Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/EKFwAmc-wvXZDYtsNft7ssGS1ck.roa
File: EKFwAmc-wvXZDYtsNft7ssGS1ck.roa (raw, json)
Hash identifier: VSLqavS0gfUQEgJo3uBiNSNzuKDZR57MCxbmi34EjrE=
Subject key identifier: 10:A1:70:02:67:3E:C2:F5:D9:0D:8B:6C:35:FB:7B:B2:C1:92:D5:C9
Certificate issuer: /CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Certificate serial: 018DEF80BF7B0F05E9B9D703ED477871C99D
Authority key identifier: F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/EKFwAmc-wvXZDYtsNft7ssGS1ck.roa
Signing time: Wed 28 Feb 2024 11:36:48 +0000
ROA not before: Wed 28 Feb 2024 11:36:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5511
IP address blocks: 82.140.128.0/24 maxlen: 24
82.140.129.0/24 maxlen: 24
82.140.130.0/24 maxlen: 24
82.140.159.0/24 maxlen: 24
82.140.177.0/24 maxlen: 24
82.140.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:ef:80:bf:7b:0f:05:e9:b9:d7:03:ed:47:78:71:c9:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Validity
Not Before: Feb 28 11:36:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=10a17002673ec2f5d90d8b6c35fb7bb2c192d5c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:b0:3a:19:c0:4f:48:88:6e:ab:49:7f:76:b0:
4a:04:5e:1a:32:0e:8b:83:c8:70:06:2d:91:3c:ae:
c9:80:ef:63:c9:c4:85:a3:f4:f7:6e:7f:e8:bb:b6:
69:4c:d3:24:2a:80:b4:34:3c:e7:6d:bb:3e:44:c4:
a8:7d:6c:b0:c2:3e:83:ae:d9:6f:92:bb:30:87:be:
63:61:2c:b4:2f:af:b1:db:fc:50:06:48:5b:15:65:
4f:0a:58:6e:21:64:fd:04:38:e4:f6:40:75:3b:ae:
2c:a4:51:f4:e3:52:d9:49:9a:56:b9:e6:78:a0:84:
89:4d:85:04:f7:47:cb:f7:6a:ac:97:1c:64:4d:11:
6c:a1:7a:e5:90:00:b2:9b:8d:55:b4:30:91:93:cd:
c0:a2:87:24:fc:33:b9:3b:d6:c7:e7:09:d8:34:0e:
82:c2:0b:65:81:77:34:12:cd:21:c6:6f:21:d6:40:
f6:a9:61:00:0b:37:d0:5d:d5:be:02:ed:8b:77:5f:
66:b4:9c:d2:cf:5f:12:40:0d:d2:0a:26:2d:11:84:
83:37:a4:c7:0b:3d:a4:1e:85:59:df:36:5c:be:42:
5f:d0:27:01:13:77:c6:f8:8c:55:8c:3a:9e:37:90:
38:5b:b4:fd:b0:37:a3:a4:d7:f3:2e:a9:c4:1a:c4:
5d:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:A1:70:02:67:3E:C2:F5:D9:0D:8B:6C:35:FB:7B:B2:C1:92:D5:C9
X509v3 Authority Key Identifier:
keyid:F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/EKFwAmc-wvXZDYtsNft7ssGS1ck.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.140.128.0-82.140.130.255
82.140.159.0/24
82.140.177.0/24
82.140.180.0/24
Signature Algorithm: sha256WithRSAEncryption
16:21:92:39:bb:54:88:c5:ac:cb:2b:5d:16:e2:69:36:fa:b4:
53:f7:6d:f9:f9:db:6f:74:df:cf:9f:d9:93:1f:87:37:55:ea:
d1:b7:05:58:6f:d9:f0:bd:41:6f:8f:39:fb:c8:a2:e8:eb:98:
ba:c9:5f:74:c0:d8:a8:7a:77:15:2a:77:4e:c3:ce:03:a7:d8:
f3:95:a3:99:ee:df:62:2c:61:96:6d:a6:c2:a8:11:e3:aa:4e:
34:c6:18:d3:38:36:f3:d8:41:a5:6f:c7:ca:d2:67:77:5d:4d:
52:d9:07:72:b8:86:3c:4d:e2:99:12:e7:8a:1f:a5:f6:93:31:
42:c5:a4:02:94:f8:1b:bf:1d:2b:e0:5f:02:4f:9d:a2:33:f0:
18:54:08:ab:bc:79:d3:bd:00:a0:ce:eb:12:5f:2c:08:5c:99:
b8:ec:0e:60:6c:c3:8e:ff:5a:6d:e1:94:ad:66:b7:90:80:62:
3d:3e:46:49:ae:d5:7f:cc:cf:94:1e:e3:70:29:be:81:6c:ad:
5e:77:a2:96:90:00:c6:cf:88:5a:d2:88:b2:fc:0f:dd:07:24:
13:82:13:94:14:ec:5e:e2:cf:cc:7a:69:c1:3a:ad:9a:84:ce:
d2:54:04:fd:96:c2:6b:82:a6:fc:8b:e1:58:c7:53:81:19:ff:
2c:7b:71:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:11:44 2024 by rpki-client on console-ams.rpki-client.org