Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/EC6FlauJ21pVE-3x6c26jh5mPyc.roa
File: EC6FlauJ21pVE-3x6c26jh5mPyc.roa (raw, json)
Hash identifier: vjm3A6ZfdSGzDE4tXzkxteYOy68AkDRKgPdi49tgSTI=
Subject key identifier: 10:2E:85:95:AB:89:DB:5A:55:13:ED:F1:E9:CD:BA:8E:1E:66:3F:27
Certificate issuer: /CN=dc899c28664ee8194a64048e46c60c6e5f190c53
Certificate serial: 018CC8017C0452B81C7F8DBC13CC4BB3FE3C
Authority key identifier: DC:89:9C:28:66:4E:E8:19:4A:64:04:8E:46:C6:0C:6E:5F:19:0C:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ImcKGZO6BlKZASORsYMbl8ZDFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/EC6FlauJ21pVE-3x6c26jh5mPyc.roa
Signing time: Tue 02 Jan 2024 02:29:49 +0000
ROA not before: Tue 02 Jan 2024 02:29:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 13173
IP address blocks: 213.167.93.0/24 maxlen: 24
213.167.94.0/23 maxlen: 23
185.70.156.0/22 maxlen: 24
213.167.64.0/19 maxlen: 24
213.167.64.0/24 maxlen: 24
213.167.69.0/24 maxlen: 24
213.167.67.0/24 maxlen: 24
213.167.77.0/24 maxlen: 24
213.167.72.0/24 maxlen: 24
213.167.78.0/24 maxlen: 24
213.167.74.0/23 maxlen: 23
213.167.80.0/23 maxlen: 23
213.167.82.0/24 maxlen: 24
213.167.82.0/23 maxlen: 23
213.167.91.0/24 maxlen: 24
2a00:f180::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ImcKGZO6BlKZASORsYMbl8ZDFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Jun 2024 04:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:7c:04:52:b8:1c:7f:8d:bc:13:cc:4b:b3:fe:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc899c28664ee8194a64048e46c60c6e5f190c53
Validity
Not Before: Jan 2 02:29:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=102e8595ab89db5a5513edf1e9cdba8e1e663f27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f2:fe:1b:30:1f:35:2b:ec:b8:d4:a7:09:a0:
79:bc:e5:a0:e7:a8:7f:75:71:46:8f:fb:a6:99:32:
b3:36:8b:33:f8:e7:45:bd:19:7c:33:db:79:7f:f5:
e8:ae:e9:11:c9:98:60:cd:59:e9:f1:14:29:e4:69:
08:02:6b:27:0c:34:1f:5f:a0:e2:18:e9:d1:47:7e:
46:4b:ee:9f:a8:cd:83:52:d1:0c:e4:a1:72:7f:fc:
97:e1:f1:4f:8e:0b:12:c3:a8:2f:62:06:6f:65:00:
7e:19:8e:19:03:ad:36:61:1a:fd:16:1c:1f:84:6e:
f6:6e:4f:ae:64:41:13:f7:5b:64:84:65:7d:1b:4d:
a5:6d:11:e2:7c:b8:45:83:bd:d3:a6:8b:38:b9:cc:
a4:80:bd:ac:6d:6b:1f:c1:10:1c:02:ea:d8:b6:37:
b9:20:13:5a:16:e2:d1:b7:ee:01:1f:6c:19:4c:37:
47:a7:80:eb:02:78:08:2c:9e:34:36:c0:16:fd:53:
0b:bc:5c:96:10:b5:9a:76:44:45:fc:35:a2:bb:83:
df:1b:67:03:96:65:d1:e2:14:3a:8e:9f:0d:73:e7:
07:31:4f:cd:8e:76:3b:2c:c6:58:66:89:66:2f:59:
7b:11:8e:16:0a:94:c0:5a:54:dc:17:2f:60:1c:c6:
8e:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:2E:85:95:AB:89:DB:5A:55:13:ED:F1:E9:CD:BA:8E:1E:66:3F:27
X509v3 Authority Key Identifier:
keyid:DC:89:9C:28:66:4E:E8:19:4A:64:04:8E:46:C6:0C:6E:5F:19:0C:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ImcKGZO6BlKZASORsYMbl8ZDFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/EC6FlauJ21pVE-3x6c26jh5mPyc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.70.156.0/22
213.167.64.0/19
IPv6:
2a00:f180::/32
Signature Algorithm: sha256WithRSAEncryption
55:1a:39:4d:74:c2:e9:66:0a:78:86:a5:9e:1d:d0:9d:50:80:
ad:ec:0f:2b:5d:2e:6b:42:e3:3f:1b:b0:0f:b4:dd:0e:f6:31:
1f:a4:17:7b:6f:09:99:56:e5:6b:e4:91:4b:ee:86:42:44:57:
cf:99:7f:ab:bc:b2:93:2e:fa:3b:46:3f:6c:bb:39:ed:4e:d4:
c0:38:b6:8d:53:2d:07:bd:af:92:41:fb:dc:5d:f8:87:c9:c7:
a9:0d:ac:ca:87:a5:98:f4:9a:cb:42:c9:32:f8:3f:e1:5e:51:
e7:bd:e9:78:b8:34:84:03:5f:a0:b1:54:b5:10:cf:1c:1e:e4:
8e:8b:cb:f9:3a:50:b1:60:b0:5f:53:61:f2:4d:76:ac:e7:ee:
c4:ca:79:43:8a:72:b6:99:a9:dc:10:23:50:45:10:40:62:09:
9a:2e:e4:66:41:1b:27:af:d1:38:0d:b0:d7:20:2d:f3:16:8c:
26:56:81:85:4b:e0:26:58:29:6b:3f:74:09:61:40:a1:02:e3:
4b:00:c8:8f:ea:2d:3f:53:01:1d:9a:0a:ef:30:71:42:96:c0:
55:8f:77:4a:3f:0d:39:98:e8:52:92:a9:fa:80:4c:4f:5f:cf:
0a:3f:c1:5c:fe:3f:2f:4d:dd:09:21:a5:79:e5:d9:61:e3:6f:
58:bf:a7:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 11:20:51 2024 by rpki-client on console-ams.rpki-client.org