Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/8fa051-4357-4d31-8537-6812babc5a8b/1/eBAndloPV4MCr4WEhaXvTepRpY8.roa
File: eBAndloPV4MCr4WEhaXvTepRpY8.roa (raw, json)
Hash identifier: dtzkMs+wNIpgdimAIsiZJZ0vNwnmwdSZQkJPe/aFX2A=
Subject key identifier: 78:10:27:76:5A:0F:57:83:02:AF:85:84:85:A5:EF:4D:EA:51:A5:8F
Certificate issuer: /CN=e97656f22015589ff7cc66056867f605d81449bc
Certificate serial: 018CC3B729E112703A49A7D3E485176EE730
Authority key identifier: E9:76:56:F2:20:15:58:9F:F7:CC:66:05:68:67:F6:05:D8:14:49:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/8fa051-4357-4d31-8537-6812babc5a8b/1/eBAndloPV4MCr4WEhaXvTepRpY8.roa
Signing time: Mon 01 Jan 2024 06:30:10 +0000
ROA not before: Mon 01 Jan 2024 06:30:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204249
IP address blocks: 185.54.164.0/24 maxlen: 24
185.54.165.0/24 maxlen: 24
185.54.166.0/24 maxlen: 24
185.54.167.0/24 maxlen: 24
185.37.162.0/24 maxlen: 24
2a00:f7a0:100::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/8fa051-4357-4d31-8537-6812babc5a8b/1/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/8fa051-4357-4d31-8537-6812babc5a8b/1/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.mft
rsync://rpki.ripe.net/repository/DEFAULT/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 May 2024 09:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:29:e1:12:70:3a:49:a7:d3:e4:85:17:6e:e7:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e97656f22015589ff7cc66056867f605d81449bc
Validity
Not Before: Jan 1 06:30:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=781027765a0f578302af858485a5ef4dea51a58f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c8:53:0d:a9:8d:49:3e:00:5e:59:4b:8f:25:
12:99:5b:b2:47:77:ea:c9:69:7b:cf:3c:61:aa:a0:
e2:a4:3b:ae:0b:e7:61:50:d7:ee:0f:88:b1:18:b8:
d3:64:79:a0:fa:e5:12:92:98:74:a6:bf:b7:0d:a6:
4a:ef:7f:28:3a:d9:39:34:c7:d1:5d:e6:8a:89:08:
2e:5f:2f:7e:69:fd:72:ee:a2:b6:0e:f9:e8:cb:ee:
a0:0b:b4:8e:68:4e:08:10:d6:9a:1a:57:0a:3b:89:
89:6d:92:cd:08:e5:c2:28:da:b0:ef:18:47:c3:cf:
71:35:0c:d7:4c:fb:da:71:d3:56:e6:a3:f5:5c:8d:
d8:d2:2f:6e:4e:d9:22:50:da:e4:af:c6:99:d1:e2:
f0:3a:e4:eb:a5:38:87:bb:ab:e6:dd:1f:39:1a:56:
85:0d:7a:a5:7a:d0:2c:8f:81:54:7a:86:2d:37:f3:
0c:be:a0:b0:83:b9:6a:36:41:2a:fa:ee:0a:bc:35:
ec:d9:49:9f:cd:06:42:4d:cb:4b:75:b4:2b:80:95:
a5:2a:0d:27:43:f4:84:63:ee:f2:0d:51:80:9d:7f:
27:a3:02:0b:90:ee:31:a7:7f:31:1e:ea:b3:15:56:
8c:46:5d:7f:7d:c5:8e:f8:3c:d1:70:68:24:59:85:
6f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:10:27:76:5A:0F:57:83:02:AF:85:84:85:A5:EF:4D:EA:51:A5:8F
X509v3 Authority Key Identifier:
keyid:E9:76:56:F2:20:15:58:9F:F7:CC:66:05:68:67:F6:05:D8:14:49:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8fa051-4357-4d31-8537-6812babc5a8b/1/eBAndloPV4MCr4WEhaXvTepRpY8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8fa051-4357-4d31-8537-6812babc5a8b/1/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.37.162.0/24
185.54.164.0/22
IPv6:
2a00:f7a0:100::/48
Signature Algorithm: sha256WithRSAEncryption
14:d7:81:18:94:6f:66:36:b9:ab:34:41:30:52:a6:b7:43:8e:
2d:0c:19:e5:6f:e9:a8:bf:88:f7:e8:1a:0a:2e:cc:c5:df:1a:
7b:f9:b6:91:06:bd:3e:02:4a:bc:cd:da:35:75:15:89:ce:92:
a8:fb:03:ce:2e:95:37:70:1c:f7:6c:3e:5a:5b:5c:77:8c:38:
93:f5:41:ea:81:68:50:76:8f:86:27:33:bb:ba:54:77:e8:58:
6c:6d:22:82:0e:45:dd:40:4a:07:4c:c8:c2:be:1d:30:5d:e8:
4e:89:ba:1a:25:41:25:a9:da:96:bf:37:4a:06:d6:01:7c:3a:
61:3e:e8:a4:7e:bd:bf:2e:2f:e0:e3:84:da:d7:26:ed:c9:76:
6f:ef:df:a5:e3:1e:1a:a3:67:bc:83:02:07:8f:ed:de:e5:42:
88:44:4d:15:94:20:4c:c2:f2:27:f5:8f:34:9f:79:39:80:89:
f2:7d:28:c0:8b:5e:f5:8a:65:ba:fb:6b:0b:43:2c:cc:04:95:
34:55:c4:7b:2e:54:96:2c:e1:7c:d6:e7:97:9b:47:78:1a:cb:
b4:13:43:2e:df:a7:de:e3:ec:71:50:d0:cc:73:56:36:86:c0:
4b:c1:72:bb:58:97:ce:6f:37:7f:f6:3d:07:8d:27:c0:66:b3:
09:99:ed:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 25 15:32:55 2024 by rpki-client on console-fra.rpki-client.org