Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/eVZsr97OKedzVSfvHb26DJPYG78.roa
File: eVZsr97OKedzVSfvHb26DJPYG78.roa (raw, json)
Hash identifier: up3XKvlhA2E98huIj/wcKrRPBXZEcoz4IxBCCcVgT38=
Subject key identifier: 79:56:6C:AF:DE:CE:29:E7:73:55:27:EF:1D:BD:BA:0C:93:D8:1B:BF
Certificate issuer: /CN=e7f881401abacc88c941fdf740f1ab1536f05dba
Certificate serial: 018CCA2BB76FF0433E466722F2A46914FCE8
Authority key identifier: E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/eVZsr97OKedzVSfvHb26DJPYG78.roa
Signing time: Tue 02 Jan 2024 12:35:11 +0000
ROA not before: Tue 02 Jan 2024 12:35:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57801
IP address blocks: 84.245.96.0/24 maxlen: 24
195.12.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 05:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:b7:6f:f0:43:3e:46:67:22:f2:a4:69:14:fc:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7f881401abacc88c941fdf740f1ab1536f05dba
Validity
Not Before: Jan 2 12:35:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=79566cafdece29e7735527ef1dbdba0c93d81bbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:09:73:65:b3:03:c8:dd:3f:af:a4:fd:18:28:
83:59:d2:9f:f1:9a:3e:f6:d1:f7:39:bc:b6:cb:26:
a2:20:79:40:51:af:64:5a:4b:8c:c5:d7:e5:59:92:
8c:bb:7e:28:61:6a:94:cf:f8:ad:26:b3:1e:e2:15:
fa:52:12:b4:ac:94:06:8e:f4:2d:cf:61:4f:fb:c7:
69:62:c9:8d:5c:c4:0f:be:fc:37:07:ed:f7:7f:e6:
5e:4b:64:b1:22:77:42:7c:0b:07:6d:ba:a9:7f:d0:
52:d8:0b:c9:10:fa:6f:ea:a3:6d:0a:72:a0:48:b9:
a6:c5:46:85:d7:dd:25:13:79:0c:46:96:96:d0:36:
39:20:2d:6e:b8:5e:a6:91:19:7c:4b:c2:89:ef:98:
72:e8:d2:8f:78:b2:1b:67:9f:4d:b3:7f:6a:80:f1:
6a:5c:27:72:d9:41:62:f7:d5:5c:7c:da:c6:78:a6:
9b:13:24:7f:46:17:66:4d:f3:48:39:cf:87:9a:76:
00:1b:ed:bd:b3:6b:cf:bd:36:f1:19:e5:00:df:20:
a9:a3:01:f0:04:aa:de:ea:a5:56:50:ae:0e:c2:71:
c5:9f:37:63:f8:57:64:4a:6e:9d:48:62:47:91:10:
a1:3c:8a:59:30:00:32:e6:db:57:04:2d:06:ad:fc:
ba:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:56:6C:AF:DE:CE:29:E7:73:55:27:EF:1D:BD:BA:0C:93:D8:1B:BF
X509v3 Authority Key Identifier:
keyid:E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/eVZsr97OKedzVSfvHb26DJPYG78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.245.96.0/24
195.12.159.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:c3:c2:15:a4:73:88:24:2b:91:60:88:5b:1c:76:35:b7:9a:
fb:12:62:1e:77:58:7c:22:4a:a6:49:7c:7b:b9:5b:2b:ef:cb:
