Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/EfVbcoTG8o7sbM7FeYfIlKiJNn0.roa
File: EfVbcoTG8o7sbM7FeYfIlKiJNn0.roa (raw, json)
Hash identifier: i6Y0PhmhMLQXXaE5DnFw12Kj2QGkEs5VDQB60tzmB34=
Subject key identifier: 11:F5:5B:72:84:C6:F2:8E:EC:6C:CE:C5:79:87:C8:94:A8:89:36:7D
Certificate issuer: /CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Certificate serial: 018CC9BBCAD959445782418EA5938C385CCC
Authority key identifier: F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/EfVbcoTG8o7sbM7FeYfIlKiJNn0.roa
Signing time: Tue 02 Jan 2024 10:32:56 +0000
ROA not before: Tue 02 Jan 2024 10:32:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25539
IP address blocks: 195.56.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.mft
rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bb:ca:d9:59:44:57:82:41:8e:a5:93:8c:38:5c:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Validity
Not Before: Jan 2 10:32:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=11f55b7284c6f28eec6ccec57987c894a889367d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:c5:ca:ca:5e:06:c4:62:72:31:bb:e0:64:8a:
a5:71:38:11:07:7c:07:7b:e3:bf:76:c3:38:2c:87:
4f:3a:22:99:1b:f5:e4:4d:82:59:87:f5:c7:a7:0c:
9b:f8:41:96:45:41:97:30:b0:f9:b9:f7:7c:77:d8:
35:71:f7:fc:b1:2c:46:ba:7e:59:10:79:25:3e:20:
30:a0:a2:12:aa:fd:12:df:aa:c0:dd:72:14:d2:0e:
84:3a:3d:c3:da:89:38:40:51:f6:e9:3a:12:e8:22:
9b:8e:ee:ba:b8:68:59:de:88:10:f2:8f:2c:8f:77:
c5:5c:f3:6a:01:1b:4b:9c:6f:d3:28:49:1d:e2:84:
c4:6e:82:57:22:92:2f:c8:7b:27:28:b0:0a:9f:34:
3a:75:95:4d:ac:dc:b2:36:3c:8c:05:4f:71:31:3c:
12:05:55:5d:f7:e8:42:f8:44:aa:1b:d9:3f:ea:ae:
7b:b1:37:57:61:ce:0b:e5:a5:36:fd:fd:c9:c3:f5:
94:6a:3c:72:bb:4c:2a:d7:76:25:88:aa:cd:07:cf:
d6:30:f2:65:13:64:f0:d5:ae:39:10:c9:4a:e1:d5:
92:87:eb:de:59:1a:92:2c:cd:42:9b:6d:fe:e1:18:
ca:e9:b5:4f:15:de:a3:c3:83:63:c2:7d:ed:9b:b0:
72:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:F5:5B:72:84:C6:F2:8E:EC:6C:CE:C5:79:87:C8:94:A8:89:36:7D
X509v3 Authority Key Identifier:
keyid:F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/EfVbcoTG8o7sbM7FeYfIlKiJNn0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.56.68.0/24
Signature Algorithm: sha256WithRSAEncryption
17:80:1d:c8:26:67:a9:d5:e8:09:41:84:4e:0e:c8:11:10:38:
49:ee:29:ed:b6:d3:d4:3e:c1:f0:2a:ef:ae:38:20:9a:9a:b7:
2c:8e:d4:47:fd:cf:db:91:a9:5d:1e:45:d1:40:97:c8:85:c1:
