Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/eOckwsBKIhCxO8mt8Gmb0BE3dkw.roa
File: eOckwsBKIhCxO8mt8Gmb0BE3dkw.roa (raw, json)
Hash identifier: mmVI4yHdBah7f7ZEWm9kwPt1WVGlaQY1XOs5fvV/evo=
Subject key identifier: 78:E7:24:C2:C0:4A:22:10:B1:3B:C9:AD:F0:69:9B:D0:11:37:76:4C
Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Certificate serial: 018CC26D5F1BBA2E81F2BC7B9B3787A46543
Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/eOckwsBKIhCxO8mt8Gmb0BE3dkw.roa
Signing time: Mon 01 Jan 2024 00:29:56 +0000
ROA not before: Mon 01 Jan 2024 00:29:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197050
IP address blocks: 95.43.232.0/22 maxlen: 24
213.16.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:5f:1b:ba:2e:81:f2:bc:7b:9b:37:87:a4:65:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Validity
Not Before: Jan 1 00:29:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=78e724c2c04a2210b13bc9adf0699bd01137764c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c8:4a:6f:dc:a3:c2:89:40:69:70:12:8b:0b:
75:3f:1f:60:67:67:8f:e1:ed:94:58:a9:3b:a3:02:
37:2f:bf:da:c5:e0:eb:3c:67:bc:8f:8f:15:9d:f1:
44:ca:a1:71:d3:88:24:fa:80:22:73:8d:68:df:c7:
38:6f:69:a5:49:39:4f:86:3a:ef:64:cc:69:6e:51:
7b:f8:5f:38:06:cb:05:c1:a0:94:2e:34:1e:95:7d:
18:0b:b4:0a:e7:c6:15:9d:99:e6:be:8b:4c:78:b9:
a3:7b:de:06:21:6a:10:7e:40:2d:21:48:9f:81:58:
0c:ab:0a:21:f8:71:c8:e3:0c:d7:fb:b6:0f:33:bd:
26:ab:03:8a:36:a3:d9:9c:f2:0b:ea:04:24:dc:f5:
bd:9d:c5:4a:f5:9d:a0:44:a3:42:67:32:ab:5c:22:
e7:53:77:c1:14:dd:1e:90:33:dd:71:2c:0d:a4:c6:
d8:aa:1a:f4:1f:fb:55:ef:9c:4f:f5:6e:a9:eb:f2:
b4:81:47:58:9b:3f:17:e8:08:12:56:af:6a:07:07:
2d:55:91:66:ec:96:69:a2:f5:60:47:37:ce:50:85:
0d:7f:95:d4:c4:a2:87:71:99:b2:98:44:c9:cb:0d:
41:d3:6b:75:e5:bd:f5:d3:ce:b6:3c:4b:3d:28:80:
6d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:E7:24:C2:C0:4A:22:10:B1:3B:C9:AD:F0:69:9B:D0:11:37:76:4C
X509v3 Authority Key Identifier:
keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/eOckwsBKIhCxO8mt8Gmb0BE3dkw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.43.232.0/22
213.16.45.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:71:54:ac:f3:70:f7:76:fa:96:2e:8d:29:8a:c8:50:20:7a:
dd:d8:97:70:65:a6:7b:a9:aa:ff:f5:6d:fe:1c:bb:0a:7a:49:
c8:43:81:d5:90:fe:3b:6c:6e:79:3a:4c:5f:ae:12:a4:fd:3d:
57:23:d4:ef:35:7e:00:c1:59:26:bf:f0:f3:a9:35:95:94:2b:
97:df:31:6f:4b:17:4d:ea:ea:62:b3:43:ba:6f:a6:0b:ea:1c:
d4:12:40:45:ce:27:f5:91:02:9d:de:44:2f:c1:78:e7:b5:ac:
d7:f1:04:ac:99:1f:a4:d6:0b:16:ce:b4:47:a1:20:93:1b:24:
de:66:89:d7:b5:11:e5:9e:bc:8f:02:7c:47:b0:67:b5:7d:7a:
3e:d5:37:26:5b:ff:b1:b1:69:00:e9:ea:ce:8a:f8:a3:c5:66:
10:43:9e:2a:9e:d8:b7:6d:05:b6:6d:bc:a6:a7:67:fc:31:56:
51:4c:8c:b5:93:22:07:6a:3e:a1:b7:bc:5f:15:f2:03:94:05:
30:88:ea:a8:10:74:31:40:b6:6e:80:bc:de:f8:0c:6d:1c:fc:
f2:f4:d2:c9:e6:b1:b4:64:f0:97:e7:fe:0c:6f:ee:10:35:f2:
15:a8:c6:53:42:bc:98:e3:4b:fa:36:71:b5:33:12:b6:b2:73:
a4:2f:c1:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:22:34 2024 by rpki-client on console-fra.rpki-client.org