Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/931f81-c409-4d3a-95df-49098897ee4a/1/9VEta8gQKTDG3pkNvobRJzUrJxI.roa
File: 9VEta8gQKTDG3pkNvobRJzUrJxI.roa (raw, json)
Hash identifier: lEKrKYrTQK0EULFegel+U1xRyQ4Tzqj++w3SEyHd4vQ=
Subject key identifier: F5:51:2D:6B:C8:10:29:30:C6:DE:99:0D:BE:86:D1:27:35:2B:27:12
Certificate issuer: /CN=ebf760c05773c15d73676450344668fefb723447
Certificate serial: 018D078B8603A1BA2F803872FD9974798A60
Authority key identifier: EB:F7:60:C0:57:73:C1:5D:73:67:64:50:34:46:68:FE:FB:72:34:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6_dgwFdzwV1zZ2RQNEZo_vtyNEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/931f81-c409-4d3a-95df-49098897ee4a/1/9VEta8gQKTDG3pkNvobRJzUrJxI.roa
Signing time: Sun 14 Jan 2024 10:36:40 +0000
ROA not before: Sun 14 Jan 2024 10:36:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 19905
IP address blocks: 85.194.196.0/22 maxlen: 24
185.76.32.0/22 maxlen: 24
37.98.224.0/21 maxlen: 24
109.205.112.0/21 maxlen: 24
85.113.90.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/931f81-c409-4d3a-95df-49098897ee4a/1/6_dgwFdzwV1zZ2RQNEZo_vtyNEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/931f81-c409-4d3a-95df-49098897ee4a/1/6_dgwFdzwV1zZ2RQNEZo_vtyNEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/6_dgwFdzwV1zZ2RQNEZo_vtyNEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 16:59:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:07:8b:86:03:a1:ba:2f:80:38:72:fd:99:74:79:8a:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebf760c05773c15d73676450344668fefb723447
Validity
Not Before: Jan 14 10:36:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f5512d6bc8102930c6de990dbe86d127352b2712
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:46:3f:8a:e1:d9:37:a4:ad:c1:39:9e:bf:d1:
a6:d6:eb:4a:a8:c0:8c:f5:c1:79:c9:fb:7e:19:06:
27:2e:ea:85:12:dc:c0:43:06:cc:ea:03:6b:ab:ae:
97:c7:ae:a5:a6:6c:a6:be:85:1d:d4:cc:cb:22:44:
11:2a:97:3e:ff:bd:66:58:d5:80:6f:d2:ca:18:2b:
43:77:fe:50:62:56:3b:8a:af:7b:8b:2c:6e:0f:b6:
87:31:5d:c8:25:af:19:45:cc:3c:40:c2:fb:0e:73:
12:7b:6e:a6:9b:dd:db:11:f2:c5:8b:84:11:7b:37:
ae:9a:a0:7d:9c:44:da:5c:64:c4:e0:51:60:c1:3e:
fb:e9:b6:f0:85:e4:51:67:7d:23:3a:ba:7e:cc:47:
ca:f1:4d:7b:d4:ea:48:f8:4c:2c:ea:b2:31:66:c7:
9c:46:91:a9:8c:dc:9c:fe:39:cf:18:01:bd:bb:64:
64:11:1d:aa:ee:5d:ea:39:b9:cd:84:d9:0e:0f:01:
04:90:31:75:4c:5c:77:c3:79:2d:05:6c:87:bd:60:
04:83:a6:a2:de:f5:de:b4:a9:de:66:95:3c:cb:06:
e9:5d:5f:da:d5:a8:4c:df:fe:2b:76:4d:52:1c:52:
94:35:eb:10:98:c9:92:51:3b:00:99:2b:e1:87:42:
2b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:51:2D:6B:C8:10:29:30:C6:DE:99:0D:BE:86:D1:27:35:2B:27:12
X509v3 Authority Key Identifier:
keyid:EB:F7:60:C0:57:73:C1:5D:73:67:64:50:34:46:68:FE:FB:72:34:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6_dgwFdzwV1zZ2RQNEZo_vtyNEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/931f81-c409-4d3a-95df-49098897ee4a/1/9VEta8gQKTDG3pkNvobRJzUrJxI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/931f81-c409-4d3a-95df-49098897ee4a/1/6_dgwFdzwV1zZ2RQNEZo_vtyNEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.98.224.0/21
85.113.90.0/23
85.194.196.0/22
109.205.112.0/21
185.76.32.0/22
Signature Algorithm: sha256WithRSAEncryption
76:a9:47:2f:d3:a6:5e:85:95:df:35:36:03:26:3f:74:02:f2:
c0:2b:18:58:f7:26:10:b9:e7:9d:0c:ea:92:30:14:34:e6:92:
80:09:a4:4a:f6:21:17:68:5e:39:d3:db:2c:4c:cc:59:4d:9a:
1e:23:a0:3b:c4:27:0a:82:a1:9e:95:a3:70:dd:73:e5:ec:b1:
e7:91:83:ee:1d:17:11:ab:d4:16:f0:01:f9:76:02:ce:d6:ee:
9a:ad:7d:a4:b8:14:9e:14:fb:8e:b6:34:bf:92:8b:0b:fc:f6:
4d:53:78:6d:14:88:97:58:21:5e:d5:a5:99:49:22:b3:1b:3b:
ea:62:eb:9e:2d:c3:b1:f4:60:a0:a0:5d:64:81:55:8b:ab:a7:
02:0a:38:28:7e:11:62:31:0f:f8:e2:ed:30:47:e1:ec:fe:cc:
80:e4:23:7f:e5:b9:e4:62:32:aa:d8:0a:8e:3c:99:53:b1:6f:
1f:66:05:58:6a:9a:cc:24:d2:a8:10:0c:75:21:23:36:b4:7c:
44:b2:cd:a3:7f:16:5c:84:45:e1:a4:4c:26:45:e7:c8:1d:2c:
e7:bd:dc:6a:98:26:20:05:6b:f3:7e:7c:0f:86:03:eb:04:6c:
4b:b0:5c:e6:1b:8c:3c:15:4d:73:07:09:c7:19:6b:47:c7:a5:
a9:e2:e9:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 21:17:23 2024 by rpki-client on console-ams.rpki-client.org