Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/30a2bf-b51e-4d72-b409-ca8b2758be15/1/EOSy5HG_SON3zsMLWnhueB_2ym0.roa
File: EOSy5HG_SON3zsMLWnhueB_2ym0.roa (raw, json)
Hash identifier: K4wplQTjAtBbYCLAvtD1Og5hueubziKqhhO2pn/EI8Q=
Subject key identifier: 10:E4:B2:E4:71:BF:48:E3:77:CE:C3:0B:5A:78:6E:78:1F:F6:CA:6D
Certificate issuer: /CN=4f50a0dcc71c42923e407011bd212afa5c62e59d
Certificate serial: 018CC42526E955745811C60F805275696D5A
Authority key identifier: 4F:50:A0:DC:C7:1C:42:92:3E:40:70:11:BD:21:2A:FA:5C:62:E5:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T1Cg3MccQpI-QHARvSEq-lxi5Z0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/30a2bf-b51e-4d72-b409-ca8b2758be15/1/EOSy5HG_SON3zsMLWnhueB_2ym0.roa
Signing time: Mon 01 Jan 2024 08:30:18 +0000
ROA not before: Mon 01 Jan 2024 08:30:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 33915
IP address blocks: 193.176.160.0/20 maxlen: 20
194.104.64.0/20 maxlen: 20
193.176.177.0/24 maxlen: 24
194.104.70.0/24 maxlen: 24
193.176.178.0/24 maxlen: 24
193.176.176.0/24 maxlen: 24
193.176.6.0/24 maxlen: 24
193.176.8.0/21 maxlen: 21
193.176.7.0/24 maxlen: 24
193.176.159.0/24 maxlen: 24
2a00:7740::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/30a2bf-b51e-4d72-b409-ca8b2758be15/1/T1Cg3MccQpI-QHARvSEq-lxi5Z0.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/30a2bf-b51e-4d72-b409-ca8b2758be15/1/T1Cg3MccQpI-QHARvSEq-lxi5Z0.mft
rsync://rpki.ripe.net/repository/DEFAULT/T1Cg3MccQpI-QHARvSEq-lxi5Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:26:e9:55:74:58:11:c6:0f:80:52:75:69:6d:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f50a0dcc71c42923e407011bd212afa5c62e59d
Validity
Not Before: Jan 1 08:30:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=10e4b2e471bf48e377cec30b5a786e781ff6ca6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:33:80:a1:0e:80:26:9e:30:5f:e0:06:3a:38:
37:59:7e:48:4b:5a:63:2d:97:2c:3b:72:dc:1c:30:
49:66:eb:bd:ed:7b:c9:0c:98:ed:9b:0b:1b:a6:6c:
39:25:41:46:e4:c5:29:f1:49:ea:73:c5:db:3a:36:
80:80:87:42:d4:16:62:73:cd:c2:94:e9:85:77:70:
e1:a2:ad:0c:0a:47:7a:b3:c7:5c:6c:cc:39:2b:24:
0f:1b:10:a6:18:4b:82:28:6a:68:18:74:f8:61:36:
9e:d9:d2:2b:cc:91:de:d9:ed:69:ff:ee:a8:51:5f:
16:f7:fc:c7:6b:0a:b2:b6:e9:76:c4:26:99:4f:72:
62:d5:6d:3a:87:ac:22:fd:74:17:9c:d0:e0:37:be:
5e:c0:3c:83:2e:6b:23:5f:c8:ce:ac:42:65:cc:9d:
30:56:03:41:d1:c5:d2:24:4e:c9:ba:fe:56:04:1a:
27:21:83:0a:62:e8:0b:04:05:13:9f:16:62:7f:a6:
c1:fd:ad:d5:44:34:e3:e5:6a:52:39:09:b3:c3:a1:
4f:74:97:1a:84:f2:be:f3:db:91:00:42:dd:ff:4f:
a1:64:06:72:ca:98:99:b9:65:2c:84:0a:a6:7b:06:
6b:8b:45:3f:9a:f3:71:a8:8a:58:92:94:86:2c:4f:
b4:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:E4:B2:E4:71:BF:48:E3:77:CE:C3:0B:5A:78:6E:78:1F:F6:CA:6D
X509v3 Authority Key Identifier:
keyid:4F:50:A0:DC:C7:1C:42:92:3E:40:70:11:BD:21:2A:FA:5C:62:E5:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T1Cg3MccQpI-QHARvSEq-lxi5Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/30a2bf-b51e-4d72-b409-ca8b2758be15/1/EOSy5HG_SON3zsMLWnhueB_2ym0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/30a2bf-b51e-4d72-b409-ca8b2758be15/1/T1Cg3MccQpI-QHARvSEq-lxi5Z0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.176.6.0-193.176.15.255
193.176.159.0-193.176.178.255
194.104.64.0/20
IPv6:
2a00:7740::/32
Signature Algorithm: sha256WithRSAEncryption
9a:b0:ed:22:8f:11:86:51:67:aa:71:c5:fb:47:94:e9:b2:4d:
be:f3:f8:bb:04:8c:57:73:14:c9:f3:40:b2:e0:75:a1:c7:10:
b1:9b:6a:74:f8:78:32:c4:92:1b:93:02:3d:1c:f9:0f:76:bf:
f4:75:47:3d:2d:c0:f7:26:09:12:2a:d8:ac:ac:6b:b8:fd:27:
ed:79:7b:db:ac:f5:8a:2e:b3:dd:52:03:7a:3a:f3:2d:9d:75:
46:0d:ab:28:cc:3a:12:8e:2c:1c:f1:f4:5e:99:18:6f:95:26:
2b:6e:56:c5:c1:2c:25:91:c5:94:20:aa:c9:59:28:26:1f:17:
58:95:15:2e:92:49:e8:2f:a5:5b:6b:b1:f1:cf:a5:31:a9:ae:
ea:7d:1c:bb:8a:9b:d4:8d:20:55:b8:d5:3b:fc:91:aa:4f:3d:
79:50:5f:49:ea:fa:df:c7:ff:66:69:23:5c:a8:d1:9f:9a:d2:
9d:a5:d5:be:fa:9d:b8:ef:33:16:c2:89:4b:ae:b8:49:e6:5e:
54:b6:16:89:57:24:52:05:33:d5:a8:ea:16:44:1d:09:7a:14:
2d:24:a5:c3:8c:8d:08:c0:00:40:99:2f:96:d3:74:5c:2b:61:
57:c9:ad:00:7a:ef:7f:ba:dd:71:f8:f2:d1:6c:39:25:c5:90:
0f:3f:f6:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:10:23 2024 by rpki-client on console-fra.rpki-client.org