Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/ad64bb-d539-4a8e-b0e6-5f89b885f729/1/e96Ds7XMC_eWB9UfYTA_eny_fDA.roa
File: e96Ds7XMC_eWB9UfYTA_eny_fDA.roa (raw, json)
Hash identifier: 0s91dNOsw6HG27FySWIyXu1++ulPV7M7QzAStUVIFbE=
Subject key identifier: 7B:DE:83:B3:B5:CC:0B:F7:96:07:D5:1F:61:30:3F:7A:7C:BF:7C:30
Certificate issuer: /CN=e8d878aa53081893ba528524ef143ea9271392b8
Certificate serial: 018CC8DE239283C2C9D683269392372FFFD5
Authority key identifier: E8:D8:78:AA:53:08:18:93:BA:52:85:24:EF:14:3E:A9:27:13:92:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Nh4qlMIGJO6UoUk7xQ-qScTkrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/ad64bb-d539-4a8e-b0e6-5f89b885f729/1/e96Ds7XMC_eWB9UfYTA_eny_fDA.roa
Signing time: Tue 02 Jan 2024 06:30:50 +0000
ROA not before: Tue 02 Jan 2024 06:30:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 64431
IP address blocks: 185.165.128.0/22 maxlen: 24
2a0a:600::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/ad64bb-d539-4a8e-b0e6-5f89b885f729/1/6Nh4qlMIGJO6UoUk7xQ-qScTkrg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/ad64bb-d539-4a8e-b0e6-5f89b885f729/1/6Nh4qlMIGJO6UoUk7xQ-qScTkrg.mft
rsync://rpki.ripe.net/repository/DEFAULT/6Nh4qlMIGJO6UoUk7xQ-qScTkrg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:23:92:83:c2:c9:d6:83:26:93:92:37:2f:ff:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8d878aa53081893ba528524ef143ea9271392b8
Validity
Not Before: Jan 2 06:30:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7bde83b3b5cc0bf79607d51f61303f7a7cbf7c30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:06:be:52:0f:1a:65:24:ea:9e:af:17:fc:b1:
12:73:73:09:7b:ea:a2:e1:81:e2:98:11:5c:c1:6c:
ff:ea:3a:2c:12:98:02:35:7b:95:bf:39:c3:98:e7:
20:79:dc:b7:1f:ec:e9:fc:0d:3d:3b:30:2e:4f:3c:
ff:8b:ed:0e:72:46:bf:81:29:c1:4b:9b:57:25:e2:
4f:22:be:5e:90:8f:bf:93:ac:af:1f:e3:48:68:f8:
74:e0:04:f5:ba:40:78:63:f9:9e:59:47:fa:31:cb:
a0:0c:37:38:69:78:a2:cf:04:91:1f:04:95:b1:3d:
b3:67:c0:93:51:d4:48:84:c8:88:a8:28:17:73:d8:
08:97:1a:01:d7:da:11:43:76:9e:a4:f3:21:1b:42:
56:6c:73:1c:b4:7c:e0:8a:43:34:93:c9:a7:c8:2b:
6b:3f:e2:fc:ec:a0:a4:63:a6:30:36:c9:21:ec:2e:
8e:cf:12:ac:56:da:90:5f:cc:24:ae:34:ad:48:11:
e2:58:75:7e:a9:05:fa:37:f5:93:48:f3:4a:a2:72:
30:39:1b:02:88:a4:45:71:e4:d6:64:ff:79:4e:b9:
7e:d5:a7:80:da:9b:f5:84:42:5c:fe:52:36:0e:63:
34:67:36:d1:69:7b:fa:66:eb:1d:b2:bf:aa:65:a3:
8d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:DE:83:B3:B5:CC:0B:F7:96:07:D5:1F:61:30:3F:7A:7C:BF:7C:30
X509v3 Authority Key Identifier:
keyid:E8:D8:78:AA:53:08:18:93:BA:52:85:24:EF:14:3E:A9:27:13:92:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Nh4qlMIGJO6UoUk7xQ-qScTkrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ad64bb-d539-4a8e-b0e6-5f89b885f729/1/e96Ds7XMC_eWB9UfYTA_eny_fDA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ad64bb-d539-4a8e-b0e6-5f89b885f729/1/6Nh4qlMIGJO6UoUk7xQ-qScTkrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.165.128.0/22
IPv6:
2a0a:600::/29
Signature Algorithm: sha256WithRSAEncryption
2e:d4:d6:2a:b3:72:32:6e:41:30:b1:08:9c:9d:e2:7f:b2:93:
63:06:82:41:9b:dc:ea:05:70:83:7f:10:dc:95:dd:f1:64:76:
2c:a3:c1:86:be:21:c8:ed:17:32:fc:4b:69:16:e1:f5:6d:ad:
d0:dc:19:f6:66:a3:f4:0b:c9:41:bc:1b:0f:3d:53:f5:fc:46:
b6:50:f7:66:ab:7e:40:d2:46:13:e3:70:43:57:0b:bf:04:d2:
d0:ff:4e:5b:8a:61:e1:bf:64:29:e6:57:66:9a:cb:47:4e:f5:
38:6e:3d:78:d7:0f:37:21:ec:7d:51:62:3d:ad:53:90:cd:17:
5b:fe:92:12:78:cb:b7:01:c7:60:fe:2f:42:23:e8:7a:cc:89:
ed:31:91:ce:c3:c3:16:69:62:f5:02:ae:ee:41:d0:d8:a8:0d:
b8:f1:68:3d:cd:61:5a:db:7f:c8:08:e6:2e:f6:87:ac:0f:2d:
c4:84:15:f6:44:d6:fa:1e:e0:65:1e:0f:cd:2d:91:83:76:02:
d5:6b:e6:6f:42:49:01:ef:6d:e4:5f:12:14:e0:57:47:f3:d0:
b9:03:75:74:c2:60:62:1e:0c:f1:af:f8:0b:80:16:1d:1c:cc:
68:ae:56:c8:ae:10:7e:d1:96:8f:c5:14:da:19:b5:02:ec:4d:
47:bc:5b:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:56:07 2024 by rpki-client on console-fra.rpki-client.org