Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/080af6-8dc4-48e6-9c63-a6b95991cd2c/1/vXrMSYKfdtrnoesNfbFR73zr1tY.roa
File: vXrMSYKfdtrnoesNfbFR73zr1tY.roa (raw, json)
Hash identifier: DqHPi6jrw3bnNLGR9uhmuZkHPHQMp4ED9iGZMU/g1V0=
Subject key identifier: BD:7A:CC:49:82:9F:76:DA:E7:A1:EB:0D:7D:B1:51:EF:7C:EB:D6:D6
Certificate issuer: /CN=ebbc0d60bd3a90bd5e31509deadf447076b078d8
Certificate serial: 018CC9BC01EB970034BC5740E596429E91C7
Authority key identifier: EB:BC:0D:60:BD:3A:90:BD:5E:31:50:9D:EA:DF:44:70:76:B0:78:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/67wNYL06kL1eMVCd6t9EcHaweNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/080af6-8dc4-48e6-9c63-a6b95991cd2c/1/vXrMSYKfdtrnoesNfbFR73zr1tY.roa
Signing time: Tue 02 Jan 2024 10:33:10 +0000
ROA not before: Tue 02 Jan 2024 10:33:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25076
IP address blocks: 212.45.74.0/24 maxlen: 24
212.45.75.0/24 maxlen: 24
212.45.76.0/22 maxlen: 22
212.45.72.0/23 maxlen: 23
79.134.48.0/21 maxlen: 24
79.134.58.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/080af6-8dc4-48e6-9c63-a6b95991cd2c/1/67wNYL06kL1eMVCd6t9EcHaweNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/080af6-8dc4-48e6-9c63-a6b95991cd2c/1/67wNYL06kL1eMVCd6t9EcHaweNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/67wNYL06kL1eMVCd6t9EcHaweNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 02:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:01:eb:97:00:34:bc:57:40:e5:96:42:9e:91:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebbc0d60bd3a90bd5e31509deadf447076b078d8
Validity
Not Before: Jan 2 10:33:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bd7acc49829f76dae7a1eb0d7db151ef7cebd6d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:6f:eb:c6:51:40:56:7e:79:9b:de:2c:fe:c0:
f3:9d:7f:82:37:a8:3d:b3:35:fc:2b:59:50:14:14:
71:13:2e:5c:42:91:c7:9d:e5:75:d3:11:c0:26:21:
6f:3b:e0:95:fa:27:a8:82:91:6c:9d:dd:14:c3:ae:
88:eb:bc:0d:97:e1:6d:a0:b7:9a:56:f5:9c:2a:c6:
df:df:be:ca:45:87:65:75:d5:92:55:83:0c:98:23:
33:35:4d:0d:ea:69:77:bf:e7:7b:1e:3a:6d:f5:fd:
c1:90:36:33:15:ec:5f:76:8b:64:1e:56:a0:5a:b8:
c1:fe:bb:34:02:5d:81:f5:08:82:a5:02:b2:41:3e:
7b:c6:58:d8:1c:cc:76:4a:42:c9:98:81:ea:7e:6a:
6d:28:0f:bb:a3:fb:9c:dc:20:17:f2:bf:72:36:50:
60:7c:c9:1b:38:94:8f:40:01:06:81:61:dc:06:45:
35:15:d9:7a:1c:73:cb:11:86:15:5d:25:0a:73:57:
1e:a1:19:44:b3:89:a3:bc:25:04:ba:81:c8:0b:3f:
97:6b:dd:18:96:97:c0:6d:a6:7f:f2:30:16:11:c6:
37:97:0c:96:ea:e9:50:06:cb:d7:bb:69:44:78:6b:
4a:8e:12:a1:93:2f:a4:3d:00:45:9a:a9:61:91:fc:
02:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:7A:CC:49:82:9F:76:DA:E7:A1:EB:0D:7D:B1:51:EF:7C:EB:D6:D6
X509v3 Authority Key Identifier:
keyid:EB:BC:0D:60:BD:3A:90:BD:5E:31:50:9D:EA:DF:44:70:76:B0:78:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/67wNYL06kL1eMVCd6t9EcHaweNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/080af6-8dc4-48e6-9c63-a6b95991cd2c/1/vXrMSYKfdtrnoesNfbFR73zr1tY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/080af6-8dc4-48e6-9c63-a6b95991cd2c/1/67wNYL06kL1eMVCd6t9EcHaweNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.134.48.0/21
79.134.58.0/23
212.45.72.0/21
Signature Algorithm: sha256WithRSAEncryption
55:3c:f2:f7:22:e8:6d:da:30:52:58:3d:2f:64:09:ae:43:30:
77:3f:e2:e7:90:d6:85:ee:df:5c:80:60:04:8d:97:e3:dd:c3:
c7:55:7e:3b:dd:0e:a9:c7:a9:f5:97:dc:cd:25:96:6c:57:4f:
66:a9:85:65:dc:a6:c1:a1:ef:35:c9:58:45:2c:54:3d:a9:fc:
24:86:13:28:d0:6c:80:8c:39:8b:98:83:42:19:07:b2:bf:f2:
23:b2:d1:65:3d:ab:44:bf:18:a7:82:4d:a2:f4:2b:b8:21:e2:
07:dd:0e:d1:d7:b3:29:05:ae:38:08:aa:55:15:d0:d0:dd:06:
8f:b5:be:36:c5:53:61:39:18:f6:91:85:11:08:dc:46:79:7a:
62:84:fa:37:36:b8:09:f6:f3:23:54:5c:58:7b:b4:7a:bf:86:
0e:45:41:e8:08:39:1d:8e:f6:6b:7c:a9:30:b8:32:bd:e7:0a:
88:09:3d:a4:d6:2a:7b:5a:ca:99:52:67:94:f6:35:b6:be:65:
0c:a8:f1:56:a4:aa:fb:12:08:22:99:68:02:ee:f5:9a:92:bd:
f2:cf:cd:da:f9:b4:a0:26:5c:09:4d:63:14:2c:0e:ff:9e:cb:
89:44:a6:24:28:25:59:22:01:55:0a:1e:ce:ae:73:97:9b:b4:
5e:c6:cc:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 08:09:29 2024 by rpki-client on console-fra.rpki-client.org