Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/Eb12fKdYb4OzYjj45Y3LG0UNXGk.roa
File: Eb12fKdYb4OzYjj45Y3LG0UNXGk.roa (raw, json)
Hash identifier: ox5WyLHo6CX3fG10cgG8piEmm6y60WPiJkelTJMRWG0=
Subject key identifier: 11:BD:76:7C:A7:58:6F:83:B3:62:38:F8:E5:8D:CB:1B:45:0D:5C:69
Certificate issuer: /CN=5853e65a3087b4ca85c8802b60ff0f02b4106d97
Certificate serial: 018CC26D481B3982DCF266D90F00B7EE6770
Authority key identifier: 58:53:E6:5A:30:87:B4:CA:85:C8:80:2B:60:FF:0F:02:B4:10:6D:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WFPmWjCHtMqFyIArYP8PArQQbZc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/Eb12fKdYb4OzYjj45Y3LG0UNXGk.roa
Signing time: Mon 01 Jan 2024 00:29:50 +0000
ROA not before: Mon 01 Jan 2024 00:29:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51740
IP address blocks: 95.170.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/WFPmWjCHtMqFyIArYP8PArQQbZc.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/WFPmWjCHtMqFyIArYP8PArQQbZc.mft
rsync://rpki.ripe.net/repository/DEFAULT/WFPmWjCHtMqFyIArYP8PArQQbZc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Jun 2024 22:02:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:48:1b:39:82:dc:f2:66:d9:0f:00:b7:ee:67:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5853e65a3087b4ca85c8802b60ff0f02b4106d97
Validity
Not Before: Jan 1 00:29:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=11bd767ca7586f83b36238f8e58dcb1b450d5c69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:94:7e:5d:d8:a6:1a:7e:db:49:d7:1b:08:07:
5d:f5:ae:3b:c1:ee:ab:be:ac:9d:fc:1e:4a:16:3d:
06:a4:0e:c6:ab:6b:a4:a3:10:f7:f5:31:aa:ce:77:
b6:00:7e:8f:46:2e:88:70:f3:17:db:0a:46:83:6a:
d5:51:8f:88:f2:3d:1f:a5:63:af:3e:ba:de:07:db:
b8:c2:6b:58:00:bd:76:c8:67:8e:17:93:17:90:c6:
4c:85:54:30:4c:6a:15:7a:4d:5a:45:21:4a:88:41:
34:c7:30:34:e2:08:d2:52:cc:67:7d:1b:ee:33:f4:
6e:f5:b7:d0:45:70:20:d2:9c:2e:90:37:74:0b:ae:
75:a3:11:87:d8:82:db:4f:34:20:35:ba:d8:74:81:
24:82:e4:98:22:ca:70:c3:ea:ef:65:a6:a7:52:55:
06:dc:fe:e3:c0:d5:1e:ca:4a:ec:28:b6:d7:b2:a2:
d1:92:13:c2:9b:01:96:1b:33:b5:47:c7:94:40:f5:
ce:26:5a:ab:3a:90:b3:24:81:5f:26:bc:aa:de:98:
49:01:a0:62:91:71:ba:06:5a:17:f9:91:35:ff:34:
33:b8:18:7f:9f:e0:2b:67:38:80:19:a8:a7:11:b5:
1f:54:2e:f6:7a:a2:cd:37:49:5f:77:32:a4:d9:35:
75:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:BD:76:7C:A7:58:6F:83:B3:62:38:F8:E5:8D:CB:1B:45:0D:5C:69
X509v3 Authority Key Identifier:
keyid:58:53:E6:5A:30:87:B4:CA:85:C8:80:2B:60:FF:0F:02:B4:10:6D:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WFPmWjCHtMqFyIArYP8PArQQbZc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/Eb12fKdYb4OzYjj45Y3LG0UNXGk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/WFPmWjCHtMqFyIArYP8PArQQbZc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.170.104.0/24
Signature Algorithm: sha256WithRSAEncryption
15:70:ac:ec:cd:8f:a8:14:f7:3e:d9:e6:bc:bf:cf:6f:54:95:
28:d7:86:79:c6:87:b8:b7:f1:5b:3c:a5:16:93:f5:d9:d8:f5:
74:a8:57:63:92:29:4d:d2:b5:65:a7:f7:77:89:53:fc:34:9f:
6e:11:ed:3b:df:8e:8d:c7:4b:c2:ee:67:70:46:93:e6:05:88:
1f:9b:fd:09:43:fb:d5:5c:40:c0:b0:38:a4:5b:08:07:05:b4:
13:fc:80:2c:64:46:e4:be:9c:28:dc:a0:b7:b2:4c:15:a4:fd:
70:b3:8c:38:46:31:e2:95:64:07:c3:95:b1:53:4a:4a:29:4c:
d5:42:7d:c2:c8:5f:e8:93:41:cd:17:58:6b:2c:48:bb:a2:fc:
7f:f5:ef:f1:5e:ab:5c:cc:d9:d4:44:8b:41:7f:25:04:26:47:
11:6f:70:67:25:77:ab:b7:94:81:26:64:3d:be:4d:e2:3b:60:
ac:98:55:cd:fc:e9:61:67:be:e2:c2:20:d4:0a:f7:d0:a2:41:
da:64:11:a7:4b:24:18:11:66:93:f0:52:85:40:99:22:20:63:
a6:f1:43:cf:97:3b:91:17:44:cd:e3:15:c0:dd:0c:88:bc:69:
3a:2d:5a:5e:27:ce:d6:4a:fa:57:05:90:e0:56:cf:90:7d:0c:
fc:f9:8b:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 04:42:27 2024 by rpki-client on console-ams.rpki-client.org