Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/ccc8c9-cc10-4ff9-acc0-84c65b193758/1/EYooTrEPSl3wt_WYeNdRNW-kLbQ.roa
File: EYooTrEPSl3wt_WYeNdRNW-kLbQ.roa (raw, json)
Hash identifier: OjXKrk2OlXTIQEKcyukhD9Vb50W6Nxj14mygpqvFM44=
Subject key identifier: 11:8A:28:4E:B1:0F:4A:5D:F0:B7:F5:98:78:D7:51:35:6F:A4:2D:B4
Certificate issuer: /CN=1a2ca7a583b2497c367e9e86deb79cb7a7375a47
Certificate serial: 018FEE16446B2C8F54DFF91CA2A0FF7ABCA6
Authority key identifier: 1A:2C:A7:A5:83:B2:49:7C:36:7E:9E:86:DE:B7:9C:B7:A7:37:5A:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GiynpYOySXw2fp6G3rect6c3Wkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/ccc8c9-cc10-4ff9-acc0-84c65b193758/1/EYooTrEPSl3wt_WYeNdRNW-kLbQ.roa
Signing time: Thu 06 Jun 2024 15:06:27 +0000
ROA not before: Thu 06 Jun 2024 15:06:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48571
IP address blocks: 185.62.8.0/24 maxlen: 24
185.62.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/ccc8c9-cc10-4ff9-acc0-84c65b193758/1/GiynpYOySXw2fp6G3rect6c3Wkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/ccc8c9-cc10-4ff9-acc0-84c65b193758/1/GiynpYOySXw2fp6G3rect6c3Wkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/GiynpYOySXw2fp6G3rect6c3Wkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Jun 2024 09:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:ee:16:44:6b:2c:8f:54:df:f9:1c:a2:a0:ff:7a:bc:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a2ca7a583b2497c367e9e86deb79cb7a7375a47
Validity
Not Before: Jun 6 15:06:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=118a284eb10f4a5df0b7f59878d751356fa42db4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:13:ee:07:ae:46:84:73:da:b5:45:f8:d3:e2:
4b:73:35:8c:c8:c9:e3:90:db:04:37:21:b4:2e:77:
d8:1e:49:65:d8:82:22:6e:70:4f:bc:91:34:73:cd:
02:75:da:ae:b1:2b:57:9f:05:ae:b8:c7:91:b2:e6:
73:53:d9:ac:54:a1:54:dc:e0:e5:39:e5:05:0c:bd:
c9:3a:8e:8d:77:a2:fc:42:83:f0:c6:df:5a:db:c0:
1f:26:aa:82:81:f9:1b:37:f8:58:b7:e2:b3:b3:ed:
f3:0f:5d:5f:f2:c2:36:93:6f:cb:6d:7a:3c:c5:cb:
45:24:86:c0:4c:9e:c9:95:46:5b:bd:73:39:c0:12:
aa:be:0a:2c:b4:79:96:50:63:4f:dd:9c:ac:ee:2d:
a9:89:e2:27:31:44:2c:a9:1f:06:a0:50:28:5b:a2:
25:07:87:c5:e3:b6:f0:9a:3f:8f:3e:96:ef:a9:1e:
ba:30:e1:37:be:94:cf:66:40:33:3e:54:84:55:1c:
6e:d1:1f:fc:ad:79:85:d8:3c:8e:bd:39:ac:35:01:
6f:7c:92:f3:76:0d:04:ba:c8:8f:50:89:0b:12:3a:
ee:af:49:24:3a:63:f7:b6:c2:66:da:b2:84:c9:58:
57:e1:a9:5d:82:f9:a0:78:35:f6:80:5d:c5:34:9d:
3a:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:8A:28:4E:B1:0F:4A:5D:F0:B7:F5:98:78:D7:51:35:6F:A4:2D:B4
X509v3 Authority Key Identifier:
keyid:1A:2C:A7:A5:83:B2:49:7C:36:7E:9E:86:DE:B7:9C:B7:A7:37:5A:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GiynpYOySXw2fp6G3rect6c3Wkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/ccc8c9-cc10-4ff9-acc0-84c65b193758/1/EYooTrEPSl3wt_WYeNdRNW-kLbQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/ccc8c9-cc10-4ff9-acc0-84c65b193758/1/GiynpYOySXw2fp6G3rect6c3Wkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.62.8.0/24
