Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/84548d-3f3b-46b9-836c-38a3924776e9/1/EpPUqDJOd3SH3wV26nyI_Z3NDlE.roa
File: EpPUqDJOd3SH3wV26nyI_Z3NDlE.roa (raw, json)
Hash identifier: 1Ktu6B1xPpxk/jKSX6nWsSJvkKENy/cveNaRfet2O/A=
Subject key identifier: 12:93:D4:A8:32:4E:77:74:87:DF:05:76:EA:7C:88:FD:9D:CD:0E:51
Certificate issuer: /CN=509c63c6d756bb2acd3f1ad92ac415da857e6c98
Certificate serial: 018DC1798216290594E80108F76385734AF1
Authority key identifier: 50:9C:63:C6:D7:56:BB:2A:CD:3F:1A:D9:2A:C4:15:DA:85:7E:6C:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJxjxtdWuyrNPxrZKsQV2oV-bJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/84548d-3f3b-46b9-836c-38a3924776e9/1/EpPUqDJOd3SH3wV26nyI_Z3NDlE.roa
Signing time: Mon 19 Feb 2024 13:06:22 +0000
ROA not before: Mon 19 Feb 2024 13:06:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8560
IP address blocks: 185.122.180.0/22 maxlen: 22
185.122.183.0/24 maxlen: 24
2a03:9160:40::/42 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/84548d-3f3b-46b9-836c-38a3924776e9/1/UJxjxtdWuyrNPxrZKsQV2oV-bJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/84548d-3f3b-46b9-836c-38a3924776e9/1/UJxjxtdWuyrNPxrZKsQV2oV-bJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/UJxjxtdWuyrNPxrZKsQV2oV-bJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 16:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:c1:79:82:16:29:05:94:e8:01:08:f7:63:85:73:4a:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=509c63c6d756bb2acd3f1ad92ac415da857e6c98
Validity
Not Before: Feb 19 13:06:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1293d4a8324e777487df0576ea7c88fd9dcd0e51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d6:5f:b6:33:9e:18:22:3b:24:6f:c3:2f:72:
30:83:95:3e:9a:f9:0f:82:36:ea:43:d3:05:aa:3a:
09:0e:38:3c:b7:e5:48:c1:ec:57:01:83:dd:62:b5:
ad:dc:65:33:78:ee:42:b7:10:32:ed:08:ec:7f:92:
70:7d:29:09:8b:74:16:a6:cd:72:00:1f:62:b3:15:
2e:b0:e9:ac:33:e5:84:b8:45:15:e2:60:7a:6a:ba:
b6:86:f2:8c:cd:8b:f3:08:f6:4b:b3:f8:f7:72:d4:
47:f4:fa:22:77:e6:f2:b5:ae:a8:47:e5:47:92:21:
6c:25:92:c3:af:82:48:47:df:2f:c7:0a:be:fb:18:
98:6a:e7:32:28:1d:84:0b:f7:11:1a:92:28:79:40:
9a:17:02:e9:9a:08:5e:84:0f:4c:74:1e:71:e4:d4:
97:1d:64:d4:e2:56:5f:15:4b:06:4a:2b:83:ea:bf:
29:9a:c0:dd:4d:f8:69:57:43:43:2b:4a:2a:fc:98:
68:b0:e5:95:ea:d4:ba:8b:62:88:84:04:ae:0d:44:
79:d4:62:e6:f7:89:95:6b:25:2a:0d:16:e8:6d:b8:
3b:d4:e1:9c:39:a3:eb:90:37:ee:a5:90:11:ed:b6:
e1:89:4c:b8:bd:9a:83:56:69:01:d6:de:b5:74:37:
d7:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:93:D4:A8:32:4E:77:74:87:DF:05:76:EA:7C:88:FD:9D:CD:0E:51
X509v3 Authority Key Identifier:
keyid:50:9C:63:C6:D7:56:BB:2A:CD:3F:1A:D9:2A:C4:15:DA:85:7E:6C:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJxjxtdWuyrNPxrZKsQV2oV-bJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/84548d-3f3b-46b9-836c-38a3924776e9/1/EpPUqDJOd3SH3wV26nyI_Z3NDlE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/84548d-3f3b-46b9-836c-38a3924776e9/1/UJxjxtdWuyrNPxrZKsQV2oV-bJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.122.180.0/22
IPv6:
2a03:9160:40::/42
Signature Algorithm: sha256WithRSAEncryption
7d:6f:fd:05:43:55:7d:2c:be:fd:c7:8a:c4:09:91:c3:b4:3b:
0d:98:23:59:a3:61:37:78:de:23:fa:4a:e0:c8:78:6a:15:78:
9d:3b:76:bf:b1:fa:7f:9e:90:88:e4:b8:cb:8c:21:97:15:ef:
63:0a:80:80:4d:29:51:ff:0b:2c:c1:4b:89:26:8d:0a:2c:11:
7d:02:09:df:87:78:30:6d:63:9a:d3:fe:0d:ff:91:6c:86:1f:
34:46:0c:8a:54:df:c1:ca:92:b1:f6:ce:29:1c:7d:f5:ea:aa:
55:0b:a5:82:3e:bf:94:a5:29:94:b7:b1:7e:83:71:bd:17:a5:
ce:5c:44:e2:aa:d3:8b:f4:aa:90:2b:a1:28:e5:4b:57:1b:1f:
f0:17:07:23:c4:e2:29:00:f7:dc:60:af:a9:b6:7e:8a:c6:83:
cb:13:46:83:94:59:a4:bb:93:6f:f7:c4:86:a2:25:35:5c:e3:
a9:dc:f6:83:ba:e4:ac:cd:b4:4e:6f:b6:e8:88:fb:c5:5c:be:
4a:b6:3d:4a:dd:ca:cb:d0:dd:78:2c:6f:f1:ab:ee:39:29:96:
2f:80:4d:41:fd:eb:95:67:69:98:70:d3:e6:32:d3:56:10:1f:
1f:10:31:a1:73:e9:86:36:62:f9:e5:a4:2b:27:38:23:54:6b:
7e:0e:99:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 20:42:48 2024 by rpki-client on console-ams.rpki-client.org