Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/ePe7G_jdSjKbB1Uz720fv_BYuMQ.roa
File: ePe7G_jdSjKbB1Uz720fv_BYuMQ.roa (raw, json)
Hash identifier: WfA2uaIcb68XATM/Q/1gprXXV45s5CHzeZMPsBePt9I=
Subject key identifier: 78:F7:BB:1B:F8:DD:4A:32:9B:07:55:33:EF:6D:1F:BF:F0:58:B8:C4
Certificate issuer: /CN=abc8dbe52083ad335c9f1fde6016ec8b49293140
Certificate serial: 018CC501076F3CA3144F9E605E2C6982FAED
Authority key identifier: AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/ePe7G_jdSjKbB1Uz720fv_BYuMQ.roa
Signing time: Mon 01 Jan 2024 12:30:28 +0000
ROA not before: Mon 01 Jan 2024 12:30:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15785
IP address blocks: 88.81.244.0/23 maxlen: 23
88.81.250.0/24 maxlen: 24
194.110.79.0/24 maxlen: 24
5.1.3.0/24 maxlen: 24
5.1.2.0/24 maxlen: 24
194.146.199.0/24 maxlen: 24
188.0.71.0/24 maxlen: 24
188.0.69.0/24 maxlen: 24
188.0.70.0/24 maxlen: 24
188.0.68.0/24 maxlen: 24
31.128.65.0/24 maxlen: 24
188.0.76.0/24 maxlen: 24
188.0.75.0/24 maxlen: 24
188.0.74.0/24 maxlen: 24
188.0.72.0/24 maxlen: 24
2a01:758:8305::/48 maxlen: 48
2a01:758:8300::/48 maxlen: 48
2a01:758::/48 maxlen: 48
2a01:758:8303::/48 maxlen: 48
2a01:758:8308::/48 maxlen: 48
2a01:758:8306::/48 maxlen: 48
2a01:758:8301::/48 maxlen: 48
2a01:758:8309::/48 maxlen: 48
2a01:758:8304::/48 maxlen: 48
2a01:758:8307::/48 maxlen: 48
2a01:758:8302::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:07:6f:3c:a3:14:4f:9e:60:5e:2c:69:82:fa:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abc8dbe52083ad335c9f1fde6016ec8b49293140
Validity
Not Before: Jan 1 12:30:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=78f7bb1bf8dd4a329b075533ef6d1fbff058b8c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ff:e9:9d:4d:d7:ba:41:c1:d4:ed:58:1c:71:
2b:9a:6f:b8:8a:49:fc:30:58:ac:9c:ef:59:6b:64:
ac:7f:0d:01:e6:d8:70:73:1c:26:47:89:d8:06:bc:
3f:9d:26:12:2e:b3:23:2f:eb:2c:e7:f9:b3:78:74:
96:c4:68:7e:b2:c0:0f:71:6e:10:ca:e6:06:4a:02:
ec:d7:e4:09:3f:41:bd:28:3a:69:a2:f2:11:63:ff:
69:3d:d3:ff:5b:64:f3:c8:f3:08:d4:ae:1b:9d:d1:
0e:2c:cb:9c:10:8d:93:35:3c:52:25:f6:f2:b8:4d:
ab:d3:bc:15:1b:0d:fa:1a:3c:21:cb:ba:2b:6a:27:
a9:28:fe:3b:91:d7:d5:6e:18:9a:9b:b2:e7:64:de:
be:44:a6:44:97:fe:16:f9:d4:f6:7e:e8:5e:81:ce:
3c:47:8a:68:fe:a8:1d:c4:8c:33:65:d6:e1:66:fe:
34:a3:d4:1d:1c:9b:80:76:57:e7:a2:b2:20:c9:9f:
2b:ad:e3:f5:aa:4b:d5:d8:a8:5c:c5:b2:88:97:f2:
34:7d:1d:28:77:86:6f:8c:d9:bd:e0:21:3d:29:e8:
84:37:44:be:ee:81:26:7d:bf:44:51:1a:75:dd:b3:
d7:03:31:ea:f3:ea:18:db:54:79:c6:ae:a2:3d:ae:
39:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:F7:BB:1B:F8:DD:4A:32:9B:07:55:33:EF:6D:1F:BF:F0:58:B8:C4
X509v3 Authority Key Identifier:
keyid:AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/ePe7G_jdSjKbB1Uz720fv_BYuMQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.1.2.0/23
31.128.65.0/24
88.81.244.0/23
88.81.250.0/24
188.0.68.0-188.0.72.255
188.0.74.0-188.0.76.255
194.110.79.0/24
194.146.199.0/24
IPv6:
2a01:758::/48
2a01:758:8300::-2a01:758:8309:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
25:a0:1c:09:a0:66:a4:90:67:47:ca:52:42:c7:af:1d:f9:ff:
a4:95:67:7c:67:39:23:48:a3:91:05:11:b6:44:10:d1:09:a4:
81:6e:ae:1d:94:57:30:41:55:a8:b7:80:db:d8:d8:6a:3d:48:
b7:ab:84:2e:5c:f0:53:df:c7:ce:f0:f0:61:99:13:0f:7e:a8:
fd:2b:17:1e:23:f1:8c:23:c2:d5:59:a0:9b:0c:c0:c2:5c:12:
66:11:13:ce:10:8a:bc:bd:bc:0e:76:27:f1:3f:28:50:6f:6c:
6e:53:53:7b:0b:32:42:c4:e0:55:f6:69:9b:e1:7c:c9:7b:54:
53:b4:51:2a:6f:56:22:e9:85:3b:d1:54:a6:ba:42:0b:16:ae:
21:a1:28:3a:43:e3:55:91:ad:d1:38:c9:d6:75:90:21:d0:9e:
87:27:02:06:a6:fa:02:af:09:b9:ae:d9:c0:be:0d:d3:93:fa:
cb:a0:08:03:38:5c:06:7b:b7:44:c7:ee:e8:b9:9a:0a:34:14:
d2:12:b0:49:9c:8d:2b:9e:1b:a7:1a:a7:5d:21:c2:5b:3a:82:
89:18:ef:21:d2:04:66:2b:c3:2a:05:b0:78:80:31:b1:25:9f:
50:34:fc:68:87:56:f2:76:c1:f9:a9:6c:17:25:ed:fa:69:76:
c4:5b:17:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 19:53:13 2024 by rpki-client on console-ams.rpki-client.org