Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/4edda4-ebc5-4434-bb91-f7710a030fa2/1/EztB8IKdtbGF9QGK1lztPbDMjCA.roa
File: EztB8IKdtbGF9QGK1lztPbDMjCA.roa (raw, json)
Hash identifier: +BHlhr/9+RXgmjD/HTIuYhMOolhL2+ywgFuegAEpdB8=
Subject key identifier: 13:3B:41:F0:82:9D:B5:B1:85:F5:01:8A:D6:5C:ED:3D:B0:CC:8C:20
Certificate issuer: /CN=7a704007e2135c8b1278035ba7642b99159444b1
Certificate serial: 018CC94AB44F928C95B5F4701B4A5733186E
Authority key identifier: 7A:70:40:07:E2:13:5C:8B:12:78:03:5B:A7:64:2B:99:15:94:44:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/enBAB-ITXIsSeANbp2QrmRWURLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/4edda4-ebc5-4434-bb91-f7710a030fa2/1/EztB8IKdtbGF9QGK1lztPbDMjCA.roa
Signing time: Tue 02 Jan 2024 08:29:25 +0000
ROA not before: Tue 02 Jan 2024 08:29:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15600
IP address blocks: 5.149.16.0/20 maxlen: 20
185.74.148.0/22 maxlen: 22
2a00:d260::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/4edda4-ebc5-4434-bb91-f7710a030fa2/1/enBAB-ITXIsSeANbp2QrmRWURLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/4edda4-ebc5-4434-bb91-f7710a030fa2/1/enBAB-ITXIsSeANbp2QrmRWURLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/enBAB-ITXIsSeANbp2QrmRWURLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4a:b4:4f:92:8c:95:b5:f4:70:1b:4a:57:33:18:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a704007e2135c8b1278035ba7642b99159444b1
Validity
Not Before: Jan 2 08:29:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=133b41f0829db5b185f5018ad65ced3db0cc8c20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:3f:d3:89:c6:32:9d:23:04:ec:46:67:1f:2e:
b5:1e:7e:38:66:df:c5:04:f7:91:c2:0f:39:fa:a9:
8c:7b:db:56:84:2f:a7:92:b7:d1:70:28:a3:3e:c6:
80:30:e5:18:11:0f:08:43:82:4a:3d:53:eb:30:51:
c7:97:f4:4e:31:37:b6:7d:21:41:df:88:8d:10:d0:
f5:fa:70:db:63:58:d2:d2:aa:ad:f7:8f:0f:6a:d4:
61:4f:49:1a:40:e7:47:c4:46:57:a5:cb:62:b8:31:
08:35:7f:75:22:d8:20:3e:03:f8:27:0b:61:f4:41:
12:d3:74:ef:89:67:b8:93:bf:24:11:3d:03:ce:5d:
8b:7e:a4:df:61:79:64:ad:2e:f3:7d:72:7d:1a:61:
d5:b5:c3:53:34:ba:ce:54:0f:3f:03:2e:76:70:26:
04:a8:3d:a6:f6:66:b7:a7:5b:65:31:1a:58:7c:ca:
b2:4a:f7:99:dd:07:eb:a2:4a:d8:af:53:6b:e4:8f:
2a:2c:23:bd:5d:72:d5:69:77:ac:83:23:46:38:bd:
3e:2a:8a:fb:4c:3c:ff:2a:96:61:9d:cf:e0:7d:c8:
68:68:4f:a0:0a:32:48:8e:d1:65:54:06:56:04:a2:
33:1d:63:f7:ce:4e:d8:19:14:07:8f:8f:18:c9:98:
32:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:3B:41:F0:82:9D:B5:B1:85:F5:01:8A:D6:5C:ED:3D:B0:CC:8C:20
X509v3 Authority Key Identifier:
keyid:7A:70:40:07:E2:13:5C:8B:12:78:03:5B:A7:64:2B:99:15:94:44:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/enBAB-ITXIsSeANbp2QrmRWURLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/4edda4-ebc5-4434-bb91-f7710a030fa2/1/EztB8IKdtbGF9QGK1lztPbDMjCA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/4edda4-ebc5-4434-bb91-f7710a030fa2/1/enBAB-ITXIsSeANbp2QrmRWURLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.149.16.0/20
