Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/59a032-c384-43df-8c9d-ef0b82189444/1/eAvEybcNCN1obsSH04djDkNKeew.roa
File: eAvEybcNCN1obsSH04djDkNKeew.roa (raw, json)
Hash identifier: h+n82Ne/E/VzYrVZxfV1OzFd8NBaCA+ti0VJT+ZrojU=
Subject key identifier: 78:0B:C4:C9:B7:0D:08:DD:68:6E:C4:87:D3:87:63:0E:43:4A:79:EC
Certificate issuer: /CN=e3280c6352a0bfbb79d249c8875ed186ecce8a86
Certificate serial: 018FE7DF149B1B0895952465C41A637A967D
Authority key identifier: E3:28:0C:63:52:A0:BF:BB:79:D2:49:C8:87:5E:D1:86:EC:CE:8A:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4ygMY1Kgv7t50knIh17RhuzOioY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/59a032-c384-43df-8c9d-ef0b82189444/1/eAvEybcNCN1obsSH04djDkNKeew.roa
Signing time: Wed 05 Jun 2024 10:08:27 +0000
ROA not before: Wed 05 Jun 2024 10:08:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57469
IP address blocks: 31.207.96.0/19 maxlen: 22
159.48.16.0/20 maxlen: 22
159.48.48.0/22 maxlen: 22
159.48.56.0/21 maxlen: 22
185.35.108.0/24 maxlen: 24
185.168.9.0/24 maxlen: 24
185.177.32.0/22 maxlen: 22
185.205.192.0/23 maxlen: 23
185.211.35.0/24 maxlen: 24
185.212.69.0/24 maxlen: 24
185.223.254.0/23 maxlen: 23
185.232.12.0/23 maxlen: 23
193.17.219.0/24 maxlen: 24
194.126.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/59a032-c384-43df-8c9d-ef0b82189444/1/4ygMY1Kgv7t50knIh17RhuzOioY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/59a032-c384-43df-8c9d-ef0b82189444/1/4ygMY1Kgv7t50knIh17RhuzOioY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4ygMY1Kgv7t50knIh17RhuzOioY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:e7:df:14:9b:1b:08:95:95:24:65:c4:1a:63:7a:96:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3280c6352a0bfbb79d249c8875ed186ecce8a86
Validity
Not Before: Jun 5 10:08:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=780bc4c9b70d08dd686ec487d387630e434a79ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:98:96:d3:87:1e:56:7f:f4:43:72:f0:c7:ef:
b9:b5:08:3a:17:89:9a:a4:b6:3b:92:8a:36:87:d1:
c4:bb:6d:e2:25:a1:a7:b9:12:7f:57:d2:17:3e:f7:
6b:a8:53:e0:07:e5:19:a2:02:8f:b8:84:7c:5d:3b:
99:dd:ff:f6:14:bc:58:eb:ce:6f:d5:a6:bf:b3:d2:
66:8d:8e:37:b9:8d:57:d3:99:b4:3f:66:8c:28:69:
7b:7e:02:70:1a:d3:59:1f:95:75:68:8d:cd:a2:37:
d7:c3:24:3f:9b:e3:c5:ab:66:d6:7f:9e:05:07:9c:
19:ad:e5:13:6b:7c:0a:42:47:e1:64:64:2c:f2:fb:
e6:8b:ce:7d:56:ad:78:a2:12:6d:53:28:ef:08:d2:
f2:18:6f:6a:1d:15:46:5c:02:28:58:71:3d:c9:ac:
e1:91:17:fb:36:d0:0a:fb:5c:3b:5c:70:48:4d:eb:
3b:f7:33:51:93:fa:dc:a2:4f:27:01:96:ab:aa:9f:
bc:60:5d:8d:60:69:77:91:6b:f7:b3:f5:c5:71:2f:
00:2d:9e:39:cd:69:c0:70:9c:c3:74:49:71:41:d0:
8d:cb:81:12:b6:5b:bc:63:49:b4:a9:ec:7a:09:11:
23:0e:0e:22:bc:9c:75:e8:fe:06:b2:f6:93:f4:f4:
bd:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:0B:C4:C9:B7:0D:08:DD:68:6E:C4:87:D3:87:63:0E:43:4A:79:EC
X509v3 Authority Key Identifier:
keyid:E3:28:0C:63:52:A0:BF:BB:79:D2:49:C8:87:5E:D1:86:EC:CE:8A:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ygMY1Kgv7t50knIh17RhuzOioY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/59a032-c384-43df-8c9d-ef0b82189444/1/eAvEybcNCN1obsSH04djDkNKeew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/59a032-c384-43df-8c9d-ef0b82189444/1/4ygMY1Kgv7t50knIh17RhuzOioY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.207.96.0/19
159.48.16.0/20
159.48.48.0/22
159.48.56.0/21
185.35.108.0/24
185.168.9.0/24
185.177.32.0/22
185.205.192.0/23
185.211.35.0/24
185.212.69.0/24
185.223.254.0/23
185.232.12.0/23
193.17.219.0/24
194.126.237.0/24
Signature Algorithm: sha256WithRSAEncryption
16:db:d2:0c:fb:38:19:a8:bf:da:f4:ca:cd:29:85:ef:43:7f:
91:b7:60:37:ba:1d:60:93:6e:1f:bf:e8:e7:bc:18:76:ce:23:
0e:3c:b7:df:98:1b:8b:27:36:b2:89:f4:f3:b4:9c:e6:a2:41:
7d:3c:57:f8:29:ad:a7:39:56:e9:37:e3:1c:bd:57:be:6d:38:
b2:36:dc:ff:9f:91:47:fa:4b:0f:a0:8c:8e:7f:80:21:d0:22:
d1:bd:00:f9:59:96:fa:39:11:8f:a5:03:be:37:57:df:9d:e2:
8f:ed:06:3a:c5:12:e4:47:01:98:a1:74:6d:51:90:20:9f:af:
75:f3:b6:47:e1:97:ff:ca:0d:68:b3:28:c3:49:f5:68:dc:0e:
06:80:e3:a2:aa:27:15:59:8c:03:24:50:e0:73:c2:b0:ac:77:
1b:e2:fc:be:bd:d1:68:fa:42:d0:1a:44:7a:94:4a:c1:5f:ae:
15:c9:1e:ad:56:c7:9a:82:0d:48:fe:a9:e1:43:23:08:4e:7e:
55:fe:55:1b:1e:b8:71:b7:bf:1a:03:a4:8b:12:74:1d:81:64:
b0:9e:d2:ea:a6:5a:77:3a:f1:d3:95:0e:7b:f2:e8:11:ca:11:
d3:79:35:f2:6e:55:8f:92:80:a5:1d:5d:7a:01:87:75:5d:11:
b2:79:1b:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:13:36 2024 by rpki-client on console-fra.rpki-client.org