Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/6cb714-c714-4281-8ada-43ce949663d9/1/EspJBVYycdE5qHDW6oyXitFWRa0.roa
File: EspJBVYycdE5qHDW6oyXitFWRa0.roa (raw, json)
Hash identifier: 8iOp9gC5UesoR3sMPFsHvwwDTHTEjFHMrdFcg2vh4Wk=
Subject key identifier: 12:CA:49:05:56:32:71:D1:39:A8:70:D6:EA:8C:97:8A:D1:56:45:AD
Certificate issuer: /CN=7712e20f510b22b8217cdf0d211496b1b9c1edb8
Certificate serial: 018CC94E4C415D8B4C80E04806D0DD81DE97
Authority key identifier: 77:12:E2:0F:51:0B:22:B8:21:7C:DF:0D:21:14:96:B1:B9:C1:ED:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dxLiD1ELIrghfN8NIRSWsbnB7bg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/6cb714-c714-4281-8ada-43ce949663d9/1/EspJBVYycdE5qHDW6oyXitFWRa0.roa
Signing time: Tue 02 Jan 2024 08:33:20 +0000
ROA not before: Tue 02 Jan 2024 08:33:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59919
IP address blocks: 185.204.220.0/22 maxlen: 24
5.178.88.0/21 maxlen: 24
185.187.172.0/22 maxlen: 24
185.248.240.0/22 maxlen: 24
185.136.136.0/22 maxlen: 24
185.60.188.0/22 maxlen: 24
45.152.144.0/22 maxlen: 24
2.59.140.0/22 maxlen: 24
2a01:9ac0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/6cb714-c714-4281-8ada-43ce949663d9/1/dxLiD1ELIrghfN8NIRSWsbnB7bg.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/6cb714-c714-4281-8ada-43ce949663d9/1/dxLiD1ELIrghfN8NIRSWsbnB7bg.mft
rsync://rpki.ripe.net/repository/DEFAULT/dxLiD1ELIrghfN8NIRSWsbnB7bg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 19 Jun 2024 07:33:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:4c:41:5d:8b:4c:80:e0:48:06:d0:dd:81:de:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7712e20f510b22b8217cdf0d211496b1b9c1edb8
Validity
Not Before: Jan 2 08:33:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=12ca4905563271d139a870d6ea8c978ad15645ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d8:0c:71:4c:f4:e1:06:c3:8d:de:f3:f8:2d:
ae:b7:00:33:88:62:68:13:fc:09:6a:b3:09:16:e7:
50:f8:b7:08:8c:fc:1e:37:61:dc:82:91:9d:c0:17:
b2:e5:8f:4d:66:e9:18:88:a8:07:66:b0:d1:1a:9e:
4a:17:69:c0:ed:81:c2:c2:a8:74:93:28:0d:42:ea:
ff:26:cf:1e:90:a0:87:ee:18:4c:da:50:9c:2f:c8:
19:b2:ec:5c:ae:ca:e0:2f:57:a1:3f:96:d4:6a:15:
ea:c5:5d:3f:b6:6e:b4:be:9e:f9:5d:55:da:5c:b4:
00:78:9a:d4:ff:0b:cb:90:a3:8a:4e:40:cf:71:f5:
6f:ed:f3:f0:62:6a:a5:4c:8e:58:ab:07:62:47:a9:
63:4e:70:42:1f:16:d7:43:9e:94:92:e6:0e:d3:f1:
d3:07:90:7d:97:6c:ee:dc:1e:4b:97:b7:d7:b9:27:
d2:2d:7b:66:14:74:39:cd:67:aa:df:28:c4:c5:cc:
af:99:a5:9c:db:42:40:cb:de:7c:76:42:17:e1:51:
35:71:44:92:fb:bf:c9:c7:98:2c:92:83:04:97:57:
b2:f4:2d:ff:2b:a8:12:c0:aa:c4:d6:d0:a4:8d:da:
d3:91:87:47:9d:c4:b6:2e:7b:51:72:03:a0:3b:5d:
df:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:CA:49:05:56:32:71:D1:39:A8:70:D6:EA:8C:97:8A:D1:56:45:AD
X509v3 Authority Key Identifier:
keyid:77:12:E2:0F:51:0B:22:B8:21:7C:DF:0D:21:14:96:B1:B9:C1:ED:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dxLiD1ELIrghfN8NIRSWsbnB7bg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6cb714-c714-4281-8ada-43ce949663d9/1/EspJBVYycdE5qHDW6oyXitFWRa0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6cb714-c714-4281-8ada-43ce949663d9/1/dxLiD1ELIrghfN8NIRSWsbnB7bg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.140.0/22
5.178.88.0/21
45.152.144.0/22
185.60.188.0/22
185.136.136.0/22
185.187.172.0/22
185.204.220.0/22
185.248.240.0/22
IPv6:
2a01:9ac0::/32
Signature Algorithm: sha256WithRSAEncryption
02:79:7b:79:24:98:9a:ec:bf:bd:0e:69:60:0d:76:e8:de:0b:
3e:74:53:d9:ea:f1:d2:a6:7c:89:f2:e8:f1:18:28:d7:4c:51:
36:f7:23:24:b1:00:01:fd:1f:c8:86:4e:a5:8e:28:2e:00:59:
b5:fe:8c:b5:bc:7d:64:f9:5b:58:e4:36:a1:a9:3b:3d:09:43:
8d:82:a2:5e:3f:ca:48:88:cf:9e:d6:16:e4:e5:3c:a6:ed:50:
68:07:7f:f8:5e:20:7e:44:d1:4d:8d:79:88:be:4d:f5:fb:0d:
d9:1c:5c:6e:2e:b1:a2:8c:3d:ec:cd:e4:e5:1b:5d:48:fd:7b:
11:96:11:85:9a:7a:54:6a:e4:a5:c0:3d:3c:ae:83:a8:4a:75:
de:8c:3b:e4:8d:34:62:76:f9:2c:b4:0f:ce:ca:3c:65:fc:13:
59:da:04:6b:e6:3a:5c:e3:2b:a0:8c:9e:08:b0:e7:c2:93:dd:
60:0c:af:d5:c0:80:93:a3:de:80:9a:27:5e:3d:3d:29:97:23:
03:36:9a:14:23:fe:1d:c1:9f:7e:4c:1c:a8:bd:e5:82:b1:2f:
d9:d3:83:ec:3e:5d:d4:c1:fb:68:0b:55:2b:d8:85:9f:fc:3c:
2e:9d:62:86:f1:1a:3a:4e:0e:cd:2e:87:a0:66:47:af:57:a3:
93:18:7e:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 18 11:28:44 2024 by rpki-client on console-ams.rpki-client.org