Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/EA6XqajfksUO2AlFrgKK7Way32s.roa
File: EA6XqajfksUO2AlFrgKK7Way32s.roa (raw, json)
Hash identifier: sAC22PrpDsDBqxU+19mYCC1AnmB008Gs1yQiqfziUxM=
Subject key identifier: 10:0E:97:A9:A8:DF:92:C5:0E:D8:09:45:AE:02:8A:ED:66:B2:DF:6B
Certificate issuer: /CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Certificate serial: 018FA56AFAC434E7217094890B44BC40A874
Authority key identifier: E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/EA6XqajfksUO2AlFrgKK7Way32s.roa
Signing time: Thu 23 May 2024 12:26:42 +0000
ROA not before: Thu 23 May 2024 12:26:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211318
IP address blocks: 2a07:4a00::/29 maxlen: 29
2a0a:37c0::/29 maxlen: 29
2a0b:9800::/29 maxlen: 29
2a0b:a280::/29 maxlen: 29
2a0b:a300::/29 maxlen: 29
2a0c:7440::/29 maxlen: 29
2a0c:74c0::/29 maxlen: 29
2a0c:7540::/29 maxlen: 29
2a0d:2cc0::/29 maxlen: 29
2a0d:88c0::/29 maxlen: 29
2a0f:1180::/29 maxlen: 29
2a0f:2380::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft
rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Jun 2024 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:a5:6a:fa:c4:34:e7:21:70:94:89:0b:44:bc:40:a8:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Validity
Not Before: May 23 12:26:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=100e97a9a8df92c50ed80945ae028aed66b2df6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:86:70:7d:9e:12:13:b7:21:1a:4a:b4:05:c3:
a3:4d:44:ef:b5:c5:1b:96:92:34:4a:d0:c6:8c:38:
f6:95:30:af:c0:be:d1:52:50:66:4d:12:e0:0b:4b:
6d:ec:cc:18:b3:e3:de:83:3f:c5:ae:85:5d:47:56:
c4:f3:13:d0:39:7d:ca:b1:ae:c8:b5:10:3e:68:0d:
2c:ab:f3:9a:b6:36:5a:ae:fd:18:61:ae:aa:36:2f:
aa:e1:66:e6:60:eb:ed:cd:0d:eb:14:1a:8c:3a:62:
49:c8:6a:09:6a:08:5d:2b:4c:32:c9:04:ab:2a:0f:
05:99:3d:3e:cf:b4:37:ef:30:5c:01:32:01:4b:98:
ad:ef:85:09:1b:20:7f:ce:a7:df:fd:3b:e3:d8:da:
26:12:18:1d:ac:56:80:31:ba:23:5c:78:86:4a:52:
b6:90:8c:93:f1:05:1c:be:a6:7e:18:93:5f:0b:05:
a4:c7:b6:a1:26:06:72:d5:67:1f:e3:05:13:dc:21:
b2:c6:d7:da:7b:1c:66:0e:38:b8:8d:c7:54:b8:f6:
b0:ab:cd:34:cc:9f:7a:89:bd:2b:e5:04:b6:45:2d:
74:d5:6b:c3:2b:1d:0c:27:29:8e:6e:49:e3:e0:07:
a8:fc:e5:2d:19:d3:68:ce:bd:43:d2:ae:19:11:2d:
f8:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:0E:97:A9:A8:DF:92:C5:0E:D8:09:45:AE:02:8A:ED:66:B2:DF:6B
X509v3 Authority Key Identifier:
keyid:E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/EA6XqajfksUO2AlFrgKK7Way32s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:4a00::/29
2a0a:37c0::/29
2a0b:9800::/29
2a0b:a280::/29
2a0b:a300::/29
2a0c:7440::/29
2a0c:74c0::/29
2a0c:7540::/29
2a0d:2cc0::/29
2a0d:88c0::/29
2a0f:1180::/29
2a0f:2380::/29
