Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/0bf8fb-1604-4cd1-9da6-1bb27c5d397e/1/EHurB-AKXj0UBAORIuofXz5usMg.roa
File: EHurB-AKXj0UBAORIuofXz5usMg.roa (raw, json)
Hash identifier: C1N+TncY95rD5KsjWlyZdY57oBGUOWEI57ou/OF4yz0=
Subject key identifier: 10:7B:AB:07:E0:0A:5E:3D:14:04:03:91:22:EA:1F:5F:3E:6E:B0:C8
Certificate issuer: /CN=34e110b59362f673eae33b66ee7aea3c4028294e
Certificate serial: 0193017A6FD32385927CE99CD064AF1B6465
Authority key identifier: 34:E1:10:B5:93:62:F6:73:EA:E3:3B:66:EE:7A:EA:3C:40:28:29:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NOEQtZNi9nPq4ztm7nrqPEAoKU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/0bf8fb-1604-4cd1-9da6-1bb27c5d397e/1/EHurB-AKXj0UBAORIuofXz5usMg.roa
Signing time: Wed 06 Nov 2024 12:37:01 +0000
ROA not before: Wed 06 Nov 2024 12:37:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29028
IP address blocks: 141.105.120.0/21 maxlen: 24
141.105.120.0/22 maxlen: 24
141.105.126.0/23 maxlen: 24
178.21.112.0/21 maxlen: 24
185.2.44.0/22 maxlen: 24
193.200.132.0/24 maxlen: 24
194.145.200.0/23 maxlen: 24
2a02:2308::/32 maxlen: 32
2a02:2308:50::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/0bf8fb-1604-4cd1-9da6-1bb27c5d397e/1/NOEQtZNi9nPq4ztm7nrqPEAoKU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/0bf8fb-1604-4cd1-9da6-1bb27c5d397e/1/NOEQtZNi9nPq4ztm7nrqPEAoKU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NOEQtZNi9nPq4ztm7nrqPEAoKU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 18:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:01:7a:6f:d3:23:85:92:7c:e9:9c:d0:64:af:1b:64:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34e110b59362f673eae33b66ee7aea3c4028294e
Validity
Not Before: Nov 6 12:37:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=107bab07e00a5e3d1404039122ea1f5f3e6eb0c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d1:22:3e:58:15:e1:1b:5a:29:e2:19:80:7a:
5d:37:bb:5d:2b:50:58:6c:a7:9a:fb:07:8f:1a:f5:
1f:df:dd:e7:4e:a1:6f:c5:12:ed:78:0c:52:c9:8b:
a5:5f:e7:4a:37:94:60:aa:bd:d7:60:26:a4:7d:90:
64:ea:0e:25:8b:32:7e:03:e4:7a:0c:f1:d5:dc:db:
9a:e6:6e:25:4e:73:02:64:d2:cc:a3:4e:3b:cc:a4:
c8:e7:49:0c:e7:9a:b1:77:d6:61:89:2d:1e:27:09:
b4:8b:79:2e:3f:6a:ab:ad:a2:4e:37:11:e1:bd:07:
0b:3a:27:36:3d:9d:47:65:53:27:52:f2:e8:e7:fe:
be:90:aa:72:51:68:05:c9:0e:ef:ae:bf:1d:a9:b1:
0b:6b:f4:f4:a3:fc:61:4a:58:14:18:4d:6e:d7:99:
ae:16:e0:17:f7:d1:1d:2d:ec:78:94:6b:5c:72:06:
3f:29:b5:da:63:d5:e6:11:29:0a:76:4c:9e:9f:a4:
06:de:44:83:ff:3a:18:30:37:d6:10:dd:29:79:6d:
56:46:51:22:c4:4f:32:3a:31:15:59:a0:f6:bd:ee:
ac:94:4b:a2:f4:94:16:d2:56:a8:35:8a:3d:25:ee:
da:31:d3:b5:0a:a5:7b:f2:1c:2c:93:17:4c:c7:c3:
40:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:7B:AB:07:E0:0A:5E:3D:14:04:03:91:22:EA:1F:5F:3E:6E:B0:C8
X509v3 Authority Key Identifier:
keyid:34:E1:10:B5:93:62:F6:73:EA:E3:3B:66:EE:7A:EA:3C:40:28:29:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NOEQtZNi9nPq4ztm7nrqPEAoKU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0bf8fb-1604-4cd1-9da6-1bb27c5d397e/1/EHurB-AKXj0UBAORIuofXz5usMg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0bf8fb-1604-4cd1-9da6-1bb27c5d397e/1/NOEQtZNi9nPq4ztm7nrqPEAoKU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.105.120.0/21
178.21.112.0/21
185.2.44.0/22
193.200.132.0/24
194.145.200.0/23
IPv6:
2a02:2308::/32
Signature Algorithm: sha256WithRSAEncryption
97:f5:f5:f3:d8:82:0d:7e:5a:8d:63:36:5e:66:3d:57:76:9d:
81:3d:ba:f9:c8:fa:98:45:7a:02:4e:8f:5f:e3:ec:17:8b:52:
41:a5:ac:a0:79:50:af:42:e6:9a:ee:0f:14:da:c4:15:45:45:
1a:81:12:9e:d9:ce:bd:e4:b4:60:e8:76:8f:db:57:dc:70:a2:
bc:52:e8:da:dc:14:63:1a:f5:13:1c:7c:ec:f3:bf:2b:32:13:
20:50:1f:94:b7:db:1b:da:16:f3:b8:9b:7b:b5:f7:01:8f:51:
6f:e0:38:84:8f:8b:61:02:4f:17:c7:75:39:34:38:00:9a:c3:
ec:f8:35:8c:53:eb:15:cc:b2:90:9b:fa:68:2c:62:93:fe:50:
8c:7a:65:f3:99:49:10:53:93:8e:2a:0d:10:78:d4:ca:ef:47:
85:25:8e:28:d4:35:4e:de:1d:1f:3b:a9:39:da:4b:32:70:ff:
e0:78:47:93:61:f1:b9:2b:34:07:69:a2:5e:31:e8:f9:be:09:
5c:f8:e6:6a:a8:f4:4c:f4:38:e4:0a:94:88:73:1e:26:70:ad:
b9:d3:7b:91:e0:9a:72:74:67:68:4d:8f:04:bf:47:af:14:2d:
a3:b2:e5:5f:9a:25:0f:f2:23:fe:59:9c:ee:1e:6b:67:0e:fd:
21:61:55:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:13:02 2024 by rpki-client on console-ams.rpki-client.org