Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/EecMKHljCOTWV2K6Dq_nfWd5J3I.roa
File: EecMKHljCOTWV2K6Dq_nfWd5J3I.roa (raw, json)
Hash identifier: qJr2PHKlXL0mM0+BSN86dN44Er5ESK2U8bpxSEUF3fk=
Subject key identifier: 11:E7:0C:28:79:63:08:E4:D6:57:62:BA:0E:AF:E7:7D:67:79:27:72
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018CC3495E3B7791ADF9747C0AAEF8EBE2F1
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/EecMKHljCOTWV2K6Dq_nfWd5J3I.roa
Signing time: Mon 01 Jan 2024 04:30:14 +0000
ROA not before: Mon 01 Jan 2024 04:30:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206509
IP address blocks: 81.168.0.0/17 maxlen: 17
109.176.0.0/16 maxlen: 16
81.5.128.0/18 maxlen: 18
82.152.0.0/15 maxlen: 15
213.152.32.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:5e:3b:77:91:ad:f9:74:7c:0a:ae:f8:eb:e2:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jan 1 04:30:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=11e70c28796308e4d65762ba0eafe77d67792772
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:19:d1:cc:fd:c4:17:60:98:8e:9e:45:b8:78:
1d:1a:57:78:05:ee:39:6f:5a:e3:39:dc:a7:65:98:
0e:a5:f4:6e:6c:e8:38:30:eb:1e:10:5e:2e:4b:7a:
da:50:e2:7b:96:70:97:0a:c4:2a:e3:f4:c3:88:88:
5c:47:9a:0f:41:1b:b6:81:0d:56:a8:5d:6d:de:f7:
59:a1:02:67:79:5f:1d:e7:a3:1c:39:d6:db:54:08:
6c:f3:43:9a:3d:67:52:bb:57:a2:f7:b1:45:8d:70:
de:39:69:b8:16:52:f6:68:f0:5d:70:95:66:66:36:
7e:79:25:a3:10:e5:e1:ef:f3:4d:14:0c:eb:25:72:
76:e1:45:00:e1:9b:1c:96:ca:e8:52:70:1c:84:e6:
81:7f:e3:cd:f2:2a:cf:d3:11:0a:f4:d7:70:e7:3a:
eb:ae:84:70:e9:13:14:d6:24:3c:7e:0c:c6:4c:06:
2a:ea:8c:7c:ff:28:31:8c:d1:50:42:49:d7:b2:72:
8d:b5:10:ed:ef:43:52:51:55:da:ff:1b:c9:6b:03:
4d:ae:0f:52:c4:fe:c2:63:56:99:04:06:c3:64:d7:
e6:92:44:1d:46:db:a5:1c:be:38:16:92:a7:5a:fb:
15:0b:1a:f4:ee:74:f3:bf:a9:e1:be:c0:b8:d7:44:
19:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:E7:0C:28:79:63:08:E4:D6:57:62:BA:0E:AF:E7:7D:67:79:27:72
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/EecMKHljCOTWV2K6Dq_nfWd5J3I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.5.128.0/18
81.168.0.0/17
82.152.0.0/15
109.176.0.0/16
213.152.32.0/19
Signature Algorithm: sha256WithRSAEncryption
6b:e5:3a:d8:fd:93:7d:68:2c:af:45:ca:af:de:17:0c:5c:9b:
64:d7:80:ff:77:14:4a:b3:46:a6:ae:cc:9f:0a:3d:38:82:d2:
9d:54:61:41:88:30:e3:3f:fd:d8:ef:fb:57:48:7f:f1:6a:87:
ad:cb:74:e9:ed:75:67:a6:71:91:58:52:49:60:6f:0a:6e:44:
f3:36:c7:29:6c:9e:5d:e1:80:6b:1d:a7:91:b9:81:28:54:8d:
da:5e:6f:93:ea:a0:37:94:ea:4c:04:c9:40:34:52:79:ce:f5:
2b:2d:4f:95:08:de:e3:3d:b7:eb:a5:3b:ac:07:5e:5a:72:e4:
4e:17:5d:cb:0d:c2:4c:cc:25:93:0d:a1:8e:81:2a:2c:38:bd:
a7:f9:07:07:1a:d8:ec:b2:12:2e:3d:aa:39:09:e3:9e:db:3a:
dd:4b:d4:d8:1e:5e:4f:a4:92:35:d2:e9:0b:2f:ce:77:bd:39:
3b:30:b9:a5:c9:79:36:a1:57:de:4f:0c:0c:7e:6f:a8:51:0d:
4e:0a:d2:a0:56:aa:93:28:54:dd:bd:c6:24:83:b5:21:4d:65:
18:45:f6:b8:66:1e:a4:e6:63:18:54:74:81:5e:0c:e5:a7:0b:
b3:08:e1:cc:e9:6c:b0:a1:c7:58:25:15:b6:3a:66:73:23:01:
52:f3:5f:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:57:15 2024 by rpki-client on console-fra.rpki-client.org