Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/0b4629-39cc-4e6c-9e1c-991b7aee746c/1/EpGe8SiyX5cy-ZZBFTZdiIQs3Pw.roa
File: EpGe8SiyX5cy-ZZBFTZdiIQs3Pw.roa (raw, json)
Hash identifier: qRqccTgcv71wLMXE6MDtoNkxN6gPkPEnl9enw6ez/lE=
Subject key identifier: 12:91:9E:F1:28:B2:5F:97:32:F9:96:41:15:36:5D:88:84:2C:DC:FC
Certificate issuer: /CN=a92dc7bdbc9d097336de6243b550ab173375ea39
Certificate serial: 018CC56E53FFF17D95670D976AF8F0674015
Authority key identifier: A9:2D:C7:BD:BC:9D:09:73:36:DE:62:43:B5:50:AB:17:33:75:EA:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qS3HvbydCXM23mJDtVCrFzN16jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/0b4629-39cc-4e6c-9e1c-991b7aee746c/1/EpGe8SiyX5cy-ZZBFTZdiIQs3Pw.roa
Signing time: Mon 01 Jan 2024 14:29:51 +0000
ROA not before: Mon 01 Jan 2024 14:29:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3301
IP address blocks: 212.39.36.0/24 maxlen: 24
212.39.35.0/24 maxlen: 24
212.39.37.0/24 maxlen: 24
212.39.32.0/24 maxlen: 24
212.39.38.0/24 maxlen: 24
212.39.34.0/24 maxlen: 24
212.39.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/0b4629-39cc-4e6c-9e1c-991b7aee746c/1/qS3HvbydCXM23mJDtVCrFzN16jk.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/0b4629-39cc-4e6c-9e1c-991b7aee746c/1/qS3HvbydCXM23mJDtVCrFzN16jk.mft
rsync://rpki.ripe.net/repository/DEFAULT/qS3HvbydCXM23mJDtVCrFzN16jk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 11:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:53:ff:f1:7d:95:67:0d:97:6a:f8:f0:67:40:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a92dc7bdbc9d097336de6243b550ab173375ea39
Validity
Not Before: Jan 1 14:29:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=12919ef128b25f9732f9964115365d88842cdcfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c2:67:c4:f3:32:b4:cd:5a:2c:18:e0:9f:45:
15:4f:b1:e7:02:a9:60:eb:00:90:2b:a0:a6:5d:78:
60:76:9a:6d:81:bc:bb:d3:6e:60:3b:09:8f:32:cb:
f5:42:41:db:0f:47:0d:d9:36:47:2f:96:f9:ea:f6:
69:38:5f:06:04:d4:91:62:8b:3e:c8:78:0b:4e:9d:
56:24:44:4f:87:4b:6a:ee:cc:46:ac:4a:4c:7f:fc:
81:45:b0:90:e0:55:e7:56:c8:dd:45:2b:14:ed:25:
2d:e3:1e:89:5f:14:4e:8b:1e:44:0b:3e:77:96:03:
51:4e:47:7c:9e:96:96:d0:00:f6:6f:a8:41:6d:e1:
cb:23:32:74:b2:d5:a0:84:88:bb:79:7d:fd:d4:52:
aa:f8:6b:f1:e7:4b:92:be:2e:f0:df:8f:6e:03:34:
fa:0a:a8:f4:eb:8a:72:ec:bf:1d:f5:1f:bc:97:2b:
f5:56:08:5e:18:10:47:c3:18:58:35:44:25:50:66:
b2:6d:90:d9:4a:9e:0d:b0:eb:b1:4c:80:d8:5f:f5:
f1:5e:98:54:41:3b:01:aa:16:31:23:b6:21:cd:bf:
22:31:a5:1b:79:02:cc:5f:11:c7:b3:f0:25:25:f6:
11:4e:19:69:e6:e5:8e:b6:6a:cc:1d:d0:28:06:08:
bd:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:91:9E:F1:28:B2:5F:97:32:F9:96:41:15:36:5D:88:84:2C:DC:FC
X509v3 Authority Key Identifier:
keyid:A9:2D:C7:BD:BC:9D:09:73:36:DE:62:43:B5:50:AB:17:33:75:EA:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qS3HvbydCXM23mJDtVCrFzN16jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/0b4629-39cc-4e6c-9e1c-991b7aee746c/1/EpGe8SiyX5cy-ZZBFTZdiIQs3Pw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/0b4629-39cc-4e6c-9e1c-991b7aee746c/1/qS3HvbydCXM23mJDtVCrFzN16jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.39.32.0/24
212.39.34.0-212.39.39.255
Signature Algorithm: sha256WithRSAEncryption
1e:10:f7:07:49:8d:62:97:40:a7:b1:a4:9a:79:6f:70:4e:d4:
c1:36:36:df:42:a9:2d:20:c9:2a:a1:75:42:35:65:d2:90:d3:
31:94:f1:2a:58:82:fe:61:10:de:1c:d1:a5:0f:7a:e7:f4:a3:
78:ac:7f:4b:bf:a5:63:c3:71:13:b9:e4:b6:b1:92:19:2e:c1:
f9:8c:08:7c:2d:d2:e6:00:3a:3d:09:98:b6:15:6e:1d:af:c0:
31:b6:43:ec:91:33:99:86:df:14:bd:61:92:77:f4:26:7f:96:
a9:55:da:aa:c8:fb:d2:4b:bb:0e:c1:c7:42:69:76:cd:5a:a5:
92:e9:c7:f4:8b:3c:bc:ff:41:57:41:e1:35:93:50:cd:85:e5:
46:07:3a:92:30:d9:ae:35:ad:b2:56:48:4e:ba:af:b5:36:35:
59:a7:70:45:dd:dd:3c:6d:1c:63:a7:27:6b:69:7f:4e:e6:1d:
d9:03:0b:b0:f1:77:6e:6a:9a:0b:71:cd:e5:53:8e:a6:5a:b3:
14:8b:89:ee:93:54:63:e8:59:d2:1e:83:4a:df:37:41:ce:cb:
2a:16:75:e5:10:40:66:b3:d2:07:94:44:18:31:ef:44:ea:30:
99:28:c9:48:a9:4c:f2:5b:40:84:0a:ee:3c:3f:47:5b:9c:32:
e6:99:0e:aa
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Nov 22 13:48:42 2024 by rpki-client on console-fra.rpki-client.org