Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/eOCd4d0GN10PplBByRhiSL6wLeU.roa
File: eOCd4d0GN10PplBByRhiSL6wLeU.roa (raw, json)
Hash identifier: y1qgpZlVQW6R9jQCW48We5N1DH4i4GhZ8Q05ygc6ajs=
Subject key identifier: 78:E0:9D:E1:DD:06:37:5D:0F:A6:50:41:C9:18:62:48:BE:B0:2D:E5
Certificate issuer: /CN=3aba1172472ea80265d12982967de0a8b0bc5901
Certificate serial: 018CC492483411373CE912B8F0A30981B016
Authority key identifier: 3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/eOCd4d0GN10PplBByRhiSL6wLeU.roa
Signing time: Mon 01 Jan 2024 10:29:30 +0000
ROA not before: Mon 01 Jan 2024 10:29:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213005
IP address blocks: 188.93.117.0/24 maxlen: 24
46.253.138.0/24 maxlen: 24
185.219.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Jun 2024 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:48:34:11:37:3c:e9:12:b8:f0:a3:09:81:b0:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aba1172472ea80265d12982967de0a8b0bc5901
Validity
Not Before: Jan 1 10:29:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=78e09de1dd06375d0fa65041c9186248beb02de5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1a:bf:60:bd:14:b2:46:26:a3:b9:2c:87:74:
15:00:ed:7c:d7:e8:37:91:ff:a3:0d:c8:a8:51:ce:
9f:15:0e:cc:76:6e:be:30:c4:82:d5:e9:66:d7:f9:
ec:31:81:ee:5b:d8:28:65:9a:5c:f0:45:11:35:70:
6e:8e:c8:9d:90:be:37:dc:25:cc:c7:0b:b6:9d:c7:
11:52:a0:f1:f7:c2:02:07:92:2a:69:2e:b6:0e:c3:
1b:52:dd:92:cb:e4:68:b5:48:e3:bc:86:7a:f7:cb:
19:8a:3c:3f:e8:66:22:2d:43:76:fe:90:2c:35:5b:
73:de:d7:df:14:bc:9a:ae:4a:12:cf:14:7e:d3:d9:
55:52:3b:47:2c:32:8e:36:bc:c5:f6:d4:01:08:e0:
c3:2f:15:69:7a:ed:2b:16:99:ad:5d:48:88:96:4b:
9d:7a:e6:56:4f:89:c9:ac:bf:70:96:0f:7e:af:28:
a1:e2:ce:b8:09:36:2e:54:65:d4:79:7f:0f:6a:4f:
6b:af:66:2a:c6:fc:23:02:a1:2e:d8:7c:ac:61:a7:
0d:19:90:1c:47:2f:79:ed:91:8b:ac:34:eb:63:4b:
1a:48:c1:75:3e:c1:0e:fd:a2:53:c7:24:4a:22:5d:
79:fd:a6:7e:84:53:09:5c:04:f5:e4:36:00:0b:cb:
03:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:E0:9D:E1:DD:06:37:5D:0F:A6:50:41:C9:18:62:48:BE:B0:2D:E5
X509v3 Authority Key Identifier:
keyid:3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/eOCd4d0GN10PplBByRhiSL6wLeU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.253.138.0/24
185.219.7.0/24
188.93.117.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:42:2f:f9:7c:ce:ef:b5:bf:8e:76:9e:d0:c9:74:7b:3a:d6:
d4:de:69:04:fc:57:b5:27:89:c7:18:42:c2:69:88:13:f1:b6:
52:65:88:f6:58:ea:68:25:e5:61:92:d5:42:64:26:cf:f5:5b:
ec:ad:e0:f3:61:ff:7b:88:b2:60:e9:b1:2c:1f:2e:78:8a:e8:
39:f5:3a:e4:8b:50:8d:9c:28:1a:67:76:66:62:ef:44:78:ca:
fe:0e:06:6f:15:dc:cb:4f:dc:3f:7e:4c:ca:dc:2f:81:08:e9:
2c:1e:18:b8:4c:59:12:6b:4e:6b:ef:6a:21:b8:4c:c9:80:e3:
98:36:e4:20:1e:de:41:fb:39:44:9a:63:4a:23:59:7d:95:53:
0c:fe:b5:fc:c2:11:c5:b1:6f:a0:ef:8b:70:c8:cd:2f:a5:59:
c7:96:e5:08:cf:83:51:47:76:0b:60:92:05:6d:7c:9e:07:a4:
90:78:93:0e:a4:d0:0f:5f:2a:cc:92:18:b2:51:0c:c5:b7:aa:
ce:49:72:ee:0c:d4:df:f1:d7:06:ce:7f:f4:e7:9d:91:13:07:
08:6d:5d:a3:a4:8b:fb:3d:25:2d:d4:32:b5:bc:b6:08:11:0f:
aa:d6:bb:41:68:bb:0f:4b:28:af:2e:5a:12:44:29:ac:36:9d:
dd:de:85:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 11 12:15:53 2024 by rpki-client on console-fra.rpki-client.org