Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/eimdwvSjVoJMybU18LfqBL_lOno.roa
File: eimdwvSjVoJMybU18LfqBL_lOno.roa (raw, json)
Hash identifier: GFeltt0YSB/VRt9XagqeY8VvCVN/bSzNaRDdjiM4h9Y=
Subject key identifier: 7A:29:9D:C2:F4:A3:56:82:4C:C9:B5:35:F0:B7:EA:04:BF:E5:3A:7A
Certificate issuer: /CN=ed30a131718560a34ab3493884e858ec431f6ad1
Certificate serial: 018D02B966F2FCB91EEDD54D419D1F43EA13
Authority key identifier: ED:30:A1:31:71:85:60:A3:4A:B3:49:38:84:E8:58:EC:43:1F:6A:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/eimdwvSjVoJMybU18LfqBL_lOno.roa
Signing time: Sat 13 Jan 2024 12:08:41 +0000
ROA not before: Sat 13 Jan 2024 12:08:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200436
IP address blocks: 194.180.224.0/24 maxlen: 24
185.231.113.0/24 maxlen: 24
5.42.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.mft
rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 04:53:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:02:b9:66:f2:fc:b9:1e:ed:d5:4d:41:9d:1f:43:ea:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed30a131718560a34ab3493884e858ec431f6ad1
Validity
Not Before: Jan 13 12:08:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7a299dc2f4a356824cc9b535f0b7ea04bfe53a7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:50:a4:2b:3f:80:01:2e:df:7c:8d:5c:9e:98:
b8:5f:6d:6d:95:7b:71:26:84:ba:4d:35:b7:fd:63:
94:73:f1:20:d8:a6:14:aa:82:37:31:f1:17:bb:8b:
5b:aa:d2:2c:b9:72:9a:1d:24:41:d3:81:89:95:3e:
81:ce:33:9b:87:71:2c:d5:1a:c2:16:6c:70:d8:90:
09:b3:4e:86:31:d9:80:4d:60:07:60:f2:77:48:07:
85:a4:d1:22:79:83:94:ef:66:15:88:ad:1b:b7:59:
51:ae:5f:4b:0f:80:b5:30:29:4e:ce:77:13:25:f1:
d5:5f:ca:a3:c3:ea:cf:a1:7f:46:70:a1:e1:bc:eb:
4f:08:af:0b:2e:27:7d:b5:77:2b:7c:67:25:c6:3f:
4a:49:0b:7d:4c:69:7b:8b:9c:92:eb:d7:d8:5d:d6:
0a:cb:3f:08:be:b6:81:08:bd:14:f7:0c:69:3e:66:
14:aa:0a:1f:b3:a4:20:a6:a2:91:ac:87:57:ff:e0:
d5:bd:f6:f5:5d:37:05:f1:48:7e:6f:1d:a0:23:d1:
87:85:52:ae:a2:54:3e:b1:a3:6f:65:78:cd:80:34:
20:79:77:48:d0:66:dd:ef:57:57:27:e3:b6:d6:a5:
7c:87:e2:38:c8:4c:9c:8a:00:e5:6a:d7:2b:1d:7e:
aa:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:29:9D:C2:F4:A3:56:82:4C:C9:B5:35:F0:B7:EA:04:BF:E5:3A:7A
X509v3 Authority Key Identifier:
keyid:ED:30:A1:31:71:85:60:A3:4A:B3:49:38:84:E8:58:EC:43:1F:6A:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/eimdwvSjVoJMybU18LfqBL_lOno.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.42.223.0/24
185.231.113.0/24
194.180.224.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:86:ea:38:f1:3a:b3:44:1e:e6:c8:26:37:ab:1e:a4:1f:85:
7e:66:2b:8b:3e:3f:14:82:21:d2:a2:ec:6e:fb:69:20:a3:51:
ee:f6:c7:c7:fd:20:39:0e:80:2c:35:32:d0:26:15:d0:f6:c0:
54:5c:bd:92:af:98:ef:28:16:5a:87:ec:f9:97:20:d3:d8:b5:
f8:ba:e7:c4:f7:d3:64:fc:1e:83:0b:f8:ad:5e:bc:e5:d0:02:
a6:f2:ab:3f:bc:46:9c:a0:f1:ac:0c:c4:11:22:50:2e:00:3b:
cd:24:f9:04:c9:ec:dc:10:da:84:36:c3:f1:23:c1:2c:fd:6b:
f3:52:3a:38:44:ea:cc:f0:36:8c:5e:e0:bd:ed:8f:13:fd:e2:
8e:9e:35:8c:69:45:76:11:46:f5:27:0a:9d:68:c9:7d:2d:83:
71:d5:de:88:f4:4b:55:b4:f0:6d:78:92:bf:11:be:bf:e8:82:
96:43:d6:56:7c:29:35:cd:33:94:8b:86:d6:f2:47:19:42:cf:
8c:ae:0b:10:da:c6:5c:86:8c:70:c9:63:1e:1d:ec:91:d7:14:
a9:79:4b:b0:9c:74:e9:12:1c:bc:e6:13:1b:c0:e2:e6:98:ec:
12:dc:f0:4c:66:4e:59:cb:0d:03:96:ad:5a:92:af:bf:58:ee:
c3:2f:db:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 07:43:29 2024 by rpki-client on console-fra.rpki-client.org