Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/evggUgPGcna2HTbhx_29SRdesko.roa
File: evggUgPGcna2HTbhx_29SRdesko.roa (raw, json)
Hash identifier: pawEoWYCKmw6MX54b8cCjnhH5F4ewSg67H67TYiqgS8=
Subject key identifier: 7A:F8:20:52:03:C6:72:76:B6:1D:36:E1:C7:FD:BD:49:17:5E:B2:4A
Certificate issuer: /CN=15af072f9e156abc20c468498e2323152c736ae8
Certificate serial: 018CC794BA1A8271A83E93252190321F84B5
Authority key identifier: 15:AF:07:2F:9E:15:6A:BC:20:C4:68:49:8E:23:23:15:2C:73:6A:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fa8HL54VarwgxGhJjiMjFSxzaug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/evggUgPGcna2HTbhx_29SRdesko.roa
Signing time: Tue 02 Jan 2024 00:31:02 +0000
ROA not before: Tue 02 Jan 2024 00:31:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47702
IP address blocks: 213.109.224.0/20 maxlen: 20
213.109.225.0/24 maxlen: 24
213.109.224.0/21 maxlen: 21
213.109.224.0/22 maxlen: 22
213.109.224.0/24 maxlen: 24
93.175.200.0/24 maxlen: 24
93.175.200.0/21 maxlen: 21
93.175.200.0/22 maxlen: 22
93.175.201.0/24 maxlen: 24
93.175.204.0/22 maxlen: 22
213.109.232.0/24 maxlen: 24
213.109.232.0/21 maxlen: 21
213.109.232.0/22 maxlen: 22
213.109.233.0/24 maxlen: 24
213.109.228.0/22 maxlen: 22
213.109.236.0/22 maxlen: 22
93.175.192.0/20 maxlen: 20
93.175.192.0/21 maxlen: 21
93.175.192.0/22 maxlen: 22
93.175.196.0/22 maxlen: 22
2001:67c:11d4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fa8HL54VarwgxGhJjiMjFSxzaug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 00:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:ba:1a:82:71:a8:3e:93:25:21:90:32:1f:84:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15af072f9e156abc20c468498e2323152c736ae8
Validity
Not Before: Jan 2 00:31:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7af8205203c67276b61d36e1c7fdbd49175eb24a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:25:f7:a6:64:da:3d:25:85:b9:42:23:5d:75:
98:8f:8e:e2:8d:60:9b:73:d6:5f:14:0c:5c:3d:6e:
79:d0:bc:92:11:59:42:3d:0e:37:13:00:67:8e:cd:
a0:3b:30:56:9c:31:cc:c5:e2:31:97:e6:e0:1d:9d:
45:28:81:af:01:07:5b:dc:0c:12:72:01:8f:e7:d2:
6b:34:be:e1:55:5d:c6:e0:72:f5:d4:34:09:a8:5f:
42:9f:78:ad:e4:94:09:fa:37:20:c6:9d:41:de:35:
9d:0f:29:07:e1:db:95:b4:34:36:fd:7a:78:40:69:
33:5f:fd:1c:18:f7:88:dd:79:8d:6b:fa:cc:34:74:
c2:24:62:95:6b:eb:7e:df:5e:1c:f5:c9:04:7f:a0:
67:39:e3:27:6c:5b:fe:12:25:3e:d5:a2:94:8a:fb:
e4:dc:c2:64:a0:a7:e1:38:1c:b9:9c:44:62:b8:64:
92:66:1b:36:04:58:b3:ea:db:6c:c3:9b:79:9f:22:
f2:68:74:1d:2d:1d:db:74:81:c8:32:3a:d7:bb:fb:
03:56:f4:b9:40:2d:9e:e4:8e:bd:da:7a:1a:b9:bf:
f9:75:f2:0c:d3:ca:c9:24:5e:48:1d:e6:a4:7e:05:
dd:22:5e:4a:52:b6:de:dd:2c:a2:93:30:07:09:a9:
ca:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:F8:20:52:03:C6:72:76:B6:1D:36:E1:C7:FD:BD:49:17:5E:B2:4A
X509v3 Authority Key Identifier:
keyid:15:AF:07:2F:9E:15:6A:BC:20:C4:68:49:8E:23:23:15:2C:73:6A:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fa8HL54VarwgxGhJjiMjFSxzaug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/evggUgPGcna2HTbhx_29SRdesko.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.175.192.0/20
213.109.224.0/20
IPv6:
2001:67c:11d4::/48
Signature Algorithm: sha256WithRSAEncryption
72:18:99:84:35:98:9e:e8:1f:9a:c0:e1:10:ed:7f:97:6c:be:
39:75:69:59:88:69:7a:ff:3b:39:5a:21:c0:7e:b5:a8:2f:8c:
2e:e3:13:e8:2e:3a:a4:32:5f:79:6e:50:a6:2a:fc:52:78:6a:
1b:0e:1b:ef:a7:d4:f8:50:57:c2:03:c6:58:41:60:83:71:c2:
e6:57:87:b0:59:f0:2d:c7:73:11:4a:ec:54:d4:21:11:f8:a0:
8e:de:4c:cf:ec:be:c0:d6:46:ea:cf:1f:3d:92:d1:b0:8d:79:
e2:a2:fc:86:ef:8d:39:90:e2:b4:9e:67:0a:0f:37:0a:f7:81:
5f:4f:83:75:9b:64:54:b5:4d:10:1b:3c:a9:5a:ed:60:05:b3:
cc:63:c7:cf:aa:71:e3:65:21:01:09:8f:70:de:ae:7e:7f:91:
1a:ba:d0:3f:4a:e0:63:24:92:b4:77:87:f6:79:0a:83:4b:0f:
9a:13:d8:4c:6d:ab:c9:98:e1:7a:1d:d6:99:31:fa:b9:98:9e:
60:8c:1c:62:e3:32:85:52:35:5c:63:57:24:7f:c5:ba:84:41:
6c:35:59:46:b6:07:e5:4d:ac:24:02:42:db:d5:fb:c8:c1:e5:
63:fb:5a:db:cf:f9:06:47:7a:8f:ea:4c:b5:34:4c:f9:37:54:
f4:f3:d5:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 06:20:39 2024 by rpki-client on console-ams.rpki-client.org