f8:72:b1:31:5b:d7:27:5d:4f:69:24:98:7d:f8:3c:90:54:35:
70:ee:3e:e5:d5:05:66:ab:94:2e:36:e3:cc:95:02:ba:f1:5a:
61:a1:03:e6:c4:46:17:2e:8e:87:48:7a:96:1e:ef:15:34:7b:
50:63:5e:1f:d4:a5:16:77:56:bf:de:0a:dd:40:5c:0d:77:33:
d4:2f:77:67:34:a9:57:76:11:4b:51:86:d9:10:a8:78:8f:a1:
bb:3b:50:c6:bc:ea:7c:c6:4e:f6:34:be:0f:6b:66:62:7a:8c:
fd:0b:c1:45:8b:09:0e:8e:22:69:6a:3b:f9:ac:02:b9:63:7d:
6f:d3:b4:9e:a9:89:48:13:15:96:12:31:ee:dd:f6:46:f8:d6:
15:50:7c:05:b9:bc:6d:e6:1a:5b:76:fd:93:83:73:af:ae:f3:
1d:1a:25:8a:4b:b4:96:f4:18:38:8c:db:82:a0:65:85:c5:04:
92:43:b0:9d:a6:bb:65:d0:04:1f:e2:16:c1:71:ba:21:14:27:
f1:71:74:50
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzJu8rZWURXgkGOpZOMOFzMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwMmRhYzYwNWY0NjU5NzE4YzBhMTVlMWY3MzJjYmQ0ZjQ4
YWFlN2IwHhcNMjQwMTAyMTAzMjU2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMWY1NWI3Mjg0YzZmMjhlZWM2Y2NlYzU3OTg3Yzg5NGE4ODkzNjdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAicXKyl4GxGJyMbvgZIqlcTgRB3wH
e+O/dsM4LIdPOiKZG/XkTYJZh/XHpwyb+EGWRUGXMLD5ufd8d9g1cff8sSxGun5Z
EHklPiAwoKISqv0S36rA3XIU0g6EOj3D2ok4QFH26ToS6CKbju66uGhZ3ogQ8o8s
j3fFXPNqARtLnG/TKEkd4oTEboJXIpIvyHsnKLAKnzQ6dZVNrNyyNjyMBU9xMTwS
BVVd9+hC+ESqG9k/6q57sTdXYc4L5aU2/f3Jw/WUajxyu0wq13YliKrNB8/WMPJl
E2Tw1a45EMlK4dWSh+veWRqSLM1Cm23+4RjK6bVPFd6jw4Njwn3tm7By6wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBH1W3KExvKO7GzOxXmHyJSoiTZ9MB8GA1UdIwQY
MBaAFPAtrGBfRllxjAoV4fcyy9T0iq57MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEMyc1lGOUdXWEdNQ2hYaDl6TEwxUFNLcm5zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9lOTA5NzYtM2RkMS00NzE2LWJiZjYt
MjkyYWU0NmU2MzAyLzEvRWZWYmNvVEc4bzdzYk03RmVZZklsS2lKTm4wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC9lOTA5NzYtM2RkMS00NzE2LWJiZjYtMjkyYWU0NmU2MzAy
LzEvOEMyc1lGOUdXWEdNQ2hYaDl6TEwxUFNLcm5zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwzhEMA0G
CSqGSIb3DQEBCwUAA4IBAQAXgB3IJmep1egJQYRODsgREDhJ7intttPUPsHwKu+u
OCCamrcsjtRH/c/bkaldHkXRQJfIhcH4crExW9cnXU9pJJh9+DyQVDVw7j7l1QVm
q5QuNuPMlQK68VphoQPmxEYXLo6HSHqWHu8VNHtQY14f1KUWd1a/3grdQFwNdzPU
L3dnNKlXdhFLUYbZEKh4j6G7O1DGvOp8xk72NL4Pa2Zieoz9C8FFiwkOjiJpajv5
rAK5Y31v07SeqYlIExWWEjHu3fZG+NYVUHwFubxt5hpbdv2Tg3OvrvMdGiWKS7SW
9Bg4jNuCoGWFxQSSQ7Cdprtl0AQf4hbBcbohFCfxcXRQ
-----END CERTIFICATE-----
Generated at Sat Nov 23 04:44:08 2024 by rpki-client on console-ams.rpki-client.org