Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/eID-bGZfU2__xCPzV8MEtG8M23s.roa
File: eID-bGZfU2__xCPzV8MEtG8M23s.roa (raw, json)
Hash identifier: /vrxutE/BySGIu7oEczoJgJ/meXnz22oI8p8fOStBNs=
Subject key identifier: 78:80:FE:6C:66:5F:53:6F:FF:C4:23:F3:57:C3:04:B4:6F:0C:DB:7B
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 018CC2DB2DFA1ACB27DC312A711A99CF6E77
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/eID-bGZfU2__xCPzV8MEtG8M23s.roa
Signing time: Mon 01 Jan 2024 02:29:53 +0000
ROA not before: Mon 01 Jan 2024 02:29:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62013
IP address blocks: 194.213.8.0/24 maxlen: 24
45.67.118.0/23 maxlen: 23
185.181.42.0/23 maxlen: 24
185.181.40.0/23 maxlen: 24
185.181.48.0/23 maxlen: 24
185.181.50.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft
rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:2d:fa:1a:cb:27:dc:31:2a:71:1a:99:cf:6e:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Jan 1 02:29:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7880fe6c665f536fffc423f357c304b46f0cdb7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:60:2d:18:2f:26:a3:2b:25:0a:ca:94:34:77:
47:21:71:5b:3f:44:0b:6b:ae:3e:89:19:a3:60:b1:
a1:37:39:94:9b:b1:93:9f:32:bb:b2:51:be:17:6c:
d4:87:ac:09:86:4f:4a:4d:6a:be:15:b6:9f:2f:52:
5d:50:4a:33:74:26:d1:4d:20:35:34:04:00:46:4b:
f4:07:ef:b3:08:e4:53:9b:e8:c4:73:f5:bd:24:53:
54:99:c7:86:54:2b:93:2d:cf:dd:f8:be:19:80:32:
7c:68:9d:b5:92:4f:82:94:90:94:14:ee:e9:03:17:
6a:59:5c:f0:7b:d5:20:ce:af:97:a7:8b:4c:e0:1d:
f8:98:1e:aa:83:06:c6:f1:ac:90:f8:1d:b9:c2:6a:
fb:6a:c5:da:c3:40:cb:04:d6:20:02:52:b2:78:69:
83:54:b8:68:07:df:b8:e6:05:cb:a4:f0:6f:c6:bf:
f6:32:d4:b7:56:68:e2:5d:1c:b3:f7:f0:41:1b:20:
f4:66:f3:69:9b:fd:f4:6a:c1:aa:16:c3:03:29:0b:
23:82:de:34:b2:a9:d5:a3:3b:16:e2:17:80:52:a6:
9b:18:ad:4a:ee:82:bd:9d:55:0e:d2:88:be:9c:b8:
a0:a9:7e:20:83:f9:4a:ba:1e:46:49:3e:46:58:0b:
9a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:80:FE:6C:66:5F:53:6F:FF:C4:23:F3:57:C3:04:B4:6F:0C:DB:7B
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/eID-bGZfU2__xCPzV8MEtG8M23s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.118.0/23
185.181.40.0/22
185.181.48.0/22
194.213.8.0/24
Signature Algorithm: sha256WithRSAEncryption
60:6a:77:23:19:5a:27:66:24:c6:fa:55:6d:40:24:7b:0a:fd:
f6:de:4a:5e:0a:63:ec:ba:a3:87:2a:29:d6:21:98:6a:8e:54:
59:bb:1c:f4:cf:45:3e:1a:eb:a9:cd:ca:8b:63:11:fd:bd:56:
4b:b7:67:72:9e:92:2c:47:dd:8b:3d:b4:39:99:50:bd:81:fe:
30:72:32:e4:c6:75:91:8b:b4:1c:a9:c7:aa:78:4c:fd:34:4e:
1d:a9:04:d8:56:cd:aa:ea:a9:7d:56:3b:28:19:c6:0a:6d:a5:
58:b7:f8:8f:18:ed:1f:07:24:02:ab:17:f3:d9:89:a5:f5:66:
86:88:ff:1b:f3:0b:81:4d:67:ca:73:74:20:9f:14:f5:99:e4:
58:be:da:82:29:0b:c7:44:6f:ed:09:b4:8b:fa:80:42:f8:ac:
3d:2e:89:62:0a:1e:c6:ce:e4:6f:6e:c4:6e:c3:a9:53:55:7a:
82:44:9e:92:4c:83:63:93:42:bf:65:f5:20:ee:67:18:4a:2b:
42:58:e6:74:a6:65:08:dd:d9:43:70:8b:6c:de:af:c2:f3:ac:
8c:6e:04:d9:1e:02:47:c7:f6:6a:a1:33:46:cb:90:28:4a:cc:
ff:f9:c0:4a:79:79:cd:e5:bc:49:b6:06:39:1a:bd:b7:f3:c1:
cd:6e:df:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 03:57:30 2024 by rpki-client on console-fra.rpki-client.org