185.62.11.0/24
Signature Algorithm: sha256WithRSAEncryption
71:96:73:97:f5:b2:43:cf:17:0f:ad:39:ce:ee:73:a5:c0:cd:
33:2b:54:b4:50:43:06:60:4e:f5:a7:de:da:df:e3:73:c7:1a:
b4:3e:48:ac:ef:1e:73:f7:af:25:ea:03:15:fa:86:22:07:a2:
98:bd:c6:8a:cc:98:80:2e:8c:e7:32:50:95:7d:77:aa:42:29:
fa:29:01:50:6e:73:ad:ce:ec:d3:b0:36:b1:83:30:0f:59:8f:
ae:aa:44:8f:74:31:57:49:66:35:3d:78:cf:f5:10:43:ab:b4:
d8:13:ad:f8:27:ee:ac:09:fc:76:a7:37:14:a6:fd:39:a7:c7:
3f:b6:f8:ef:51:08:be:f1:d8:86:7e:ac:4b:ba:e1:37:25:47:
b1:1c:59:09:18:cb:9d:bd:13:7f:63:93:63:b4:c1:12:b3:84:
9f:47:aa:fe:2b:95:7c:6f:18:7b:37:f0:ba:83:18:4e:0c:80:
0b:e5:17:ad:fd:eb:3b:b5:68:77:3e:9b:de:d6:9f:24:44:9b:
ca:a3:d1:51:4d:9b:4e:15:f8:8c:ee:56:10:1c:45:4b:48:c7:
c4:11:b0:52:75:e8:42:90:e0:47:43:53:97:14:25:86:f0:2a:
4f:22:d8:25:91:19:23:58:d7:ad:67:0f:4f:6f:7e:43:e0:66:
61:8c:e2:fd
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAY/uFkRrLI9U3/kcoqD/erymMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhMmNhN2E1ODNiMjQ5N2MzNjdlOWU4NmRlYjc5Y2I3YTcz
NzVhNDcwHhcNMjQwNjA2MTUwNjI3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMThhMjg0ZWIxMGY0YTVkZjBiN2Y1OTg3OGQ3NTEzNTZmYTQyZGI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhPuB65GhHPatUX40+JLczWMyMnj
kNsENyG0LnfYHkll2IIibnBPvJE0c80CddqusStXnwWuuMeRsuZzU9msVKFU3ODl
OeUFDL3JOo6Nd6L8QoPwxt9a28AfJqqCgfkbN/hYt+Kzs+3zD11f8sI2k2/LbXo8
xctFJIbATJ7JlUZbvXM5wBKqvgostHmWUGNP3Zys7i2pieInMUQsqR8GoFAoW6Il
B4fF47bwmj+PPpbvqR66MOE3vpTPZkAzPlSEVRxu0R/8rXmF2DyOvTmsNQFvfJLz
dg0EusiPUIkLEjrur0kkOmP3tsJm2rKEyVhX4aldgvmgeDX2gF3FNJ06ywIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFBGKKE6xD0pd8Lf1mHjXUTVvpC20MB8GA1UdIwQY
MBaAFBosp6WDskl8Nn6eht63nLenN1pHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2l5bnBZT3lTWHcyZnA2RzNyZWN0NmMzV2tjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9jY2M4YzktY2MxMC00ZmY5LWFjYzAt
ODRjNjViMTkzNzU4LzEvRVlvb1RyRVBTbDN3dF9XWWVOZFJOVy1rTGJRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny9jY2M4YzktY2MxMC00ZmY5LWFjYzAtODRjNjViMTkzNzU4
LzEvR2l5bnBZT3lTWHcyZnA2RzNyZWN0NmMzV2tjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuT4IAwQA
uT4LMA0GCSqGSIb3DQEBCwUAA4IBAQBxlnOX9bJDzxcPrTnO7nOlwM0zK1S0UEMG
YE71p97a3+Nzxxq0Pkis7x5z968l6gMV+oYiB6KYvcaKzJiALoznMlCVfXeqQin6
KQFQbnOtzuzTsDaxgzAPWY+uqkSPdDFXSWY1PXjP9RBDq7TYE634J+6sCfx2pzcU
pv05p8c/tvjvUQi+8diGfqxLuuE3JUexHFkJGMudvRN/Y5NjtMESs4SfR6r+K5V8
bxh7N/C6gxhODIAL5Ret/es7tWh3Ppve1p8kRJvKo9FRTZtOFfiM7lYQHEVLSMfE
EbBSdehCkOBHQ1OXFCWG8CpPItglkRkjWNetZw9Pb35D4GZhjOL9
-----END CERTIFICATE-----
Generated at Fri Jun 21 17:03:04 2024 by rpki-client on console-ams.rpki-client.org