Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/eaUF5HRVW0XzEJEWFLex9-gWNbM.roa
File: eaUF5HRVW0XzEJEWFLex9-gWNbM.roa (raw, json)
Hash identifier: LSx2rmy+BBHCxzcKZG1bSe2N3KCl9tx+y8nU7VG44zc=
Subject key identifier: 79:A5:05:E4:74:55:5B:45:F3:10:91:16:14:B7:B1:F7:E8:16:35:B3
Certificate issuer: /CN=db9d197fbbee2a1dccb4f55722a8210d3105b042
Certificate serial: 018CC34899E4E0DD1CD3EFCDDE68B9EB688D
Authority key identifier: DB:9D:19:7F:BB:EE:2A:1D:CC:B4:F5:57:22:A8:21:0D:31:05:B0:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/250Zf7vuKh3MtPVXIqghDTEFsEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/eaUF5HRVW0XzEJEWFLex9-gWNbM.roa
Signing time: Mon 01 Jan 2024 04:29:24 +0000
ROA not before: Mon 01 Jan 2024 04:29:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202856
IP address blocks: 62.218.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/250Zf7vuKh3MtPVXIqghDTEFsEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 13:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:99:e4:e0:dd:1c:d3:ef:cd:de:68:b9:eb:68:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db9d197fbbee2a1dccb4f55722a8210d3105b042
Validity
Not Before: Jan 1 04:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=79a505e474555b45f310911614b7b1f7e81635b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:78:b8:21:1e:dc:e3:ce:04:8f:c7:f2:59:1b:
30:07:0f:ba:27:18:c2:59:e8:e9:94:d0:da:61:75:
a4:7a:41:db:04:ab:82:6d:85:fe:47:df:2a:24:34:
7d:22:14:35:0c:07:4b:81:a6:aa:c3:4c:be:03:9e:
e2:7c:2a:f4:a5:6a:97:db:25:02:8b:63:a3:12:8a:
e9:87:98:08:41:c1:4e:d1:98:a6:f6:d7:c9:4e:56:
6a:82:e4:61:57:db:36:62:9f:fe:63:70:f5:21:b3:
c8:15:94:c5:90:56:20:cc:c6:1d:fc:b3:87:32:88:
bf:44:6a:3c:95:d0:ec:de:6e:fb:8f:44:5a:04:f5:
42:7b:bb:aa:23:ac:5c:3b:80:23:ce:fa:d5:60:a3:
61:20:74:50:27:57:fc:75:fd:9f:cb:82:cc:e5:b0:
5d:de:d6:b7:6b:56:46:83:0c:c7:a1:c0:13:1a:de:
97:ba:4b:e3:05:c9:9a:59:8f:0d:5b:77:b9:a6:ab:
74:6b:12:9f:9e:74:0c:d7:90:1e:9a:7c:17:45:6c:
70:a2:51:49:d1:10:d8:25:80:0e:64:ab:bf:a4:9c:
61:59:a0:bb:11:e9:d7:46:ed:70:38:5e:ec:20:a8:
ff:27:e3:72:15:01:08:63:8b:0e:4a:74:59:e1:32:
fd:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:A5:05:E4:74:55:5B:45:F3:10:91:16:14:B7:B1:F7:E8:16:35:B3
X509v3 Authority Key Identifier:
keyid:DB:9D:19:7F:BB:EE:2A:1D:CC:B4:F5:57:22:A8:21:0D:31:05:B0:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/250Zf7vuKh3MtPVXIqghDTEFsEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/eaUF5HRVW0XzEJEWFLex9-gWNbM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.218.173.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:ea:25:fd:f5:ce:a6:85:1c:9f:97:ec:f9:21:b0:7e:55:ce:
