Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/f8a63d-1730-4d88-ab38-3fd30988f677/1/Ecz0godvswPJHDIOTl9DVY_YR3Y.roa
File: Ecz0godvswPJHDIOTl9DVY_YR3Y.roa (raw, json)
Hash identifier: hEonPiJoFAxdrmAKB81XMDy4myZNF0wRT6stVIlnNdk=
Subject key identifier: 11:CC:F4:82:87:6F:B3:03:C9:1C:32:0E:4E:5F:43:55:8F:D8:47:76
Certificate issuer: /CN=19f1a9dd126f37237ce200fb8616ff937bca966c
Certificate serial: 018CC5007EF210F7519A38C07917281E067D
Authority key identifier: 19:F1:A9:DD:12:6F:37:23:7C:E2:00:FB:86:16:FF:93:7B:CA:96:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GfGp3RJvNyN84gD7hhb_k3vKlmw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a63d-1730-4d88-ab38-3fd30988f677/1/Ecz0godvswPJHDIOTl9DVY_YR3Y.roa
Signing time: Mon 01 Jan 2024 12:29:53 +0000
ROA not before: Mon 01 Jan 2024 12:29:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42926
IP address blocks: 85.95.240.0/24 maxlen: 24
85.95.239.0/24 maxlen: 24
85.95.238.0/24 maxlen: 24
85.95.237.0/24 maxlen: 24
85.95.244.0/24 maxlen: 24
85.95.243.0/24 maxlen: 24
85.95.242.0/24 maxlen: 24
85.95.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a63d-1730-4d88-ab38-3fd30988f677/1/GfGp3RJvNyN84gD7hhb_k3vKlmw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a63d-1730-4d88-ab38-3fd30988f677/1/GfGp3RJvNyN84gD7hhb_k3vKlmw.mft
rsync://rpki.ripe.net/repository/DEFAULT/GfGp3RJvNyN84gD7hhb_k3vKlmw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 00:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:7e:f2:10:f7:51:9a:38:c0:79:17:28:1e:06:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19f1a9dd126f37237ce200fb8616ff937bca966c
Validity
Not Before: Jan 1 12:29:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=11ccf482876fb303c91c320e4e5f43558fd84776
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:02:63:09:0e:95:a1:78:be:46:32:2a:b1:d5:
97:94:39:ec:05:71:44:ca:89:d0:3e:1c:01:9c:9a:
25:02:64:e5:c1:47:83:e0:be:c4:de:73:de:ca:ce:
d1:c0:02:6e:99:9b:a3:86:a2:59:67:7d:70:35:8e:
7f:20:28:d1:10:4a:5b:df:dc:fd:61:d3:25:f5:e9:
14:e7:55:bd:1e:c6:c5:61:ad:fa:b8:5d:2c:54:35:
17:ed:63:8c:7b:f2:fc:08:64:11:1f:d7:50:f1:c2:
d7:3b:ea:be:91:93:2f:9a:2c:3b:a7:ee:a8:17:54:
b0:0e:7a:68:71:7e:f8:4c:27:89:22:b7:f1:aa:fa:
ed:cf:2a:49:4b:78:dd:7d:49:b1:a6:5e:a1:73:b6:
ab:ce:02:34:02:a8:a2:2f:7e:fb:97:8b:ab:c1:c3:
f6:c3:fb:ea:6b:28:78:76:08:6b:ce:66:cb:72:4d:
a1:ba:d8:83:ab:bf:aa:84:f7:91:5d:15:ae:d1:2b:
44:55:08:66:d0:80:31:6f:ea:85:58:1a:fb:44:9e:
64:fe:d1:53:af:14:42:28:68:f5:32:3d:f0:2b:ff:
dc:a3:3c:9f:f1:fd:35:b7:33:b0:47:12:09:a3:51:
36:27:74:05:a3:af:fe:0a:55:0c:23:90:61:07:3e:
fa:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:CC:F4:82:87:6F:B3:03:C9:1C:32:0E:4E:5F:43:55:8F:D8:47:76
X509v3 Authority Key Identifier:
keyid:19:F1:A9:DD:12:6F:37:23:7C:E2:00:FB:86:16:FF:93:7B:CA:96:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GfGp3RJvNyN84gD7hhb_k3vKlmw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a63d-1730-4d88-ab38-3fd30988f677/1/Ecz0godvswPJHDIOTl9DVY_YR3Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a63d-1730-4d88-ab38-3fd30988f677/1/GfGp3RJvNyN84gD7hhb_k3vKlmw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.95.237.0-85.95.244.255
Signature Algorithm: sha256WithRSAEncryption
74:4e:69:2b:04:11:ec:da:71:74:96:c1:ce:cd:35:01:43:d2:
bb:5d:aa:8f:90:33:fd:65:64:27:96:8e:ff:1d:04:38:3c:c2:
c6:23:39:17:06:fe:e3:7f:79:44:d9:48:35:33:6b:88:2c:2c:
3c:de:92:80:c8:5e:fa:28:84:51:14:cf:72:23:0a:28:d5:26:
d3:09:4d:30:b3:1c:1d:b9:01:f8:cd:ab:63:80:3f:27:b2:4f:
2b:db:92:99:96:63:b7:83:e6:0b:e0:c3:fa:0e:b8:6a:e7:f1:
17:df:bc:d6:9c:fa:f6:ff:7e:1c:e7:9e:2d:98:45:89:30:b7:
ae:fc:eb:dc:4c:d9:d1:86:d4:38:ba:8b:70:34:69:cf:5b:27:
d3:c9:99:c5:c7:86:f1:27:6b:48:fe:55:64:19:fc:d1:95:9e:
fa:4d:23:ac:74:1b:7e:fc:f6:7e:6f:41:de:db:6a:9f:21:b7:
ea:25:3c:03:b1:f6:1b:9b:7d:8a:57:48:4d:40:76:29:58:1d:
a9:5f:de:c4:dd:96:9a:4b:5e:5a:a3:4f:b5:68:95:80:8a:c3:
0f:c2:a1:5e:3b:c1:ac:88:73:53:5e:0f:35:37:b8:c6:e8:33:
65:05:e8:46:f7:02:89:9f:0a:48:b7:68:87:45:77:03:5b:f0:
86:27:48:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:04:55 2024 by rpki-client on console-ams.rpki-client.org