Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/f449b3-d8a8-493e-9bd7-e88465c46186/1/eezNJBla95DkRxcoHmaYbW4nXWg.roa
File: eezNJBla95DkRxcoHmaYbW4nXWg.roa (raw, json)
Hash identifier: LKP0c5Fmkw5kxIRXYNH1/1P5NgIBmoVlav1lFkZngDs=
Subject key identifier: 79:EC:CD:24:19:5A:F7:90:E4:47:17:28:1E:66:98:6D:6E:27:5D:68
Certificate issuer: /CN=c27358682df3df8bdc7024507f92ecfc5ae097bb
Certificate serial: 018CC94E35504AAB7294EF9A2EF9DB6CE861
Authority key identifier: C2:73:58:68:2D:F3:DF:8B:DC:70:24:50:7F:92:EC:FC:5A:E0:97:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wnNYaC3z34vccCRQf5Ls_Frgl7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/f449b3-d8a8-493e-9bd7-e88465c46186/1/eezNJBla95DkRxcoHmaYbW4nXWg.roa
Signing time: Tue 02 Jan 2024 08:33:15 +0000
ROA not before: Tue 02 Jan 2024 08:33:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15703
IP address blocks: 213.193.232.0/24 maxlen: 24
213.193.232.0/21 maxlen: 24
213.193.240.0/21 maxlen: 24
213.193.250.0/23 maxlen: 24
213.193.252.0/23 maxlen: 24
213.193.254.0/23 maxlen: 24
213.239.128.0/18 maxlen: 24
213.193.192.0/21 maxlen: 24
213.193.209.0/24 maxlen: 24
213.193.208.0/21 maxlen: 24
213.193.212.0/24 maxlen: 24
213.193.216.0/22 maxlen: 24
80.247.192.0/19 maxlen: 24
213.193.220.0/22 maxlen: 24
193.28.152.0/24 maxlen: 24
87.233.0.0/16 maxlen: 24
2001:990::/32 maxlen: 32
2001:9a8::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/f449b3-d8a8-493e-9bd7-e88465c46186/1/wnNYaC3z34vccCRQf5Ls_Frgl7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/f449b3-d8a8-493e-9bd7-e88465c46186/1/wnNYaC3z34vccCRQf5Ls_Frgl7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/wnNYaC3z34vccCRQf5Ls_Frgl7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:35:50:4a:ab:72:94:ef:9a:2e:f9:db:6c:e8:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c27358682df3df8bdc7024507f92ecfc5ae097bb
Validity
Not Before: Jan 2 08:33:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=79eccd24195af790e44717281e66986d6e275d68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:01:8c:f3:92:b1:2e:83:93:46:9a:2a:56:8a:
73:c5:dd:4a:ac:9a:3f:e5:d1:54:eb:89:f9:00:2c:
ad:93:82:58:09:d2:26:a8:b4:28:c6:af:1b:54:47:
7a:68:28:cb:48:b6:25:35:b3:8c:80:53:7f:5d:b2:
34:93:63:8a:c7:d0:0a:4f:46:18:00:8a:d8:b9:b8:
03:c3:e3:90:bf:82:d2:97:82:c9:e0:d2:06:b8:00:
5e:b2:c4:02:6f:c1:be:8f:3b:30:a5:a3:1b:7d:05:
b0:ce:15:af:ef:b5:85:14:b0:79:5d:d3:b0:81:43:
03:e3:0f:6f:5a:ec:8c:74:5f:17:3d:ab:3c:90:91:
db:80:16:51:c3:7b:6d:1a:18:0b:f3:47:bb:2e:23:
32:ca:5f:83:df:a5:21:e9:07:73:38:96:01:72:cd:
26:cd:61:8d:5f:26:66:d5:a0:6f:10:83:67:a6:61:
a1:b9:e1:9d:d0:86:06:55:e0:34:de:17:aa:44:7e:
06:5f:f7:2b:33:50:f2:ca:5c:cf:36:e7:ec:bc:26:
10:2f:a0:80:5b:09:fd:dd:35:a3:86:49:eb:29:04:
f9:9d:9c:52:94:dd:75:76:55:d7:af:3d:f0:12:03:
fa:e6:99:bb:fb:af:e7:70:ab:dc:7f:47:1a:46:3f:
c5:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:EC:CD:24:19:5A:F7:90:E4:47:17:28:1E:66:98:6D:6E:27:5D:68
X509v3 Authority Key Identifier:
keyid:C2:73:58:68:2D:F3:DF:8B:DC:70:24:50:7F:92:EC:FC:5A:E0:97:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wnNYaC3z34vccCRQf5Ls_Frgl7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f449b3-d8a8-493e-9bd7-e88465c46186/1/eezNJBla95DkRxcoHmaYbW4nXWg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f449b3-d8a8-493e-9bd7-e88465c46186/1/wnNYaC3z34vccCRQf5Ls_Frgl7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.247.192.0/19
87.233.0.0/16
193.28.152.0/24
213.193.192.0/21
213.193.208.0/20
213.193.232.0-213.193.247.255
213.193.250.0-213.193.255.255
213.239.128.0/18
IPv6:
2001:990::/32
2001:9a8::/32
Signature Algorithm: sha256WithRSAEncryption
20:62:df:7d:98:f7:d5:58:93:0a:a0:0e:70:4b:58:b4:94:54:
64:dc:44:6a:f0:d8:a0:34:f9:ae:ce:62:42:85:7c:19:5b:a5:
2e:4d:1e:d9:11:36:07:e9:4b:a4:6d:d7:f3:98:3b:c7:e9:40:
cc:91:ef:ee:c8:16:8c:5a:7d:82:f7:fd:2b:28:d5:cd:8b:25:
72:ea:5c:c2:3c:20:5b:0e:83:a1:ce:30:98:ff:c8:95:4b:ac:
fc:79:e0:26:81:2e:fd:f9:b0:5e:bd:1a:b7:0e:21:6a:e4:3b:
37:8b:55:b3:8b:1f:b8:47:9b:f7:ba:9c:4d:12:26:93:10:d4:
f7:8e:b2:68:8f:af:e9:22:51:c3:8f:9a:80:9f:bd:73:e4:80:
a7:93:21:35:32:ba:fa:80:a3:46:bc:ce:bb:ac:84:53:48:1f:
d7:b1:be:36:04:4d:0a:26:f0:06:bc:7f:bc:b4:f5:06:fe:0d:
89:04:41:d1:29:fe:af:be:6e:74:cc:84:e1:41:77:33:4f:68:
9c:1f:3c:43:e4:9a:6c:bc:72:a5:de:a8:64:c3:46:d1:39:65:
96:a5:b4:1f:2b:13:7d:5f:e3:82:9a:4b:a3:c5:c9:c9:79:4c:
eb:28:e7:d6:f6:d4:47:e3:61:92:a6:91:a3:2d:66:5c:81:b4:
13:74:d6:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 06:15:29 2024 by rpki-client on console-ams.rpki-client.org