:a6:
35:48:89:57:58:cb:05:aa:d7:c5:24:c3:16:2f:4e:80:58:d0:
e9:81:84:f2:8e:9c:45:84:39:f5:68:64:f9:f5:7c:ee:79:da:
9f:52:82:bf:40:82:c2:4f:b7:c9:76:d7:4a:e2:70:a2:a0:7a:
01:73:bd:b6:e0:8e:35:44:38:0e:62:26:0c:a8:56:23:c7:77:
aa:2e:86:67:3b:e5:ca:4d:c0:f0:80:2a:3a:e5:b8:7e:9e:a4:
7d:74:77:95:b7:d8:72:ae:67:7b:f2:32:fb:9a:bc:9a:f7:e2:
2b:42:20:2c:25:6c:2b:7e:ad:73:17:e3:a4:32:12:57:36:08:
ad:69:5c:b4:78:63:11:1c:78:7f:65:3f:91:fe:9f:9c:72:bd:
1e:48:16:11:9d:88:43:a5:02:a3:94:2f:73:a2:bb:05:0c:c9:
07:b6:71:50:95:28:c6:e6:6f:18:bb:0a:11:64:83:3f:de:d0:
5a:ff:97:bc:cd:85:48:96:84:51:4f:0f:8b:35:b7:c8:54:5f:
31:d2:c4:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 17:40:42 2024 by rpki-client on console-ams.rpki-client.org