Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/et8n-nupmspv48-50BLrjHMLlwo.roa
File: et8n-nupmspv48-50BLrjHMLlwo.roa (raw, json)
Hash identifier: xO5NslWqiuroxmxlKyceBEvWikBU1IpCDfjID4vnG4s=
Subject key identifier: 7A:DF:27:FA:7B:A9:9A:CA:6F:E3:CF:B9:D0:12:EB:8C:73:0B:97:0A
Certificate issuer: /CN=71051b0e2ce9a4c9e6121e983d165feab87ec354
Certificate serial: 018CC6B9224BD4BE0122ABAD97751517422F
Authority key identifier: 71:05:1B:0E:2C:E9:A4:C9:E6:12:1E:98:3D:16:5F:EA:B8:7E:C3:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cQUbDizppMnmEh6YPRZf6rh-w1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/et8n-nupmspv48-50BLrjHMLlwo.roa
Signing time: Mon 01 Jan 2024 20:31:10 +0000
ROA not before: Mon 01 Jan 2024 20:31:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 19905
IP address blocks: 185.65.58.0/24 maxlen: 24
185.65.56.0/24 maxlen: 24
152.89.172.0/24 maxlen: 24
81.92.84.0/24 maxlen: 24
81.92.85.0/24 maxlen: 24
81.92.80.0/24 maxlen: 24
81.92.81.0/24 maxlen: 24
81.92.86.0/24 maxlen: 24
81.92.87.0/24 maxlen: 24
81.92.88.0/24 maxlen: 24
81.92.89.0/24 maxlen: 24
81.92.90.0/24 maxlen: 24
81.92.94.0/24 maxlen: 24
81.92.95.0/24 maxlen: 24
2a01:c8:ff00::/48 maxlen: 48
2a01:c8:300::/48 maxlen: 48
2a01:c8:200::/48 maxlen: 48
2a01:c8:100::/48 maxlen: 48
2a01:c8::/48 maxlen: 48
2a09:35c0:102::/48 maxlen: 48
2a01:c8:101::/48 maxlen: 48
2a01:c8:1::/48 maxlen: 48
2a01:c8:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/cQUbDizppMnmEh6YPRZf6rh-w1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/cQUbDizppMnmEh6YPRZf6rh-w1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/cQUbDizppMnmEh6YPRZf6rh-w1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 07:03:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:22:4b:d4:be:01:22:ab:ad:97:75:15:17:42:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71051b0e2ce9a4c9e6121e983d165feab87ec354
Validity
Not Before: Jan 1 20:31:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7adf27fa7ba99aca6fe3cfb9d012eb8c730b970a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:73:f3:42:3f:0d:da:87:17:21:5e:a5:11:c8:
e4:25:99:b4:79:d9:43:96:20:23:29:cf:54:35:dd:
e1:a1:d5:f2:cb:67:81:3b:25:34:41:2e:41:2c:df:
f9:68:e1:4c:b3:33:4c:bf:67:76:6d:8d:19:9a:b1:
19:f9:86:d2:92:2b:97:a7:a7:ce:9a:68:06:5c:db:
3f:85:b5:90:ef:46:d5:9e:56:33:dd:b2:37:8c:e4:
8c:ed:49:fa:ab:b2:56:a2:67:bb:01:30:cb:14:c9:
2a:a5:a0:99:f7:41:5a:ec:49:b0:4f:9a:24:99:30:
4b:f2:a8:ef:6f:28:cf:6b:65:f1:00:35:19:b9:56:
d4:2c:88:65:2b:04:1e:67:ec:57:5e:4e:2a:66:3b:
e4:b4:17:b1:b9:26:c9:04:8e:63:cc:10:d1:8f:fa:
c8:1f:af:11:96:1e:ab:b6:bb:31:63:19:ec:83:37:
c0:96:7b:d8:14:66:52:1b:48:48:19:b1:28:74:9c:
00:5c:71:e5:0b:8f:82:96:47:74:9e:7f:8b:51:31:
f4:1b:15:6c:ae:da:9e:d6:2e:32:1d:3d:7c:b1:b6:
47:e8:67:02:f3:64:08:23:cd:a5:f2:1e:98:ce:f1:
81:12:e8:b6:77:e5:21:51:22:81:d8:7d:55:83:e7:
88:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:DF:27:FA:7B:A9:9A:CA:6F:E3:CF:B9:D0:12:EB:8C:73:0B:97:0A
X509v3 Authority Key Identifier:
keyid:71:05:1B:0E:2C:E9:A4:C9:E6:12:1E:98:3D:16:5F:EA:B8:7E:C3:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cQUbDizppMnmEh6YPRZf6rh-w1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/et8n-nupmspv48-50BLrjHMLlwo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/cQUbDizppMnmEh6YPRZf6rh-w1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.92.80.0/23
81.92.84.0-81.92.90.255
81.92.94.0/23
152.89.172.0/24
185.65.56.0/24
185.65.58.0/24
IPv6:
2a01:c8::-2a01:c8:2:ffff:ffff:ffff:ffff:ffff
2a01:c8:100::/47
2a01:c8:200::/48
2a01:c8:300::/48
2a01:c8:ff00::/48
2a09:35c0:102::/48
Signature Algorithm: sha256WithRSAEncryption
53:2d:9f:95:a2:1f:fe:1f:d3:07:a1:0e:c9:9e:c1:b2:dd:c2:
0d:56:fc:35:b7:bd:b2:53:db:c1:2c:49:6d:8a:b3:50:07:2d:
19:bc:e2:2e:47:d0:86:64:54:e5:05:40:1b:b1:11:1a:ee:33:
59:bb:c0:f2:29:b3:21:4d:4a:21:d9:7a:32:b8:5d:5c:c8:9b:
35:ba:a4:4d:f8:ac:86:ad:54:23:cd:c5:b4:88:52:b9:c7:8b:
7a:bf:f4:ce:03:89:7b:ab:4c:37:c5:11:a1:ae:b7:82:f4:60:
db:ac:3a:e4:51:07:12:e5:88:6f:9f:d1:0c:cb:20:07:2a:87:
d7:ea:25:ad:dd:06:5a:a1:bf:42:6c:a7:c6:92:d0:c2:3f:4a:
55:0d:fe:93:0b:45:50:20:f9:e3:66:fb:03:00:d4:70:f9:b0:
61:16:e7:36:80:1c:16:90:dc:00:63:17:b9:a7:32:5d:bc:44:
24:ef:90:76:68:22:73:3a:25:86:2d:7e:94:f7:ad:5b:62:3e:
5f:77:28:8f:81:a6:a9:f6:a0:3c:52:fa:e1:5a:e4:9e:60:14:
65:7b:71:6b:03:4a:1a:e6:09:ab:b4:0e:d9:ac:00:b5:32:47:
cb:b7:50:81:54:b6:b1:f0:f5:4e:df:22:e1:ea:46:58:16:ce:
ba:a5:4d:bf
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu May 2 13:29:52 2024 by rpki-client on console-ams.rpki-client.org