b4:72:2c:ee:e6:af:2e:d4:1d:99:6a:70:04:bd:75:d5:3e:21:
64:23:02:f4:56:9a:28:fa:c4:75:7a:4a:de:63:53:e0:f4:da:
bf:70:ae:17:d7:c8:4f:2a:5b:d6:e7:05:22:f4:65:4c:bf:ed:
53:a9:f6:17:8f:74:74:de:e4:b9:12:de:dc:35:74:8e:03:bf:
fb:2b:11:cf:35:7d:9c:a5:b9:d0:20:f1:52:0a:1d:90:c8:fa:
b2:a6:be:2c:92:c9:4e:8e:21:eb:76:b2:77:aa:cd:fa:da:73:
43:00:4f:ae:c9:1d:9b:47:b6:3e:bc:71:73:9b:25:7e:99:81:
5d:62:ca:24:9b:bf:4b:ab:53:0a:2f:a8:20:6b:56:14:04:9e:
cc:10:e9:03:55:43:3e:18:79:82:85:d0:3d:59:52:74:f5:3e:
0f:5d:66:a5:41:ed:23:7e:fa:ce:7d:76:d2:d8:9c:e9:33:ce:
3f:28:11:64:e7:09:58:0d:91:36:5e:b4:71:83:9f:db:32:60:
56:e3:59:5f:4c:64:71:b2:cd:1c:55:61:18:95:88:e1:69:eb:
d5:d2:f0:82
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzKK7dv8EM+Rmci8qRpFPzoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3Zjg4MTQwMWFiYWNjODhjOTQxZmRmNzQwZjFhYjE1MzZm
MDVkYmEwHhcNMjQwMTAyMTIzNTExWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OTU2NmNhZmRlY2UyOWU3NzM1NTI3ZWYxZGJkYmEwYzkzZDgxYmJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQlzZbMDyN0/r6T9GCiDWdKf8Zo+
9tH3Oby2yyaiIHlAUa9kWkuMxdflWZKMu34oYWqUz/itJrMe4hX6UhK0rJQGjvQt
z2FP+8dpYsmNXMQPvvw3B+33f+ZeS2SxIndCfAsHbbqpf9BS2AvJEPpv6qNtCnKg
SLmmxUaF190lE3kMRpaW0DY5IC1uuF6mkRl8S8KJ75hy6NKPeLIbZ59Ns39qgPFq
XCdy2UFi99VcfNrGeKabEyR/RhdmTfNIOc+HmnYAG+29s2vPvTbxGeUA3yCpowHw
BKre6qVWUK4OwnHFnzdj+FdkSm6dSGJHkRChPIpZMAAy5ttXBC0Grfy6UQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFHlWbK/ezinnc1Un7x29ugyT2Bu/MB8GA1UdIwQY
MBaAFOf4gUAausyIyUH990DxqxU28F26MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNV9pQlFCcTZ6SWpKUWYzM1FQR3JGVGJ3WGJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9mNTUzNGEtYTYxMy00N2JlLWI0MmIt
ZTJmYmMzYTY4ODAwLzEvZVZac3I5N09LZWR6VlNmdkhiMjZESlBZRzc4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS9mNTUzNGEtYTYxMy00N2JlLWI0MmItZTJmYmMzYTY4ODAw
LzEvNV9pQlFCcTZ6SWpKUWYzM1FQR3JGVGJ3WGJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAVPVgAwQA
wwyfMA0GCSqGSIb3DQEBCwUAA4IBAQCiw8IVpHOIJCuRYIhbHHY1t5r7EmIed1h8
IkqmSXx7uVsr78u0cizu5q8u1B2ZanAEvXXVPiFkIwL0Vpoo+sR1ekreY1Pg9Nq/
cK4X18hPKlvW5wUi9GVMv+1TqfYXj3R03uS5Et7cNXSOA7/7KxHPNX2cpbnQIPFS
Ch2QyPqypr4skslOjiHrdrJ3qs362nNDAE+uyR2bR7Y+vHFzmyV+mYFdYsokm79L
q1MKL6gga1YUBJ7MEOkDVUM+GHmChdA9WVJ09T4PXWalQe0jfvrOfXbS2JzpM84/
KBFk5wlYDZE2XrRxg5/bMmBW41lfTGRxss0cVWEYlYjhaevV0vCC
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:41:48 2024 by rpki-client on console-ams.rpki-client.org