Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/e2M7kxXJTjhl9J7bTTWLDDeIp1I.roa
File: e2M7kxXJTjhl9J7bTTWLDDeIp1I.roa (raw, json)
Hash identifier: RmGTlDwSd1r8LXibmYlzgZ1SJnTxhIFwErYIv2esgTY=
Subject key identifier: 7B:63:3B:93:15:C9:4E:38:65:F4:9E:DB:4D:35:8B:0C:37:88:A7:52
Certificate issuer: /CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Certificate serial: 018CD8BE21C8E4A97F3E76D3A291BF68E934
Authority key identifier: 56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/e2M7kxXJTjhl9J7bTTWLDDeIp1I.roa
Signing time: Fri 05 Jan 2024 08:29:48 +0000
ROA not before: Fri 05 Jan 2024 08:29:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61418
IP address blocks: 195.87.95.0/24 maxlen: 24
62.244.224.0/24 maxlen: 24
195.87.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:d8:be:21:c8:e4:a9:7f:3e:76:d3:a2:91:bf:68:e9:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Validity
Not Before: Jan 5 08:29:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7b633b9315c94e3865f49edb4d358b0c3788a752
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b6:d0:40:e3:9b:e7:25:d3:20:c1:3e:5a:68:
b2:16:41:9b:0e:08:78:b9:63:06:80:9e:b8:4d:a9:
95:97:dd:26:5b:0e:54:0f:bd:ee:4b:fc:78:25:6a:
2a:9d:a9:95:9b:fa:10:a5:24:b8:2c:9f:5b:44:53:
e1:29:46:76:52:1f:74:bd:70:f3:49:a9:00:b9:87:
a1:7d:eb:86:48:a5:9a:16:a9:4e:dd:a5:0e:17:7c:
15:71:24:b8:13:ed:b2:0d:39:5a:c9:7e:26:d5:08:
d3:32:d8:82:f2:b7:38:b5:ad:e2:e1:f9:7b:7c:34:
4e:1e:ee:80:05:cd:11:2b:20:b4:7d:e7:d1:ff:c2:
46:8d:b7:c1:4d:b1:0a:a8:59:48:f3:90:25:d5:8a:
11:e9:d1:9c:51:66:97:35:12:6e:29:68:64:5f:0c:
2e:41:d0:a8:1e:7f:72:69:4f:52:b6:c6:0f:11:e2:
2f:0d:90:3e:4e:96:2a:ee:6b:76:6e:65:32:b7:9b:
08:05:b9:16:d7:fb:a9:11:d1:d7:65:b0:50:3f:3a:
37:8d:42:a4:1a:aa:3e:f6:2e:6a:42:8a:23:5f:63:
eb:a0:11:f7:62:f3:9f:6f:44:8d:30:94:86:d2:a8:
82:1f:c7:bd:c6:e5:c5:61:0e:66:2a:41:51:de:8b:
68:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:63:3B:93:15:C9:4E:38:65:F4:9E:DB:4D:35:8B:0C:37:88:A7:52
X509v3 Authority Key Identifier:
keyid:56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/e2M7kxXJTjhl9J7bTTWLDDeIp1I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.244.224.0/24
195.87.95.0/24
195.87.125.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:92:37:d3:4b:fa:bd:80:42:96:2a:72:ef:25:37:2b:fd:91:
64:9c:ea:6c:37:82:04:db:09:cb:b4:1b:26:b5:0d:ee:70:f0:
4e:34:66:bb:2d:8a:af:ec:83:7c:79:5c:3c:7c:8b:32:47:ea:
b2:aa:90:58:d9:05:f4:f9:aa:e3:42:59:1f:e3:fd:9c:69:92:
45:20:04:22:d5:a0:6d:ad:3b:cb:99:e3:8d:59:5c:d4:08:eb:
f4:8a:48:95:da:4a:ab:78:83:20:30:b1:b2:a3:02:20:58:2f:
4b:d0:6d:9d:09:01:f1:d8:4b:22:48:73:f4:02:a1:d2:85:e7:
ec:09:ae:d2:62:98:74:f2:40:f3:fc:d6:89:ec:08:03:cd:ae:
9d:c2:dc:59:3f:7f:3e:f9:ba:c1:0b:b3:1e:72:28:df:79:ad:
c8:14:40:d8:69:37:6e:61:e2:78:56:cc:50:6b:6f:a9:59:11:
ba:bb:88:03:a9:e7:f8:aa:9a:1b:f8:e6:c2:6e:b0:40:95:a0:
3d:76:b7:91:a1:06:31:52:3d:f8:82:26:fa:89:96:29:50:e8:
c6:b0:fc:ad:56:20:1a:34:6e:2b:39:66:94:e4:d3:28:e1:b8:
a8:cb:2c:61:bd:dd:41:ad:f6:b2:cc:43:9d:76:bf:a9:18:71:
13:0c:64:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 11:38:45 2024 by rpki-client on console-fra.rpki-client.org