Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/010161-b840-4497-afbe-4bef43d3fb17/1/eQQ8EBNI-AgH8sQGUHcT4Pt7Glc.roa
File: eQQ8EBNI-AgH8sQGUHcT4Pt7Glc.roa (raw, json)
Hash identifier: 56SVpBtyC5LcCXYFe25IEah28pGRHOrduy+kcy2LxTU=
Subject key identifier: 79:04:3C:10:13:48:F8:08:07:F2:C4:06:50:77:13:E0:FB:7B:1A:57
Certificate issuer: /CN=0d9302d546e068c2fd7677d9d5200add36c8bcd5
Certificate serial: 018F4E19F02D167BF62345F3A37F32C49B27
Authority key identifier: 0D:93:02:D5:46:E0:68:C2:FD:76:77:D9:D5:20:0A:DD:36:C8:BC:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DZMC1UbgaML9dnfZ1SAK3TbIvNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/010161-b840-4497-afbe-4bef43d3fb17/1/eQQ8EBNI-AgH8sQGUHcT4Pt7Glc.roa
Signing time: Mon 06 May 2024 13:31:13 +0000
ROA not before: Mon 06 May 2024 13:31:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200739
IP address blocks: 185.97.227.0/24 maxlen: 24
2a06:8c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/010161-b840-4497-afbe-4bef43d3fb17/1/DZMC1UbgaML9dnfZ1SAK3TbIvNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/010161-b840-4497-afbe-4bef43d3fb17/1/DZMC1UbgaML9dnfZ1SAK3TbIvNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DZMC1UbgaML9dnfZ1SAK3TbIvNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:4e:19:f0:2d:16:7b:f6:23:45:f3:a3:7f:32:c4:9b:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d9302d546e068c2fd7677d9d5200add36c8bcd5
Validity
Not Before: May 6 13:31:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=79043c101348f80807f2c406507713e0fb7b1a57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:96:65:21:b6:f2:a6:b8:f0:24:5c:89:bb:7f:
0b:62:2a:23:fc:de:35:50:49:96:c1:47:ca:04:6d:
76:06:62:85:75:29:55:ed:15:d7:e2:96:40:de:44:
f9:56:ac:5b:6c:c1:70:34:79:95:75:54:15:7f:0e:
02:12:48:74:54:16:c3:23:85:ed:41:23:27:37:e8:
30:0d:4d:06:e3:db:f0:e2:d9:b2:dd:67:c8:70:a0:
d0:31:1b:a1:43:db:02:de:f4:e1:9d:1c:2b:f1:fd:
87:3b:79:86:07:5c:05:2a:db:47:ef:81:72:90:f4:
90:8f:7b:ec:90:ff:a1:b6:79:5d:05:cf:95:3e:23:
6b:b9:a4:d5:c5:b3:ca:6c:a4:78:37:bb:8d:f1:02:
34:0a:47:19:62:ea:9b:48:df:3b:7a:a0:5b:99:a9:
bd:b7:c5:fb:e6:57:f1:48:65:38:52:46:b3:8c:10:
ce:6d:8a:fe:49:f5:c6:09:7e:1d:8e:35:ca:9b:bf:
61:6a:7e:32:60:dd:e5:2a:ef:9e:34:08:38:94:64:
ee:ec:3b:a3:8e:dd:c5:94:0d:91:02:c5:e5:94:1b:
47:7e:c9:44:4c:95:2b:3d:c9:08:0f:a7:7a:5b:79:
0d:94:2b:7e:f7:8d:41:b2:24:da:51:8d:3c:58:e6:
9b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:04:3C:10:13:48:F8:08:07:F2:C4:06:50:77:13:E0:FB:7B:1A:57
X509v3 Authority Key Identifier:
keyid:0D:93:02:D5:46:E0:68:C2:FD:76:77:D9:D5:20:0A:DD:36:C8:BC:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DZMC1UbgaML9dnfZ1SAK3TbIvNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/010161-b840-4497-afbe-4bef43d3fb17/1/eQQ8EBNI-AgH8sQGUHcT4Pt7Glc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/010161-b840-4497-afbe-4bef43d3fb17/1/DZMC1UbgaML9dnfZ1SAK3TbIvNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.97.227.0/24
IPv6:
2a06:8c0::/29
Signature Algorithm: sha256WithRSAEncryption
85:d8:88:a6:d1:e3:d7:b5:87:0d:1b:3c:6d:fb:bd:3a:a0:27:
9e:47:83:c2:4a:80:28:c5:f7:a0:8f:f8:3e:30:ed:6c:6b:d3:
8e:9c:94:4a:6e:e7:9b:b5:e5:49:1f:a7:7b:a2:95:09:12:8a:
8e:a8:c8:ce:8b:e2:33:01:22:5d:6e:26:ae:64:c6:ea:ae:04:
19:6e:3b:51:d5:50:65:b6:77:f5:ed:aa:7e:0d:15:49:d1:b9:
0a:bd:8e:46:64:e9:03:48:42:d7:e3:f5:d1:ab:2f:39:83:a3:
53:3e:7b:34:fb:67:2f:08:4c:36:66:58:50:d7:e6:c4:e0:6e:
9c:3f:4b:1f:8b:6b:3f:40:40:4d:57:af:6a:e9:75:a3:93:3d:
80:f5:cf:55:53:4a:68:77:d2:12:c1:99:7a:ee:ff:a4:c0:4e:
3a:56:4d:4e:42:a7:e1:24:05:f4:24:c4:99:30:f0:fc:4a:4d:
f6:5f:54:5d:5c:07:f0:88:de:48:b1:c7:fa:49:ee:07:c8:bf:
05:9e:c4:d8:f7:fa:5b:23:88:63:67:1a:42:7f:bc:90:b7:6c:
28:dc:d7:b4:53:66:b4:b4:c7:97:3e:95:58:9e:81:ed:1e:63:
78:ed:ee:af:b6:cf:16:be:03:b1:f0:92:b7:90:3c:f2:7b:70:
fe:59:07:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 21:12:42 2024 by rpki-client on console-ams.rpki-client.org