Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/ecWVSUbjWBO2oIo4yKbKbAQtFMc.roa
File: ecWVSUbjWBO2oIo4yKbKbAQtFMc.roa (raw, json)
Hash identifier: OdvTRi7rtCaOog25SlWlT1jHWCrGKRfFJ24ynVGUBmw=
Subject key identifier: 79:C5:95:49:46:E3:58:13:B6:A0:8A:38:C8:A6:CA:6C:04:2D:14:C7
Certificate issuer: /CN=5a141c5090824d0a17c29ec4050e21007113fbda
Certificate serial: 018CC2DAEAF0FCF306D21BE1CF0F59A9AB8E
Authority key identifier: 5A:14:1C:50:90:82:4D:0A:17:C2:9E:C4:05:0E:21:00:71:13:FB:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WhQcUJCCTQoXwp7EBQ4hAHET-9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/ecWVSUbjWBO2oIo4yKbKbAQtFMc.roa
Signing time: Mon 01 Jan 2024 02:29:36 +0000
ROA not before: Mon 01 Jan 2024 02:29:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31688
IP address blocks: 185.85.76.0/22 maxlen: 22
185.85.76.0/23 maxlen: 23
185.85.78.0/24 maxlen: 24
5.63.24.0/21 maxlen: 21
91.190.168.0/21 maxlen: 21
5.63.31.0/24 maxlen: 24
2a02:798::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/WhQcUJCCTQoXwp7EBQ4hAHET-9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Jun 2024 14:33:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:ea:f0:fc:f3:06:d2:1b:e1:cf:0f:59:a9:ab:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a141c5090824d0a17c29ec4050e21007113fbda
Validity
Not Before: Jan 1 02:29:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=79c5954946e35813b6a08a38c8a6ca6c042d14c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:7b:13:e0:e1:ef:a9:b3:c5:0c:35:ea:fa:e1:
1f:67:e6:a6:e0:44:9e:11:43:04:c4:bb:29:44:23:
df:7d:19:ee:9a:f5:e9:c5:92:e2:64:c2:d8:6e:8f:
9b:ed:89:6f:3b:15:de:24:0c:d7:a2:61:39:f0:43:
c7:33:16:62:ee:67:b9:20:de:ca:b8:c5:c5:1f:02:
f6:60:96:0a:a1:c4:03:30:c9:02:5e:76:7d:c6:72:
8e:e7:5b:a4:7c:72:e1:2a:1b:4c:eb:20:f2:87:af:
a2:a1:bb:77:23:b7:99:df:46:20:01:b5:37:8a:ce:
a4:dc:77:45:11:13:92:05:b6:c7:f4:48:c4:16:1d:
9f:52:c1:11:17:2d:83:89:70:c7:74:16:b7:db:86:
10:96:9c:d6:01:39:6f:bf:5e:3d:82:f8:39:ad:69:
71:14:43:99:51:2f:ec:bd:9e:3f:78:ce:b7:b6:31:
4e:3f:7a:ca:4a:ee:4b:73:4a:39:08:86:3e:0c:29:
41:10:14:3e:39:74:63:38:f3:35:59:12:a2:bd:63:
13:f1:a3:5e:d2:ab:92:4a:0a:59:fd:f0:25:33:fa:
a4:8f:69:0e:2d:be:0a:4d:3f:2a:8c:f7:19:e6:65:
de:28:13:2a:c4:44:1f:9a:4c:01:03:54:f0:62:a3:
20:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:C5:95:49:46:E3:58:13:B6:A0:8A:38:C8:A6:CA:6C:04:2D:14:C7
X509v3 Authority Key Identifier:
keyid:5A:14:1C:50:90:82:4D:0A:17:C2:9E:C4:05:0E:21:00:71:13:FB:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WhQcUJCCTQoXwp7EBQ4hAHET-9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/ecWVSUbjWBO2oIo4yKbKbAQtFMc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.63.24.0/21
91.190.168.0/21
185.85.76.0/22
IPv6:
2a02:798::/32
Signature Algorithm: sha256WithRSAEncryption
54:18:65:77:53:c2:0b:b6:6b:9c:23:63:10:17:2f:24:d9:8a:
15:ce:b8:f6:00:ae:aa:61:f1:48:67:cb:af:0a:5a:d8:d4:02:
99:39:fa:37:8c:7a:ae:34:6c:66:e4:e5:32:99:21:68:13:22:
b2:83:da:29:12:38:e1:0e:ca:3b:ed:a5:93:f1:92:78:c4:93:
5f:58:0a:49:a7:e0:18:ad:3c:20:d4:37:fc:f3:02:fa:fe:dd:
5c:18:2d:f0:26:dd:cc:60:d0:1f:d5:6d:7b:13:1a:4a:91:93:
5a:6f:4c:9f:25:be:81:59:80:6f:3f:5b:41:18:70:49:f8:32:
07:56:aa:17:d5:30:7a:b7:c3:41:39:ae:d3:17:6c:a6:ef:ed:
3b:b4:03:4c:07:01:3a:9a:69:5d:5a:e7:78:e4:54:56:06:e6:
cb:e5:bd:4b:d7:01:bd:8c:29:ea:79:96:78:5b:02:dc:ac:00:
72:ce:fa:eb:08:a6:cb:fc:71:3a:4f:0d:0c:9f:f1:09:0b:6d:
e4:f6:e1:72:38:83:9b:f5:8d:68:01:02:6b:ca:54:17:18:f3:
f0:11:46:f4:1f:36:eb:38:48:76:b2:d8:9e:f8:1d:dc:20:5a:
8d:aa:d7:b5:4c:70:02:9c:90:ce:37:5a:19:02:16:44:fe:61:
a0:71:c5:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 01:12:42 2024 by rpki-client on console-fra.rpki-client.org