Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/248e6f-b1fb-4da7-97dd-954372965c5e/1/eEbiDGdUtdDbwe6zCkntuD8hyJU.roa
File: eEbiDGdUtdDbwe6zCkntuD8hyJU.roa (raw, json)
Hash identifier: SF0OiKwA9Gfu9v6t973wmyNn5QZ8Ki78iu1QYgU19dg=
Subject key identifier: 78:46:E2:0C:67:54:B5:D0:DB:C1:EE:B3:0A:49:ED:B8:3F:21:C8:95
Certificate issuer: /CN=2e2f84f555a666aa0c04a8fbe7dc1910075f5658
Certificate serial: 018CC56E5C22BA0BBD9AD5E7902BA6F98F05
Authority key identifier: 2E:2F:84:F5:55:A6:66:AA:0C:04:A8:FB:E7:DC:19:10:07:5F:56:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Li-E9VWmZqoMBKj759wZEAdfVlg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/248e6f-b1fb-4da7-97dd-954372965c5e/1/eEbiDGdUtdDbwe6zCkntuD8hyJU.roa
Signing time: Mon 01 Jan 2024 14:29:53 +0000
ROA not before: Mon 01 Jan 2024 14:29:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41090
IP address blocks: 93.95.232.0/21 maxlen: 21
185.14.0.0/22 maxlen: 22
195.189.64.0/22 maxlen: 22
2a00:c000::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/248e6f-b1fb-4da7-97dd-954372965c5e/1/Li-E9VWmZqoMBKj759wZEAdfVlg.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/248e6f-b1fb-4da7-97dd-954372965c5e/1/Li-E9VWmZqoMBKj759wZEAdfVlg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Li-E9VWmZqoMBKj759wZEAdfVlg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 02 Jul 2024 08:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:5c:22:ba:0b:bd:9a:d5:e7:90:2b:a6:f9:8f:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e2f84f555a666aa0c04a8fbe7dc1910075f5658
Validity
Not Before: Jan 1 14:29:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7846e20c6754b5d0dbc1eeb30a49edb83f21c895
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:49:1a:6e:d6:55:48:0a:33:50:f6:5e:2c:f6:
b4:2c:6d:43:09:68:f9:2e:a3:d6:8b:95:ae:b6:a3:
51:ed:10:df:8c:da:8e:72:76:ca:1c:b2:3b:dc:26:
5e:df:77:b5:0d:96:c8:a3:eb:59:92:c0:71:77:55:
40:65:b6:0d:e7:5d:6e:bd:0c:37:b1:e8:d9:98:22:
f3:ec:1c:37:3d:73:07:d8:12:41:2f:75:a0:93:04:
38:f3:74:61:8b:ea:01:35:ba:97:fe:60:0f:05:0f:
05:e7:e7:8f:07:64:73:df:b8:99:c1:40:38:7f:ee:
e5:53:e0:9a:0f:9c:46:3c:ea:4e:68:27:06:57:fe:
a9:e7:94:90:05:c3:47:45:3f:d5:5f:09:b3:5b:30:
a1:4d:4a:49:da:ac:d8:e0:14:46:cf:87:ff:c2:63:
e4:f4:03:de:9e:3b:f2:3a:3f:bc:e7:4e:ad:73:29:
da:2f:78:de:c4:bb:b2:38:56:9f:08:a9:fe:09:3a:
7e:14:b2:3a:f3:8c:dd:4a:8b:90:a3:ba:c2:26:0e:
54:f5:da:b5:2a:66:f8:5e:a3:e4:c8:8f:94:1e:9a:
a8:27:aa:26:ee:b3:d7:8d:3f:80:7d:f0:e8:85:aa:
4c:f5:c0:9a:11:2f:c6:bb:d5:8d:7f:bc:f2:5d:a7:
90:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:46:E2:0C:67:54:B5:D0:DB:C1:EE:B3:0A:49:ED:B8:3F:21:C8:95
X509v3 Authority Key Identifier:
keyid:2E:2F:84:F5:55:A6:66:AA:0C:04:A8:FB:E7:DC:19:10:07:5F:56:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Li-E9VWmZqoMBKj759wZEAdfVlg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/248e6f-b1fb-4da7-97dd-954372965c5e/1/eEbiDGdUtdDbwe6zCkntuD8hyJU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/248e6f-b1fb-4da7-97dd-954372965c5e/1/Li-E9VWmZqoMBKj759wZEAdfVlg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.95.232.0/21
