Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/6db264-73d4-43ac-a97e-590b1b2a4609/1/Evho_cMgUimufNWmo89VlB8ZA3M.roa
File: Evho_cMgUimufNWmo89VlB8ZA3M.roa (raw, json)
Hash identifier: 2vAp0+W0OyinQ7bz3KRWYoOM0rGntzBMfgwLVb6cFF4=
Subject key identifier: 12:F8:68:FD:C3:20:52:29:AE:7C:D5:A6:A3:CF:55:94:1F:19:03:73
Certificate issuer: /CN=6416bc721c740c10fc7b0d8b1b358a2d35f488b7
Certificate serial: 019428272A6A6B4D35F3D804F61515DD9DE5
Authority key identifier: 64:16:BC:72:1C:74:0C:10:FC:7B:0D:8B:1B:35:8A:2D:35:F4:88:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBa8chx0DBD8ew2LGzWKLTX0iLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/6db264-73d4-43ac-a97e-590b1b2a4609/1/Evho_cMgUimufNWmo89VlB8ZA3M.roa
Signing time: Thu 02 Jan 2025 17:54:02 +0000
ROA not before: Thu 02 Jan 2025 17:54:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43973
IP address blocks: 79.142.16.0/20 maxlen: 20
79.142.16.0/23 maxlen: 24
79.142.18.0/23 maxlen: 24
79.142.20.0/23 maxlen: 24
79.142.22.0/23 maxlen: 24
79.142.24.0/23 maxlen: 24
79.142.26.0/23 maxlen: 24
79.142.28.0/23 maxlen: 24
79.142.30.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/6db264-73d4-43ac-a97e-590b1b2a4609/1/ZBa8chx0DBD8ew2LGzWKLTX0iLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/6db264-73d4-43ac-a97e-590b1b2a4609/1/ZBa8chx0DBD8ew2LGzWKLTX0iLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZBa8chx0DBD8ew2LGzWKLTX0iLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 05:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:2a:6a:6b:4d:35:f3:d8:04:f6:15:15:dd:9d:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6416bc721c740c10fc7b0d8b1b358a2d35f488b7
Validity
Not Before: Jan 2 17:54:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=12f868fdc3205229ae7cd5a6a3cf55941f190373
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:71:95:13:54:db:91:7e:a0:f9:74:bb:75:86:
3b:06:d4:b3:4f:cf:10:e2:cd:53:3f:87:43:28:b9:
7d:ea:9e:41:74:52:df:00:4a:c3:9b:ef:7f:89:f4:
db:b2:97:06:41:f7:34:ff:ad:26:b9:13:4d:3c:f0:
ec:61:a1:3e:de:c2:63:1c:87:8b:3e:be:a2:3a:19:
e2:ff:51:15:90:95:b4:34:d0:d9:e9:c3:a4:9a:e2:
e4:f8:82:33:1c:8b:15:20:49:d2:bc:d0:50:60:53:
a8:2f:fc:85:ae:ba:cb:4b:3e:c0:a8:33:e8:7f:c8:
91:b3:48:a3:22:68:12:34:ac:13:b0:36:6e:22:82:
05:4c:fb:87:e7:60:34:05:28:c3:f2:65:c2:d9:a0:
df:08:e3:4a:b1:f9:66:bf:ec:aa:e8:a1:6e:3c:29:
ea:2e:a2:d9:e1:3c:41:5e:ff:33:8d:33:8d:d0:ae:
c7:28:a1:b3:4c:24:cb:c8:94:ba:1a:02:99:ab:75:
2d:f5:6f:e8:b7:a5:94:53:8f:1d:78:3d:b9:0d:af:
57:dd:cb:06:ca:56:32:62:37:1f:e2:79:70:fe:45:
c1:c2:21:ed:eb:95:99:0f:37:43:0c:40:ad:1a:05:
30:a6:3c:c6:f2:4a:30:9f:dc:e4:6b:99:b1:6e:ce:
a0:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:F8:68:FD:C3:20:52:29:AE:7C:D5:A6:A3:CF:55:94:1F:19:03:73
X509v3 Authority Key Identifier:
keyid:64:16:BC:72:1C:74:0C:10:FC:7B:0D:8B:1B:35:8A:2D:35:F4:88:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBa8chx0DBD8ew2LGzWKLTX0iLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/6db264-73d4-43ac-a97e-590b1b2a4609/1/Evho_cMgUimufNWmo89VlB8ZA3M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/6db264-73d4-43ac-a97e-590b1b2a4609/1/ZBa8chx0DBD8ew2LGzWKLTX0iLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.142.16.0/20
Signature Algorithm: sha256WithRSAEncryption
a3:3c:c7:a9:5e:a6:1d:1c:b5:e3:85:63:c7:df:0b:14:20:54:
07:75:64:e9:3c:e2:a5:c1:c3:3e:f9:8f:4d:ce:41:cb:ab:b0:
8d:8c:29:26:7a:a3:78:07:81:f9:e7:bc:4c:a4:04:e0:b8:00:
a5:a2:84:ca:88:f0:c6:46:01:28:ac:e9:fc:64:f5:1c:33:bd:
ea:62:8b:b0:fd:b3:f3:04:c6:21:b4:7b:e2:87:c8:94:bf:2b:
26:e3:a3:c4:91:20:0e:83:d6:8a:07:22:7f:a3:24:cd:5e:f7:
07:62:88:64:9d:34:f7:87:91:fe:b3:be:43:b8:37:63:9d:f0:
6c:15:b7:c0:0e:11:72:d9:1d:1d:02:49:05:b9:bc:b2:60:f8:
1e:c1:5e:d3:33:9f:93:a9:06:8d:76:a7:b1:aa:96:ce:fa:ad:
79:8f:69:4d:b6:2e:80:d3:ee:1a:94:2a:a5:c7:3f:70:dc:ed:
97:43:c6:58:a7:20:8e:0e:04:b5:7f:58:07:e8:fc:e7:79:d9:
66:be:b0:09:0f:dd:d5:b6:bd:ff:ee:a3:80:ab:32:e2:aa:42:
86:5a:71:ac:5c:3d:0c:93:ab:4a:4d:de:cb:e0:12:81:f0:6e:
ba:29:5b:52:d3:24:d5:00:16:57:c6:ae:54:98:0d:1f:82:4e:
e6:0c:19:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:35:32 2025 by rpki-client