Signature Algorithm: sha256WithRSAEncryption
21:dc:d0:a6:6e:89:37:aa:07:34:e2:d1:9f:b9:bc:c5:dc:eb:
a9:48:c0:44:80:ba:e5:94:da:b6:cd:8c:ed:70:e1:bf:b3:5d:
9b:b3:b5:34:0f:39:8c:53:f6:9b:d4:6d:2a:34:af:62:ef:d5:
ca:0a:64:e6:ab:30:70:fc:5d:2e:e5:bb:bd:6e:cc:0d:31:25:
73:00:d5:d1:f3:ef:2c:38:40:f4:2d:8f:18:f1:c8:5d:12:41:
b8:0f:42:4d:8b:fe:1c:e5:eb:fa:96:8b:f1:c6:e7:bb:7b:3b:
f3:60:5f:f3:b2:bd:f5:86:05:ef:08:0c:b9:ae:bd:ae:ed:71:
fb:d2:8e:c6:22:25:9e:7d:ff:32:3f:4e:2c:85:04:50:ea:82:
a6:df:ee:7b:f2:42:b4:57:4f:d4:d4:21:ce:11:22:de:74:5c:
34:9f:c3:ee:28:65:31:58:15:af:f4:cd:78:9e:09:4b:3e:7a:
11:37:59:0a:3a:84:ef:90:44:b4:99:55:74:28:76:3d:60:c4:
89:76:5e:26:2d:74:64:cd:66:21:4d:27:67:59:00:47:95:8d:
39:c3:87:d5:cc:35:67:f0:8a:7b:2d:d5:28:d2:7e:84:66:38:
1b:07:d7:f8:7a:dc:d3:0f:95:76:fe:08:81:33:94:0a:30:20:
c9:a7:22:66
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgISAY+lavrENOchcJSJC0S8QKh0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwNTU5Y2U4ODlhZTQyNDExMjFmZTBhMTY1M2U0Yjk1NWYz
ZWRmNGIwHhcNMjQwNTIzMTIyNjQyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMDBlOTdhOWE4ZGY5MmM1MGVkODA5NDVhZTAyOGFlZDY2YjJkZjZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzIZwfZ4SE7chGkq0BcOjTUTvtcUb
lpI0StDGjDj2lTCvwL7RUlBmTRLgC0tt7MwYs+Pegz/FroVdR1bE8xPQOX3Ksa7I
tRA+aA0sq/OatjZarv0YYa6qNi+q4WbmYOvtzQ3rFBqMOmJJyGoJaghdK0wyyQSr
Kg8FmT0+z7Q37zBcATIBS5it74UJGyB/zqff/Tvj2NomEhgdrFaAMbojXHiGSlK2
kIyT8QUcvqZ+GJNfCwWkx7ahJgZy1Wcf4wUT3CGyxtfaexxmDji4jcdUuPawq800
zJ96ib0r5QS2RS101WvDKx0MJymObknj4Aeo/OUtGdNozr1D0q4ZES34xwIDAQAB
o4ICVzCCAlMwHQYDVR0OBBYEFBAOl6mo35LFDtgJRa4Ciu1mst9rMB8GA1UdIwQY
MBaAFOBVnOiJrkJBEh/goWU+S5VfPt9LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEZXYzZJbXVRa0VTSC1DaFpUNUxsVjgtMzBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8xZmE0YTEtOWExYy00N2RlLWFjYTYt
OTQ0OTk1N2ZkNWE1LzEvRUE2WHFhamZrc1VPMkFsRnJnS0s3V2F5MzJzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi8xZmE0YTEtOWExYy00N2RlLWFjYTYtOTQ0OTk1N2ZkNWE1
LzEvNEZXYzZJbXVRa0VTSC1DaFpUNUxsVjgtMzBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMG0GCCsGAQUFBwEHAQH/BF4wXDBaBAIAAjBUAwUDKgdKAAMF
AyoKN8ADBQMqC5gAAwUDKguigAMFAyoLowADBQMqDHRAAwUDKgx0wAMFAyoMdUAD
BQMqDSzAAwUDKg2IwAMFAyoPEYADBQMqDyOAMA0GCSqGSIb3DQEBCwUAA4IBAQAh
3NCmbok3qgc04tGfubzF3OupSMBEgLrllNq2zYztcOG/s12bs7U0DzmMU/ab1G0q
NK9i79XKCmTmqzBw/F0u5bu9bswNMSVzANXR8+8sOED0LY8Y8chdEkG4D0JNi/4c
5ev6lovxxue7ezvzYF/zsr31hgXvCAy5rr2u7XH70o7GIiWeff8yP04shQRQ6oKm
3+578kK0V0/U1CHOESLedFw0n8PuKGUxWBWv9M14nglLPnoRN1kKOoTvkES0mVV0
KHY9YMSJdl4mLXRkzWYhTSdnWQBHlY05w4fVzDVn8Ip7LdUo0n6EZjgbB9f4etzT
D5V2/giBM5QKMCDJpyJm
-----END CERTIFICATE-----
Generated at Sun Jun 16 12:05:06 2024 by rpki-client on console-ams.rpki-client.org