Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/eivc-RgZ_9DqdktX5fPj6EAmqd0.roa
File: eivc-RgZ_9DqdktX5fPj6EAmqd0.roa (raw, json)
Hash identifier: BOcFVwOJrI+9gl46kdvOfo3iuBjm0p7szAPT3NSVBeA=
Subject key identifier: 7A:2B:DC:F9:18:19:FF:D0:EA:76:4B:57:E5:F3:E3:E8:40:26:A9:DD
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018CC8DD0902DB077D102E68A6954B864D25
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/eivc-RgZ_9DqdktX5fPj6EAmqd0.roa
Signing time: Tue 02 Jan 2024 06:29:38 +0000
ROA not before: Tue 02 Jan 2024 06:29:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209193
IP address blocks: 185.216.69.0/24 maxlen: 24
185.207.12.0/24 maxlen: 24
83.171.206.0/24 maxlen: 24
185.147.102.0/24 maxlen: 24
185.147.103.0/24 maxlen: 24
185.147.100.0/24 maxlen: 24
185.147.101.0/24 maxlen: 24
83.171.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 29 Apr 2024 05:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:dd:09:02:db:07:7d:10:2e:68:a6:95:4b:86:4d:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 06:29:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7a2bdcf91819ffd0ea764b57e5f3e3e84026a9dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:0a:b9:8c:45:89:38:52:ef:67:70:a6:ad:2a:
0d:f1:72:f0:45:4f:02:5b:e8:5e:01:93:fa:0f:f7:
9c:04:21:e7:84:e8:8e:44:95:93:17:7a:f4:24:28:
7f:6f:8c:29:38:5d:9e:5a:e7:e6:82:11:17:4f:f7:
ff:5e:a6:30:bc:9f:cc:4c:8a:3f:f2:f0:11:6a:5c:
c1:b0:e6:32:81:bb:65:48:67:c5:6b:1d:51:14:d2:
02:3b:7e:0e:29:42:76:8a:36:1f:fd:02:69:30:0f:
35:53:b5:24:e1:b1:74:2c:b2:3f:3d:77:fe:6e:b9:
e1:fd:9d:32:8a:a1:81:fa:a9:98:73:76:93:6d:25:
a8:d6:3c:58:d9:ca:69:ac:cf:f3:d1:e2:bd:0d:f3:
8c:c6:41:ee:ed:66:57:57:9e:0b:c5:4b:c6:20:35:
4f:4a:4b:fb:88:38:b0:3e:07:80:20:a7:37:8e:ed:
3f:af:d6:f1:8b:d6:34:bb:33:f2:a1:10:5c:3e:f7:
ac:8e:9b:5e:5b:e8:87:c5:64:f0:e5:3e:56:42:7d:
0e:af:1e:a3:9e:7e:98:91:ba:95:e9:bd:0b:58:43:
32:60:c7:3f:94:89:b0:81:04:80:40:78:9b:f5:7d:
77:f6:9e:83:b9:69:99:d6:d9:c8:84:f7:b9:15:ea:
3e:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:2B:DC:F9:18:19:FF:D0:EA:76:4B:57:E5:F3:E3:E8:40:26:A9:DD
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/eivc-RgZ_9DqdktX5fPj6EAmqd0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.171.206.0/23
185.147.100.0/22
185.207.12.0/24
185.216.69.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:03:8d:76:47:b1:17:69:3d:10:84:a6:de:01:e7:84:9b:a1:
5b:fc:e6:15:fa:b7:46:36:5e:f9:49:f9:e1:c4:8e:c6:56:80:
91:da:32:e5:f7:66:aa:9e:8a:d3:54:94:2e:57:21:2c:80:05:
aa:e1:18:25:23:f0:d5:16:73:15:61:f8:41:f6:e9:7a:39:ba:
7f:d2:33:04:f9:e8:fd:13:0e:b0:29:e7:04:f2:22:eb:dc:f1:
92:0e:46:48:15:42:38:ae:f6:b7:a3:3a:67:8d:b7:31:90:99:
cc:68:bd:4f:51:08:43:a3:c2:6b:23:db:8a:7f:75:9f:d4:92:
a8:0c:f8:17:bc:8b:3b:a4:a7:32:c6:9d:01:29:86:d7:4f:a2:
fb:e2:49:2c:c1:00:b2:30:b1:15:ff:8f:9b:6a:2e:84:f2:25:
08:6c:75:14:1a:dc:32:1b:90:a5:3b:30:f6:c9:a9:e5:16:4b:
f0:b1:38:93:bd:df:ea:03:c6:43:79:e3:c0:09:78:4b:a8:a4:
13:4e:3c:96:0f:f4:4a:34:f6:0a:5c:e5:c4:42:be:2b:e3:63:
14:96:2f:be:89:3c:28:a1:52:2f:bd:56:7b:21:69:e0:07:7b:
07:25:7a:e9:ec:26:ec:43:3b:20:8d:2b:5d:fe:70:68:e7:28:
24:37:26:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 10:04:20 2024 by rpki-client on console-ams.rpki-client.org