185.74.148.0/22
IPv6:
2a00:d260::/29
Signature Algorithm: sha256WithRSAEncryption
95:ef:fc:b3:e6:0e:f3:8c:7a:b1:24:54:aa:42:07:39:9f:e9:
90:87:99:c8:5d:f6:39:be:cb:70:95:e0:cc:f4:05:18:70:64:
a6:cd:a3:a3:58:c6:65:e3:37:de:8d:43:f5:7f:23:3d:08:cf:
8c:54:cd:09:03:d5:91:39:d8:02:df:f3:b3:7c:b8:4f:cb:a3:
f0:47:8f:b9:90:71:8b:45:d3:19:2e:7a:3b:3e:23:34:a5:4e:
c5:1d:dc:86:33:d0:5d:41:b3:20:3f:0b:d1:0f:73:f5:de:4f:
cf:60:1c:ed:ca:e7:9d:5e:78:1b:78:50:4b:28:73:44:fb:f6:
13:c8:32:3d:84:37:1f:25:c7:1b:58:b0:5a:73:8c:20:29:e8:
12:31:0f:f1:11:56:86:e2:26:f7:2c:58:62:7f:1c:ea:8d:64:
8a:47:1d:51:40:29:76:12:2d:42:47:4e:75:89:47:d2:62:23:
25:92:15:50:e4:ed:34:79:1f:b4:4e:75:10:26:40:d2:27:3d:
a4:19:95:a1:1f:c1:14:03:d1:99:bb:77:15:68:62:c8:38:29:
09:aa:6e:52:da:83:e4:d6:fd:8e:93:5f:83:70:d7:42:63:c9:
17:60:c4:d5:3a:45:11:20:05:99:7a:07:ab:fe:b3:45:b2:68:
ea:ea:d0:b3
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYzJSrRPkoyVtfRwG0pXMxhuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhNzA0MDA3ZTIxMzVjOGIxMjc4MDM1YmE3NjQyYjk5MTU5
NDQ0YjEwHhcNMjQwMTAyMDgyOTI1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMzNiNDFmMDgyOWRiNWIxODVmNTAxOGFkNjVjZWQzZGIwY2M4YzIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzT/TicYynSME7EZnHy61Hn44Zt/F
BPeRwg85+qmMe9tWhC+nkrfRcCijPsaAMOUYEQ8IQ4JKPVPrMFHHl/ROMTe2fSFB
34iNEND1+nDbY1jS0qqt948PatRhT0kaQOdHxEZXpctiuDEINX91ItggPgP4Jwth
9EES03TviWe4k78kET0Dzl2LfqTfYXlkrS7zfXJ9GmHVtcNTNLrOVA8/Ay52cCYE
qD2m9ma3p1tlMRpYfMqySveZ3QfrokrYr1Nr5I8qLCO9XXLVaXesgyNGOL0+Kor7
TDz/KpZhnc/gfchoaE+gCjJIjtFlVAZWBKIzHWP3zk7YGRQHj48YyZgy9QIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFBM7QfCCnbWxhfUBitZc7T2wzIwgMB8GA1UdIwQY
MBaAFHpwQAfiE1yLEngDW6dkK5kVlESxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZW5CQUItSVRYSXNTZUFOYnAyUXJtUldVUkxFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi80ZWRkYTQtZWJjNS00NDM0LWJiOTEt
Zjc3MTBhMDMwZmEyLzEvRXp0QjhJS2R0YkdGOVFHSzFsenRQYkRNakNBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi80ZWRkYTQtZWJjNS00NDM0LWJiOTEtZjc3MTBhMDMwZmEy
LzEvZW5CQUItSVRYSXNTZUFOYnAyUXJtUldVUkxFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQEBZUQAwQC
uUqUMA0EAgACMAcDBQMqANJgMA0GCSqGSIb3DQEBCwUAA4IBAQCV7/yz5g7zjHqx
JFSqQgc5n+mQh5nIXfY5vstwleDM9AUYcGSmzaOjWMZl4zfejUP1fyM9CM+MVM0J
A9WROdgC3/OzfLhPy6PwR4+5kHGLRdMZLno7PiM0pU7FHdyGM9BdQbMgPwvRD3P1
3k/PYBztyuedXngbeFBLKHNE+/YTyDI9hDcfJccbWLBac4wgKegSMQ/xEVaG4ib3
LFhifxzqjWSKRx1RQCl2Ei1CR051iUfSYiMlkhVQ5O00eR+0TnUQJkDSJz2kGZWh
H8EUA9GZu3cVaGLIOCkJqm5S2oPk1v2Ok1+DcNdCY8kXYMTVOkURIAWZeger/rNF
smjq6tCz
-----END CERTIFICATE-----
Generated at Sat Nov 23 06:22:04 2024 by rpki-client on console-fra.rpki-client.org