Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/eVDv5wMoAMXSLSwy1jQg8WUXOhA.roa
File: eVDv5wMoAMXSLSwy1jQg8WUXOhA.roa (raw, json)
Hash identifier: YAe2Rwz6+7b7nVKzOYBgWHTTbotcKR6VyBhmyhhz0IY=
Subject key identifier: 79:50:EF:E7:03:28:00:C5:D2:2D:2C:32:D6:34:20:F1:65:17:3A:10
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018CCA2A3D9B4A9C70ABCC80972190C8B421
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/eVDv5wMoAMXSLSwy1jQg8WUXOhA.roa
Signing time: Tue 02 Jan 2024 12:33:35 +0000
ROA not before: Tue 02 Jan 2024 12:33:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203553
IP address blocks: 31.148.175.0/24 maxlen: 24
92.38.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 May 2024 00:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:3d:9b:4a:9c:70:ab:cc:80:97:21:90:c8:b4:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 12:33:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7950efe7032800c5d22d2c32d63420f165173a10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:3d:e5:eb:80:13:f2:cc:d0:cb:ac:79:6c:b1:
ff:5a:e6:ca:fb:37:bd:f8:4b:e2:ff:30:1e:b3:12:
26:ae:80:22:ef:92:30:73:45:24:72:2b:78:04:fd:
a0:80:31:dd:19:c7:cf:7b:64:ea:64:89:41:47:3f:
8d:06:66:a7:22:4e:34:6c:cf:95:9c:c9:82:0c:65:
d4:4b:6b:d1:00:c2:fc:dc:e5:f9:6a:56:68:8c:de:
4d:4d:af:ba:a2:82:dd:c1:5f:bd:a7:58:bb:6c:a6:
87:ce:3e:79:94:a8:c3:aa:a0:f5:28:01:91:46:a4:
0f:8b:6f:b7:92:8e:b4:71:df:5a:4e:48:45:86:76:
f8:7f:42:29:02:14:3e:4b:f8:d7:12:24:1c:ab:1b:
a5:84:71:7c:6d:da:bb:1b:f6:a7:23:77:71:82:c1:
93:9b:dd:58:33:1a:67:94:f4:9c:16:cd:d3:b6:77:
2a:b0:af:6c:ef:ec:04:ad:02:77:26:ac:aa:3b:45:
ac:c7:c0:94:31:e4:74:f4:13:62:fc:18:ac:fe:66:
69:3e:fd:c8:9d:99:34:6a:19:d1:7f:ba:e8:95:9f:
16:ca:34:88:a5:43:a1:49:a1:be:71:59:b7:fe:8a:
bc:ad:f5:ad:c5:73:17:1b:04:4c:6a:28:bc:9d:57:
ca:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:50:EF:E7:03:28:00:C5:D2:2D:2C:32:D6:34:20:F1:65:17:3A:10
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/eVDv5wMoAMXSLSwy1jQg8WUXOhA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.148.175.0/24
92.38.5.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:81:55:fc:b4:0a:33:9f:33:57:af:7f:d1:af:e2:94:d8:dd:
37:f1:c5:60:78:4c:37:20:af:7f:ea:d0:55:e3:b3:2b:bb:dd:
44:3f:55:ba:6f:cf:c6:19:ca:53:a1:90:c3:c2:16:8e:56:59:
60:ee:b0:c3:02:3f:ea:ed:7e:96:47:eb:31:59:4f:e3:28:19:
9a:9e:35:fd:75:37:55:85:5e:f7:44:7a:fa:e2:f5:58:ee:16:
03:dc:a1:24:67:49:fd:31:ea:5b:42:c6:a4:ea:4e:ac:67:3b:
2b:b0:f4:2f:09:0f:6e:a1:16:99:7a:cb:46:7d:97:2f:0b:63:
f9:9d:60:6d:df:b2:08:4f:2c:55:f0:9d:a2:a0:c8:81:5f:70:
f5:fa:ef:6a:41:9f:5c:4e:96:7a:84:3c:8f:59:f6:ae:4c:f6:
4f:a3:f8:bf:7a:f4:ea:da:ce:48:da:d3:0f:f3:25:5e:72:8e:
96:f7:37:20:6c:fc:0c:cd:6c:ed:e0:d5:96:dc:bb:36:6e:e4:
31:48:27:ca:e1:3f:a8:55:81:31:9f:52:06:ef:1c:79:0a:6f:
c9:47:cc:a5:c0:7a:95:9c:64:82:53:d4:3b:a5:66:1b:df:16:
33:85:e3:b7:d7:7a:01:69:d4:c1:e6:bc:66:11:4d:3b:25:02:
af:73:f5:14
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzKKj2bSpxwq8yAlyGQyLQhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh
YWVmNDIwHhcNMjQwMTAyMTIzMzM1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OTUwZWZlNzAzMjgwMGM1ZDIyZDJjMzJkNjM0MjBmMTY1MTczYTEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkj3l64AT8szQy6x5bLH/WubK+ze9
+Evi/zAesxImroAi75Iwc0Ukcit4BP2ggDHdGcfPe2TqZIlBRz+NBmanIk40bM+V
nMmCDGXUS2vRAML83OX5alZojN5NTa+6ooLdwV+9p1i7bKaHzj55lKjDqqD1KAGR
RqQPi2+3ko60cd9aTkhFhnb4f0IpAhQ+S/jXEiQcqxulhHF8bdq7G/anI3dxgsGT
m91YMxpnlPScFs3TtncqsK9s7+wErQJ3JqyqO0Wsx8CUMeR09BNi/Bis/mZpPv3I
nZk0ahnRf7rolZ8WyjSIpUOhSaG+cVm3/oq8rfWtxXMXGwRMaii8nVfK/QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFHlQ7+cDKADF0i0sMtY0IPFlFzoQMB8GA1UdIwQY
MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt
MDYyYzY5MzNhYmVkLzEvZVZEdjV3TW9BTVhTTFN3eTFqUWc4V1VYT2hBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk
LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAH5SvAwQA
XCYFMA0GCSqGSIb3DQEBCwUAA4IBAQAMgVX8tAoznzNXr3/Rr+KU2N038cVgeEw3
IK9/6tBV47Mru91EP1W6b8/GGcpToZDDwhaOVllg7rDDAj/q7X6WR+sxWU/jKBma
njX9dTdVhV73RHr64vVY7hYD3KEkZ0n9MepbQsak6k6sZzsrsPQvCQ9uoRaZestG
fZcvC2P5nWBt37IITyxV8J2ioMiBX3D1+u9qQZ9cTpZ6hDyPWfauTPZPo/i/evTq
2s5I2tMP8yVeco6W9zcgbPwMzWzt4NWW3Ls2buQxSCfK4T+oVYExn1IG7xx5Cm/J
R8ylwHqVnGSCU9Q7pWYb3xYzheO313oBadTB5rxmEU07JQKvc/UU
-----END CERTIFICATE-----
Generated at Wed May 29 09:37:03 2024 by rpki-client on console-fra.rpki-client.org