Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/e1a78b-dd36-4ee9-a260-3b1aad9fdd57/1/EYM6byjqz7hlzrF6qhrYlFnpGyo.roa
File: EYM6byjqz7hlzrF6qhrYlFnpGyo.roa (raw, json)
Hash identifier: DQd9IVIgaZvOIE6rumc73rUzu7LUokRDAUy0sRrPGsc=
Subject key identifier: 11:83:3A:6F:28:EA:CF:B8:65:CE:B1:7A:AA:1A:D8:94:59:E9:1B:2A
Certificate issuer: /CN=ad102f1af17d00fd80a3d9fe9ffe81d04ce17447
Certificate serial: 018CC8DF06BCC23531F0F1A66C495256B351
Authority key identifier: AD:10:2F:1A:F1:7D:00:FD:80:A3:D9:FE:9F:FE:81:D0:4C:E1:74:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rRAvGvF9AP2Ao9n-n_6B0EzhdEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/e1a78b-dd36-4ee9-a260-3b1aad9fdd57/1/EYM6byjqz7hlzrF6qhrYlFnpGyo.roa
Signing time: Tue 02 Jan 2024 06:31:48 +0000
ROA not before: Tue 02 Jan 2024 06:31:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202022
IP address blocks: 185.160.56.0/23 maxlen: 23
185.160.58.0/24 maxlen: 24
185.56.32.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/e1a78b-dd36-4ee9-a260-3b1aad9fdd57/1/rRAvGvF9AP2Ao9n-n_6B0EzhdEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/e1a78b-dd36-4ee9-a260-3b1aad9fdd57/1/rRAvGvF9AP2Ao9n-n_6B0EzhdEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/rRAvGvF9AP2Ao9n-n_6B0EzhdEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:06:bc:c2:35:31:f0:f1:a6:6c:49:52:56:b3:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad102f1af17d00fd80a3d9fe9ffe81d04ce17447
Validity
Not Before: Jan 2 06:31:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=11833a6f28eacfb865ceb17aaa1ad89459e91b2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:aa:d4:1f:7e:e0:36:18:3f:5e:c7:74:26:6f:
ac:fc:bc:7d:43:64:4e:2f:6d:75:e9:da:47:4f:d7:
a3:03:0a:e3:15:c3:c1:31:ac:fb:07:34:6f:39:3c:
c1:ed:11:95:67:3b:97:d7:08:2f:4c:15:44:ce:07:
0f:c2:13:00:9b:66:b3:4e:79:77:6b:0c:ed:36:87:
b2:3e:4e:f9:d0:b7:1b:f0:88:be:e1:ee:e9:61:91:
f7:0c:ea:c6:26:02:78:ac:21:44:54:ef:56:e6:17:
00:cd:4f:ae:0d:03:8c:86:88:d3:06:3c:09:fd:bc:
80:36:70:f0:ff:b6:66:db:93:6e:b6:8f:aa:34:1d:
3b:34:e1:17:38:cd:38:ae:32:b4:d5:62:7a:1c:4f:
d0:73:af:98:a9:6b:fd:dd:c1:33:86:dc:62:9f:0f:
5d:6b:87:f4:9e:fa:32:bd:d1:de:ca:b6:73:c6:9d:
9c:e9:e1:80:e8:02:ad:e2:75:24:05:b6:59:76:66:
67:be:74:ff:a4:aa:bf:33:f1:68:94:3f:cf:3d:40:
f1:31:19:da:55:c8:d5:84:ea:89:52:9c:38:22:99:
65:19:5c:19:29:8d:68:10:e6:b7:d6:1e:f4:13:d0:
4b:f5:00:af:7f:d9:50:12:e0:97:3e:19:b9:19:ce:
06:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:83:3A:6F:28:EA:CF:B8:65:CE:B1:7A:AA:1A:D8:94:59:E9:1B:2A
X509v3 Authority Key Identifier:
keyid:AD:10:2F:1A:F1:7D:00:FD:80:A3:D9:FE:9F:FE:81:D0:4C:E1:74:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rRAvGvF9AP2Ao9n-n_6B0EzhdEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/e1a78b-dd36-4ee9-a260-3b1aad9fdd57/1/EYM6byjqz7hlzrF6qhrYlFnpGyo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/e1a78b-dd36-4ee9-a260-3b1aad9fdd57/1/rRAvGvF9AP2Ao9n-n_6B0EzhdEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.56.32.0/22
185.160.56.0-185.160.58.255
Signature Algorithm: sha256WithRSAEncryption
7b:3c:66:3f:9c:20:3f:4e:e1:4f:3a:6d:4c:a4:95:5c:d5:72:
03:1a:0a:af:7a:71:cc:43:47:df:67:4b:23:ad:33:95:43:06:
29:1c:4e:bf:88:fb:e8:09:ec:c7:e3:06:b2:7e:64:8f:e8:77:
92:84:a6:84:26:ba:68:e5:45:81:92:82:47:3e:7f:c5:10:af:
72:31:53:eb:15:d1:46:0d:65:82:3a:1f:e0:f6:cf:24:d0:45:
0b:57:ea:5a:73:6e:fb:ec:ee:24:f4:00:d5:2e:d8:49:2f:7f:
d9:dd:55:64:c4:a8:52:9e:a5:61:d9:f1:a0:fd:88:dd:54:ed:
17:9a:ec:0b:50:09:9e:07:fd:ab:da:a3:59:1c:87:3a:29:3e:
a8:75:91:03:1f:ba:9e:60:dd:a2:86:e4:c9:ca:8c:55:90:08:
58:48:b8:d7:c9:02:3a:99:c2:d1:35:c5:19:02:ac:b2:05:1f:
b7:98:18:ab:8f:0d:3f:f0:dc:a3:3a:93:84:6b:66:0b:aa:77:
76:6a:5e:66:ff:4f:fa:cd:0f:6b:46:6d:a2:f7:9a:6b:9a:41:
15:3f:db:9d:16:ac:35:0f:af:5f:67:2d:a7:19:61:f3:f1:c8:
5f:2d:61:e4:74:1e:b9:20:e2:ce:cf:66:52:9b:40:a7:49:07:
00:10:93:35
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jun 1 18:45:36 2024 by rpki-client on console-fra.rpki-client.org