65:5e:42:bc:e5:19:4c:24:9b:ef:6d:55:ec:dc:f1:61:2a:d1:
27:42:2b:6d:14:f4:8a:5e:c5:8d:1f:ca:3e:ba:4d:af:9e:fd:
41:69:f7:81:89:f2:ed:0a:49:a3:e5:c2:98:24:44:df:2c:fa:
ec:9c:eb:c0:97:3f:78:7c:e6:26:de:e3:7a:ec:b0:f0:c1:83:
ce:b2:88:19:fb:72:9a:99:c8:ba:f5:b6:0f:5e:e2:c6:43:97:
a5:07:fc:d1:f2:af:42:5c:ef:29:dc:17:77:b7:96:8c:e8:46:
37:d0:42:de:b2:71:e2:30:70:1f:d6:e6:6c:42:93:48:d5:d7:
60:c2:29:8f:86:dd:54:e3:14:e9:72:ad:51:23:d0:f1:dd:e9:
4c:ab:e7:33:1c:27:f2:c5:06:3e:64:35:1e:c2:91:6c:9d:ad:
25:91:8c:70:af:62:f4:19:e4:f0:c5:b1:7d:91:59:3e:16:f8:
e9:3a:26:32:c3:ee:43:a3:6d:f3:d9:87:92:2a:d2:a4:93:1d:
5d:0b:e1:10:7e:c8:9d:c6:53:44:06:28:10:63:8b:ea:83:47:
e5:8f:37:f1:0b:87:5a:1a:c5:b9:1d:9c:81:eb:fb:dc:ea:c9:
e8:c0:c7:98
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzDSJnk4N0c0+/N3mi562iNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiOWQxOTdmYmJlZTJhMWRjY2I0ZjU1NzIyYTgyMTBkMzEw
NWIwNDIwHhcNMjQwMTAxMDQyOTI0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OWE1MDVlNDc0NTU1YjQ1ZjMxMDkxMTYxNGI3YjFmN2U4MTYzNWIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXi4IR7c484Ej8fyWRswBw+6JxjC
WejplNDaYXWkekHbBKuCbYX+R98qJDR9IhQ1DAdLgaaqw0y+A57ifCr0pWqX2yUC
i2OjEorph5gIQcFO0Zim9tfJTlZqguRhV9s2Yp/+Y3D1IbPIFZTFkFYgzMYd/LOH
Moi/RGo8ldDs3m77j0RaBPVCe7uqI6xcO4AjzvrVYKNhIHRQJ1f8df2fy4LM5bBd
3ta3a1ZGgwzHocATGt6XukvjBcmaWY8NW3e5pqt0axKfnnQM15AemnwXRWxwolFJ
0RDYJYAOZKu/pJxhWaC7EenXRu1wOF7sIKj/J+NyFQEIY4sOSnRZ4TL9CQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHmlBeR0VVtF8xCRFhS3sffoFjWzMB8GA1UdIwQY
MBaAFNudGX+77iodzLT1VyKoIQ0xBbBCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjUwWmY3dnVLaDNNdFBWWElxZ2hEVEVGc0VJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8wOWQxMzctNDc3Yi00ZWZlLWEzZDMt
NGIyMzk1NmZiZDg2LzEvZWFVRjVIUlZXMFh6RUpFV0ZMZXg5LWdXTmJNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS8wOWQxMzctNDc3Yi00ZWZlLWEzZDMtNGIyMzk1NmZiZDg2
LzEvMjUwWmY3dnVLaDNNdFBWWElxZ2hEVEVGc0VJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPtqtMA0G
CSqGSIb3DQEBCwUAA4IBAQA/6iX99c6mhRyfl+z5IbB+Vc5lXkK85RlMJJvvbVXs
3PFhKtEnQittFPSKXsWNH8o+uk2vnv1BafeBifLtCkmj5cKYJETfLPrsnOvAlz94
fOYm3uN67LDwwYPOsogZ+3Kamci69bYPXuLGQ5elB/zR8q9CXO8p3Bd3t5aM6EY3
0ELesnHiMHAf1uZsQpNI1ddgwimPht1U4xTpcq1RI9Dx3elMq+czHCfyxQY+ZDUe
wpFsna0lkYxwr2L0GeTwxbF9kVk+FvjpOiYyw+5Do23z2YeSKtKkkx1dC+EQfsid
xlNEBigQY4vqg0fljzfxC4daGsW5HZyB6/vc6snowMeY
-----END CERTIFICATE-----
Generated at Sun Jun 23 19:06:56 2024 by rpki-client on console-fra.rpki-client.org