185.14.0.0/22
195.189.64.0/22
IPv6:
2a00:c000::/32
Signature Algorithm: sha256WithRSAEncryption
a0:c8:5b:e9:2f:43:e4:d1:c4:14:0c:55:ed:2f:09:f5:4d:96:
ec:37:77:0b:15:d5:df:73:9a:16:e0:83:08:3e:2d:34:5a:ab:
97:9e:d4:20:17:9e:c8:da:78:a6:27:de:ff:92:24:fb:d3:d9:
e8:23:80:7a:40:65:97:c2:42:72:f1:55:93:29:34:58:e1:16:
2b:55:4b:2a:99:56:87:b8:85:43:0f:f7:99:ec:41:ba:52:dc:
a8:e5:f3:cd:75:c3:16:a0:d4:e0:4a:49:1c:d2:05:a9:26:eb:
1f:f2:8a:86:27:7d:eb:5a:85:7e:7f:8f:76:8d:14:29:30:c8:
f6:76:8e:ed:8b:76:6d:e9:18:89:3d:c8:a1:de:45:a2:74:85:
14:36:6d:0f:92:8a:57:6a:d9:8a:73:36:06:d2:0c:7a:33:b8:
c1:16:f3:22:be:83:90:fb:0d:b9:2a:13:c5:a0:ee:a1:7c:75:
8e:39:c9:72:9f:78:9d:30:65:16:a0:44:d7:34:64:e3:6c:2c:
48:6e:49:67:2a:98:48:a8:ed:41:6c:3a:ef:f3:00:20:2e:04:
ce:b0:80:96:d2:80:0d:11:51:be:0f:74:1d:b2:3c:3c:a7:86:
78:3b:93:53:4c:6b:a6:05:a3:cb:e0:9f:ec:bb:b1:7f:4b:65:
4f:43:d4:18
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAYzFblwiugu9mtXnkCum+Y8FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlMmY4NGY1NTVhNjY2YWEwYzA0YThmYmU3ZGMxOTEwMDc1
ZjU2NTgwHhcNMjQwMTAxMTQyOTUzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ODQ2ZTIwYzY3NTRiNWQwZGJjMWVlYjMwYTQ5ZWRiODNmMjFjODk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlEkabtZVSAozUPZeLPa0LG1DCWj5
LqPWi5WutqNR7RDfjNqOcnbKHLI73CZe33e1DZbIo+tZksBxd1VAZbYN511uvQw3
sejZmCLz7Bw3PXMH2BJBL3WgkwQ483Rhi+oBNbqX/mAPBQ8F5+ePB2Rz37iZwUA4
f+7lU+CaD5xGPOpOaCcGV/6p55SQBcNHRT/VXwmzWzChTUpJ2qzY4BRGz4f/wmPk
9APenjvyOj+8506tcynaL3jexLuyOFafCKn+CTp+FLI684zdSouQo7rCJg5U9dq1
Kmb4XqPkyI+UHpqoJ6om7rPXjT+AffDohapM9cCaES/Gu9WNf7zyXaeQ1QIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFHhG4gxnVLXQ28HuswpJ7bg/IciVMB8GA1UdIwQY
MBaAFC4vhPVVpmaqDASo++fcGRAHX1ZYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGktRTlWV21acW9NQktqNzU5d1pFQWRmVmxnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy8yNDhlNmYtYjFmYi00ZGE3LTk3ZGQt
OTU0MzcyOTY1YzVlLzEvZUViaURHZFV0ZERid2U2ekNrbnR1RDhoeUpVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy8yNDhlNmYtYjFmYi00ZGE3LTk3ZGQtOTU0MzcyOTY1YzVl
LzEvTGktRTlWV21acW9NQktqNzU5d1pFQWRmVmxnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQDXV/oAwQC
uQ4AAwQCw71AMA0EAgACMAcDBQAqAMAAMA0GCSqGSIb3DQEBCwUAA4IBAQCgyFvp
L0Pk0cQUDFXtLwn1TZbsN3cLFdXfc5oW4IMIPi00WquXntQgF57I2nimJ97/kiT7
09noI4B6QGWXwkJy8VWTKTRY4RYrVUsqmVaHuIVDD/eZ7EG6Utyo5fPNdcMWoNTg
Skkc0gWpJusf8oqGJ33rWoV+f492jRQpMMj2do7ti3Zt6RiJPcih3kWidIUUNm0P
kopXatmKczYG0gx6M7jBFvMivoOQ+w25KhPFoO6hfHWOOclyn3idMGUWoETXNGTj
bCxIbklnKphIqO1BbDrv8wAgLgTOsICW0oANEVG+D3Qdsjw8p4Z4O5NTTGumBaPL
4J/su7F/S2VPQ9QY
-----END CERTIFICATE-----
Generated at Mon Jul 1 14:20:55 2024 by rpki-client on console-fra.rpki-client.org