Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/Eu6Nn84yrYtCnpqrqBa6Z_bZ8Jw.roa
File: Eu6Nn84yrYtCnpqrqBa6Z_bZ8Jw.roa (raw, json)
Hash identifier: uuEo2yb8bRzkHAHR2VNdu1EU18Qger62EBysLhAu3xo=
Subject key identifier: 12:EE:8D:9F:CE:32:AD:8B:42:9E:9A:AB:A8:16:BA:67:F6:D9:F0:9C
Certificate issuer: /CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
Certificate serial: 01927A7B453F6E44E98542EA8B4EF71C1DD9
Authority key identifier: FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/Eu6Nn84yrYtCnpqrqBa6Z_bZ8Jw.roa
Signing time: Fri 11 Oct 2024 07:29:11 +0000
ROA not before: Fri 11 Oct 2024 07:29:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 45.139.68.0/23 maxlen: 24
45.150.80.0/23 maxlen: 24
80.91.221.0/24 maxlen: 24
95.214.38.0/24 maxlen: 24
95.214.39.0/24 maxlen: 24
193.36.162.0/24 maxlen: 24
193.36.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.mft
rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:7a:7b:45:3f:6e:44:e9:85:42:ea:8b:4e:f7:1c:1d:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
Validity
Not Before: Oct 11 07:29:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=12ee8d9fce32ad8b429e9aaba816ba67f6d9f09c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:8c:0e:c2:14:14:16:9c:01:3e:f5:53:4a:ad:
39:2b:d6:29:29:4f:b2:50:e4:f9:c9:82:7e:b3:fb:
af:36:ea:f6:8c:4b:93:ea:ba:6d:50:37:31:fe:4d:
ec:e8:a4:9f:31:c6:8f:9b:7b:0b:05:a2:3c:24:1b:
9c:6a:90:51:cd:82:61:89:de:94:e6:52:59:a1:73:
31:bc:b0:a2:c2:0d:37:a5:c3:68:97:80:e6:23:18:
6c:63:67:ed:75:d2:70:24:81:23:99:42:b2:0e:f5:
e4:4b:44:fc:5c:95:92:03:d0:a8:90:16:0e:49:61:
07:1f:54:3d:9b:ca:55:5d:d8:38:43:07:d8:73:46:
2f:d6:a4:87:00:52:13:c1:df:54:f1:7f:44:8e:b5:
cb:20:64:92:dd:ea:d8:88:ca:83:62:6e:73:6f:98:
c8:61:aa:4a:80:20:ae:e0:66:c1:f9:9d:66:2b:00:
d6:98:01:d1:13:6d:2b:6f:1e:01:dc:6d:10:88:39:
e0:9a:e6:2d:e5:9b:ce:ee:a1:43:6f:65:e8:c2:8a:
4c:71:9f:41:71:3a:25:31:a5:c4:4c:04:af:7a:e1:
62:be:13:49:26:93:ac:32:4d:8d:04:14:55:4c:58:
f6:09:10:ef:82:e9:65:8e:f6:38:51:f2:ec:ec:c3:
c0:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:EE:8D:9F:CE:32:AD:8B:42:9E:9A:AB:A8:16:BA:67:F6:D9:F0:9C
X509v3 Authority Key Identifier:
keyid:FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/Eu6Nn84yrYtCnpqrqBa6Z_bZ8Jw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.68.0/23
45.150.80.0/23
80.91.221.0/24
95.214.38.0/23
193.36.162.0/23
Signature Algorithm: sha256WithRSAEncryption
26:02:fe:71:48:64:05:43:50:f0:e0:5e:61:07:de:a5:b7:86:
4a:8e:12:ed:f8:85:e1:54:88:6f:dc:69:3c:0c:4c:c2:89:15:
99:f8:27:0b:94:cc:ad:92:cb:90:80:cb:65:3b:cd:8b:1c:54:
fc:57:78:39:c9:3d:1d:4f:e1:c0:47:be:54:b9:88:28:83:08:
69:f2:3c:be:4f:4e:26:bd:50:bc:d0:6f:1f:8f:69:6c:24:11:
4b:56:03:ec:88:1a:98:aa:f4:f0:6f:50:2e:0c:3b:33:e3:d3:
e9:14:b8:f3:1e:d9:42:2b:36:6b:be:af:2e:0a:b1:ae:61:3d:
20:01:32:1e:99:45:6c:13:56:4e:31:a8:4c:a1:f1:0a:6a:3c:
2a:bd:a1:d2:15:79:24:1e:11:9b:4c:67:cf:b5:5c:53:65:9c:
a9:94:60:b4:ff:bf:d2:13:4e:c2:b9:a3:01:5c:70:0b:e7:9f:
8d:68:7f:f9:3c:fe:5f:f2:85:bf:88:5f:ec:38:bb:97:8d:09:
de:b1:c8:54:7b:77:8d:ba:1e:73:db:23:e7:ca:fd:78:40:11:
49:2a:4f:c1:9a:9b:4a:90:ac:0f:6f:d1:a6:18:bc:ee:15:c4:
00:d6:50:39:9b:ca:af:6d:30:c9:74:b1:34:de:1f:3a:1d:15:
bd:ee:43:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 23:34:39 2024 by rpki-client on console-ams.rpki-client.org