Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/c0bb52-70de-4af0-a9fb-900034f00d9e/1/e755OtYk9ub7ZZaxAGqDxhpW-hI.roa
File: e755OtYk9ub7ZZaxAGqDxhpW-hI.roa (raw, json)
Hash identifier: CmhItiocu2P/YplDSNhlroo70pKLs6TdfzVNvwS/DSY=
Subject key identifier: 7B:BE:79:3A:D6:24:F6:E6:FB:65:96:B1:00:6A:83:C6:1A:56:FA:12
Certificate issuer: /CN=7aef069e7e3ed5bf70f682ce40c5810ff3e5e378
Certificate serial: 018CC4924A85B6B106AA8B9E510463F7BEF2
Authority key identifier: 7A:EF:06:9E:7E:3E:D5:BF:70:F6:82:CE:40:C5:81:0F:F3:E5:E3:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eu8Gnn4-1b9w9oLOQMWBD_Pl43g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/c0bb52-70de-4af0-a9fb-900034f00d9e/1/e755OtYk9ub7ZZaxAGqDxhpW-hI.roa
Signing time: Mon 01 Jan 2024 10:29:30 +0000
ROA not before: Mon 01 Jan 2024 10:29:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20722
IP address blocks: 85.204.44.0/24 maxlen: 24
194.102.188.0/24 maxlen: 24
185.88.130.0/23 maxlen: 23
185.88.128.0/22 maxlen: 22
185.88.131.0/24 maxlen: 24
185.88.128.0/23 maxlen: 23
185.88.129.0/24 maxlen: 24
85.204.56.0/21 maxlen: 21
85.204.56.0/24 maxlen: 24
85.204.57.0/24 maxlen: 24
85.204.58.0/24 maxlen: 24
85.204.59.0/24 maxlen: 24
85.204.60.0/24 maxlen: 24
85.204.61.0/24 maxlen: 24
85.204.62.0/24 maxlen: 24
85.204.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/c0bb52-70de-4af0-a9fb-900034f00d9e/1/eu8Gnn4-1b9w9oLOQMWBD_Pl43g.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/c0bb52-70de-4af0-a9fb-900034f00d9e/1/eu8Gnn4-1b9w9oLOQMWBD_Pl43g.mft
rsync://rpki.ripe.net/repository/DEFAULT/eu8Gnn4-1b9w9oLOQMWBD_Pl43g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 16:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:4a:85:b6:b1:06:aa:8b:9e:51:04:63:f7:be:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7aef069e7e3ed5bf70f682ce40c5810ff3e5e378
Validity
Not Before: Jan 1 10:29:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7bbe793ad624f6e6fb6596b1006a83c61a56fa12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ed:aa:40:d9:41:2f:f0:55:1d:e7:a4:19:b8:
db:17:fa:f5:0a:0d:ef:9f:9d:76:20:12:be:38:26:
f8:6e:2d:e0:c4:54:a8:56:07:eb:96:79:15:45:c9:
a0:a0:c8:ba:57:c0:3f:31:9d:0a:72:4d:fe:eb:8b:
c2:bf:c9:9d:b9:99:70:c4:de:3a:0f:8c:47:89:ed:
48:7c:12:80:8d:aa:b9:b6:88:92:76:0e:43:ce:b3:
5b:2d:15:fc:f1:83:e3:de:b4:95:66:2c:6e:54:3b:
a1:9c:2c:2b:04:33:f7:c6:bb:39:25:c1:eb:28:ca:
ca:85:d3:d2:a9:26:23:09:4f:48:72:b9:b8:1b:af:
91:7a:ef:30:f0:23:07:f0:e4:6a:5d:72:54:54:6e:
81:36:a1:89:5c:ba:0f:93:d6:f4:70:46:54:21:00:
d8:6d:0d:e9:2f:e4:4d:07:97:1d:05:de:57:b4:2e:
af:62:57:db:16:be:bf:ac:db:b7:35:ff:81:52:f6:
58:4c:d3:af:08:62:4a:52:43:7c:91:df:a6:b4:89:
ef:13:dd:9b:6b:56:0f:e2:ac:f6:30:98:f4:b8:f0:
1b:5d:44:e4:3f:21:28:80:e3:52:f8:c5:bc:14:28:
7e:2a:00:7b:3c:df:5c:91:ad:ac:1c:53:33:ea:f2:
36:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:BE:79:3A:D6:24:F6:E6:FB:65:96:B1:00:6A:83:C6:1A:56:FA:12
X509v3 Authority Key Identifier:
keyid:7A:EF:06:9E:7E:3E:D5:BF:70:F6:82:CE:40:C5:81:0F:F3:E5:E3:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eu8Gnn4-1b9w9oLOQMWBD_Pl43g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/c0bb52-70de-4af0-a9fb-900034f00d9e/1/e755OtYk9ub7ZZaxAGqDxhpW-hI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/c0bb52-70de-4af0-a9fb-900034f00d9e/1/eu8Gnn4-1b9w9oLOQMWBD_Pl43g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.204.44.0/24
85.204.56.0/21
185.88.128.0/22
194.102.188.0/24
Signature Algorithm: sha256WithRSAEncryption
45:88:7f:f4:db:79:04:cd:56:fa:13:4d:82:3f:a4:69:bc:23:
b7:22:6b:7a:1a:9d:3e:20:fe:a5:54:0c:0b:aa:7d:45:c9:e0:
d1:ee:14:c3:23:b1:64:07:74:0d:67:24:57:18:e3:f0:88:05:
5e:e3:3b:bb:c4:c4:1d:37:1c:12:b2:11:6f:ba:4b:ac:c8:72:
e5:72:c8:47:f7:dd:f2:61:46:55:4c:d1:47:4d:53:d4:98:2b:
b8:9d:39:b6:8b:83:37:b5:44:a0:65:36:f5:c5:61:9e:47:0d:
b5:47:c6:48:5e:12:40:e9:f4:4e:33:de:c1:7b:fe:43:c1:dc:
dd:31:2b:30:84:56:02:83:2a:82:a4:16:06:f9:83:e2:f6:8a:
89:0c:83:ca:58:52:82:46:a3:1d:11:a4:ab:0a:94:6e:dd:64:
6b:10:27:c6:94:e8:ea:d5:3e:95:03:b2:fd:a5:6e:dc:aa:25:
85:66:68:93:5d:63:fa:60:5c:7d:9e:57:4f:5b:69:f9:fe:5a:
c5:92:7c:97:bf:a4:db:f4:fd:26:47:92:aa:a6:f5:fc:67:6b:
fe:58:f4:ef:01:41:b3:f0:68:69:a3:22:d0:f5:3e:1c:8b:e3:
f0:d0:d0:34:13:b8:2c:5e:0f:1a:51:30:ba:3f:1d:eb:12:13:
43:d9:22:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 29 00:09:33 2024 by rpki-client on console-fra.rpki-client.org