Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/5531a6-964a-419e-95ff-a60f13198d5d/1/ePYCFXeiPtZtfsznThlTguOn4QQ.roa
File: ePYCFXeiPtZtfsznThlTguOn4QQ.roa (raw, json)
Hash identifier: x7vi5p5A5+swIJ7wSfenY9L+XPLiPoM5/Cdf6bL6K1U=
Subject key identifier: 78:F6:02:15:77:A2:3E:D6:6D:7E:CC:E7:4E:19:53:82:E3:A7:E1:04
Certificate issuer: /CN=0cd27fea3baa3ef680e8f7a07a5f194ac49892a5
Certificate serial: 018CC5DC493CC5AA047B1C6B2B9C0E0B835A
Authority key identifier: 0C:D2:7F:EA:3B:AA:3E:F6:80:E8:F7:A0:7A:5F:19:4A:C4:98:92:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DNJ_6juqPvaA6Pegel8ZSsSYkqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/5531a6-964a-419e-95ff-a60f13198d5d/1/ePYCFXeiPtZtfsznThlTguOn4QQ.roa
Signing time: Mon 01 Jan 2024 16:29:57 +0000
ROA not before: Mon 01 Jan 2024 16:29:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25491
IP address blocks: 185.104.244.0/24 maxlen: 24
185.104.245.0/24 maxlen: 24
185.104.246.0/24 maxlen: 24
185.104.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/5531a6-964a-419e-95ff-a60f13198d5d/1/DNJ_6juqPvaA6Pegel8ZSsSYkqU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/5531a6-964a-419e-95ff-a60f13198d5d/1/DNJ_6juqPvaA6Pegel8ZSsSYkqU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DNJ_6juqPvaA6Pegel8ZSsSYkqU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Jun 2024 00:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:49:3c:c5:aa:04:7b:1c:6b:2b:9c:0e:0b:83:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cd27fea3baa3ef680e8f7a07a5f194ac49892a5
Validity
Not Before: Jan 1 16:29:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=78f6021577a23ed66d7ecce74e195382e3a7e104
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:95:ef:bc:dd:7c:9f:c6:ca:5d:d8:cb:34:b3:
b7:2d:86:97:1c:36:78:a4:e7:62:b7:ce:63:45:00:
a2:3b:6b:01:58:49:57:4c:73:d4:77:c6:29:f4:81:
71:76:b7:ae:09:aa:69:7d:a6:4c:f3:5d:e7:4b:81:
4b:0e:6e:e1:95:15:6a:a4:26:5d:a3:4d:e9:07:a4:
af:ad:01:bd:bd:13:bb:31:ed:e6:f1:8e:d3:9d:3b:
58:ab:56:29:02:e8:ba:37:5f:30:e7:cb:e8:a4:a8:
77:a4:78:d2:1a:79:51:fe:91:33:80:8e:c8:df:d9:
d1:ef:d9:e3:e8:6c:8c:9e:e9:ae:bf:3f:07:8b:77:
17:f4:ed:8f:bc:a8:c3:6e:8a:75:84:21:07:9a:45:
1f:0c:6e:4a:70:09:94:9c:93:f6:90:76:30:93:6d:
da:a5:e2:fa:76:b2:d2:ad:c9:b1:d4:d0:5c:a8:6e:
2f:f2:c7:19:ab:51:8b:bd:b3:de:26:db:5c:a0:2c:
7f:0f:75:b2:8c:36:cf:a2:19:2e:fd:e8:4b:04:9c:
57:b9:08:2e:03:79:18:89:08:65:89:e0:2f:f8:9f:
52:30:5c:f6:dd:3b:40:c3:9b:83:05:e1:9b:25:36:
57:ed:88:0e:14:3e:32:a9:07:6b:f2:30:42:c3:47:
34:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:F6:02:15:77:A2:3E:D6:6D:7E:CC:E7:4E:19:53:82:E3:A7:E1:04
X509v3 Authority Key Identifier:
keyid:0C:D2:7F:EA:3B:AA:3E:F6:80:E8:F7:A0:7A:5F:19:4A:C4:98:92:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNJ_6juqPvaA6Pegel8ZSsSYkqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/5531a6-964a-419e-95ff-a60f13198d5d/1/ePYCFXeiPtZtfsznThlTguOn4QQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/5531a6-964a-419e-95ff-a60f13198d5d/1/DNJ_6juqPvaA6Pegel8ZSsSYkqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.104.244.0/22
Signature Algorithm: sha256WithRSAEncryption
19:a9:29:93:ff:ac:d7:68:bd:2a:1d:73:20:b8:4c:89:a9:cf:
5f:ba:fa:32:a0:4e:e8:d7:8d:73:e6:7a:53:0b:1a:a3:88:28:
df:b0:46:db:94:6b:10:9f:ff:49:97:73:04:c6:96:f7:eb:4a:
47:a6:d7:69:69:48:77:d5:f4:85:ad:8b:00:ac:91:ae:30:8c:
24:2b:9f:a7:b9:f6:a8:80:4c:d6:fa:71:26:82:53:7f:8a:7e:
a9:9b:21:7e:c1:db:dc:a5:aa:dd:12:73:29:1b:e7:02:11:72:
11:48:ea:ac:37:67:7a:e2:6d:c4:63:ae:e6:82:35:c3:1b:bc:
e6:86:e2:26:da:54:c4:d9:37:4f:4e:29:6b:b9:2d:8e:7f:d3:
79:71:5c:98:13:fe:5d:56:ef:62:f7:69:4b:8e:0f:cc:74:83:
ef:59:ff:95:74:cd:c7:ba:79:59:76:ec:f4:7c:8a:b4:d1:df:
19:6f:fe:03:35:44:54:05:63:b3:5b:63:e6:72:cb:f2:fb:8e:
d3:22:bb:9c:75:c2:f7:86:f5:f9:a2:44:82:9d:d2:e8:83:3e:
7d:b3:e9:79:ae:5f:04:22:ba:21:b1:04:8a:ce:f2:0c:66:7c:
fa:38:fe:e6:18:c9:1b:3c:ae:54:8c:99:61:ad:97:03:59:c0:
c3:1e:1a:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 10:11:35 2024 by rpki-client on console-fra.rpki-client.org