Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/7a9f0c-5888-4fd8-bd90-683384b19ea3/1/EGX_6-0dG3CfBrR7W9lat8EaepA.roa
File: EGX_6-0dG3CfBrR7W9lat8EaepA.roa (raw, json)
Hash identifier: Y9/6aIRMkTxY3Ks3eM7R5vCOfV24O+fWWvFlen43XKc=
Subject key identifier: 10:65:FF:EB:ED:1D:1B:70:9F:06:B4:7B:5B:D9:5A:B7:C1:1A:7A:90
Certificate issuer: /CN=a48a87c45d9720464905b6a6b0933f7c3951192d
Certificate serial: 018CC7275C77F28407BD12BDF1F2EA6A380D
Authority key identifier: A4:8A:87:C4:5D:97:20:46:49:05:B6:A6:B0:93:3F:7C:39:51:19:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pIqHxF2XIEZJBbamsJM_fDlRGS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/7a9f0c-5888-4fd8-bd90-683384b19ea3/1/EGX_6-0dG3CfBrR7W9lat8EaepA.roa
Signing time: Mon 01 Jan 2024 22:31:34 +0000
ROA not before: Mon 01 Jan 2024 22:31:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39542
IP address blocks: 185.43.60.0/22 maxlen: 22
185.137.252.0/23 maxlen: 24
193.201.37.0/24 maxlen: 24
193.201.38.0/24 maxlen: 24
193.201.35.0/24 maxlen: 24
193.201.43.0/24 maxlen: 24
194.50.39.0/24 maxlen: 24
91.213.242.0/24 maxlen: 24
2a01:6960::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/7a9f0c-5888-4fd8-bd90-683384b19ea3/1/pIqHxF2XIEZJBbamsJM_fDlRGS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/7a9f0c-5888-4fd8-bd90-683384b19ea3/1/pIqHxF2XIEZJBbamsJM_fDlRGS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/pIqHxF2XIEZJBbamsJM_fDlRGS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Jun 2024 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:5c:77:f2:84:07:bd:12:bd:f1:f2:ea:6a:38:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a48a87c45d9720464905b6a6b0933f7c3951192d
Validity
Not Before: Jan 1 22:31:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1065ffebed1d1b709f06b47b5bd95ab7c11a7a90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:81:e6:c6:5b:bf:af:fd:73:f7:af:e2:aa:f6:
85:a5:0a:44:79:22:ee:38:98:7f:aa:f7:cc:8c:0f:
73:95:7f:97:ef:5a:35:a9:d4:d1:a0:1f:55:b3:08:
b1:35:c0:05:e3:3f:de:12:56:13:1d:2c:23:09:20:
6a:b0:c5:18:62:5b:16:2d:39:42:c3:8d:bb:54:5f:
62:60:4a:b6:ba:2b:43:7f:84:f9:e8:61:82:25:00:
e5:bc:40:02:d4:ff:12:db:d8:b1:3a:aa:f2:6e:85:
27:59:bb:45:bb:c9:de:35:9f:c5:f5:b2:df:1e:ed:
b8:b0:91:48:a1:2d:6c:db:64:f6:ab:22:90:39:f8:
75:b6:7d:ce:5e:7d:23:af:72:76:47:0e:e1:64:3c:
af:39:39:b2:0a:fa:c3:f5:52:48:06:24:12:e0:c5:
a7:19:a5:62:23:8b:79:d6:8d:f8:22:96:bf:98:4b:
97:e3:09:94:bf:a5:ac:44:cf:28:86:da:bd:9c:f2:
71:c2:db:cc:ed:77:41:0e:7f:90:ac:ae:82:3f:f1:
f6:e0:f6:7d:dc:6a:b0:d1:d3:15:d7:a2:34:7d:0d:
bc:76:7c:8d:a9:83:28:86:39:ee:95:65:ff:48:91:
33:12:41:31:6d:be:09:6d:85:ce:0e:91:a5:22:c5:
5d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:65:FF:EB:ED:1D:1B:70:9F:06:B4:7B:5B:D9:5A:B7:C1:1A:7A:90
X509v3 Authority Key Identifier:
keyid:A4:8A:87:C4:5D:97:20:46:49:05:B6:A6:B0:93:3F:7C:39:51:19:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pIqHxF2XIEZJBbamsJM_fDlRGS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/7a9f0c-5888-4fd8-bd90-683384b19ea3/1/EGX_6-0dG3CfBrR7W9lat8EaepA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/7a9f0c-5888-4fd8-bd90-683384b19ea3/1/pIqHxF2XIEZJBbamsJM_fDlRGS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.242.0/24
185.43.60.0/22
185.137.252.0/23
193.201.35.0/24
193.201.37.0-193.201.38.255
193.201.43.0/24
194.50.39.0/24
IPv6:
2a01:6960::/32
Signature Algorithm: sha256WithRSAEncryption
8e:7a:af:93:63:b2:28:c5:fa:dd:6e:e0:2c:42:6a:0b:97:e8:
2e:9d:87:61:e7:91:a2:84:b6:8d:06:e0:33:b3:cd:a8:70:2d:
32:cc:f5:27:4e:89:10:6c:02:00:bc:71:8a:e3:f9:90:d0:9e:
73:ad:9d:ce:d7:a2:a1:45:f6:30:7f:32:e2:ed:a2:54:f9:c7:
63:a6:3e:dc:b2:5d:57:bc:b3:41:32:6f:7e:4c:1f:64:5c:53:
6d:c6:e8:c3:a5:a0:13:dc:05:27:1a:95:c9:6d:f4:26:99:88:
47:97:ec:1b:4a:a0:53:34:7f:63:34:9c:55:5c:4d:c4:1e:72:
b2:2d:db:d9:95:b0:eb:3a:82:51:29:fd:b1:6b:d7:1c:50:b2:
68:8c:7e:88:9b:79:cb:5b:ef:5c:e5:b1:aa:bb:d5:4b:a7:9a:
a9:1b:6d:93:ae:04:6d:59:94:8c:83:6f:cb:2b:a2:97:5a:e9:
fd:88:41:bf:a6:e5:94:4f:17:d5:19:28:6d:0a:d3:03:f9:d1:
23:9f:7c:53:76:8b:c1:ec:59:db:f4:0e:d3:ab:fd:cb:25:34:
0c:06:f0:32:4a:23:0c:34:c2:3b:0b:58:c2:7d:79:87:00:f7:
d7:f9:41:34:a5:96:17:f6:c1:b9:1c:66:8a:07:20:1c:94:7a:
52:0e:73:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 09:21:36 2024 by rpki-client on console-ams.rpki-client.org