Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/EBax7egmgJ7zomhTzXXVIZmoZWU.roa
File: EBax7egmgJ7zomhTzXXVIZmoZWU.roa (raw, json)
Hash identifier: IRWruFIWQ0BXme2K/hSH5KXZ8OUO7qsQPFIpzPHoJGY=
Subject key identifier: 10:16:B1:ED:E8:26:80:9E:F3:A2:68:53:CD:75:D5:21:99:A8:65:65
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 018CC56DDD6FBF3F0276EAD1592AB9BD0776
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/EBax7egmgJ7zomhTzXXVIZmoZWU.roa
Signing time: Mon 01 Jan 2024 14:29:20 +0000
ROA not before: Mon 01 Jan 2024 14:29:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6854
IP address blocks: 212.69.96.0/19 maxlen: 19
213.243.64.0/18 maxlen: 18
195.230.64.0/19 maxlen: 19
80.253.0.0/20 maxlen: 20
83.222.192.0/19 maxlen: 19
83.229.128.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6d:dd:6f:bf:3f:02:76:ea:d1:59:2a:b9:bd:07:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Jan 1 14:29:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1016b1ede826809ef3a26853cd75d52199a86565
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:14:63:38:89:a7:fe:08:fd:b8:15:a6:4e:73:
a7:72:3c:23:f7:28:11:89:07:17:78:ae:4b:a4:dd:
cf:c5:e9:c9:ea:d0:7c:ae:93:f7:2f:cc:3f:b1:e5:
17:26:88:62:c0:d4:7e:4f:e0:03:c8:69:dd:e4:b0:
01:65:44:d2:1c:dd:a0:9e:b0:54:b4:b0:96:78:d9:
4e:a0:86:23:bc:68:17:62:42:0e:b7:99:8f:17:46:
16:01:ba:67:37:d5:00:58:38:72:fd:7a:61:1d:6f:
61:aa:2c:c2:b0:8e:43:8a:c7:e8:8c:2d:bd:6e:a1:
9b:c7:74:67:94:33:33:a3:17:7c:fc:c3:56:8b:3a:
df:38:64:3e:6b:97:de:97:a4:8d:01:34:17:09:8f:
cb:9e:85:54:96:a2:0a:f3:20:08:ae:62:c4:e4:b6:
b3:bd:1d:3e:27:86:5d:fb:b5:c1:d2:86:3f:fa:7c:
e9:ea:96:88:9c:bb:a7:57:6c:10:ab:3b:f5:c0:76:
fc:88:fa:a5:5f:41:44:f6:be:62:f6:3f:55:d3:ed:
06:32:2c:52:c7:cf:81:a8:17:25:2e:5d:79:4b:7b:
ef:73:91:8d:35:86:c5:98:a9:9c:98:be:86:19:36:
1e:00:8d:70:3a:b1:f4:9c:eb:c4:64:28:a1:28:6f:
9b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:16:B1:ED:E8:26:80:9E:F3:A2:68:53:CD:75:D5:21:99:A8:65:65
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/EBax7egmgJ7zomhTzXXVIZmoZWU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.253.0.0/20
83.222.192.0/19
83.229.128.0/17
195.230.64.0/19
212.69.96.0/19
213.243.64.0/18
Signature Algorithm: sha256WithRSAEncryption
29:fb:4e:ce:65:a6:7e:a9:8b:85:df:70:7a:57:1c:d7:ed:cf:
d2:08:2b:9e:d4:a3:c0:bc:67:27:ee:3d:25:4f:ed:4e:8a:3e:
ce:ec:0e:94:48:c9:8d:61:13:d8:cb:80:da:3b:cd:5d:1d:5e:
94:86:51:14:54:c8:c8:3e:92:5b:31:76:a2:b2:67:4d:19:ba:
fe:0b:a8:36:c8:2b:08:81:29:fb:28:67:db:e4:8c:df:2e:31:
f3:d1:6d:e6:97:cf:23:46:13:2c:18:fc:02:5f:6e:e1:6e:16:
4c:55:5b:d9:eb:dd:04:d6:35:f8:c9:c0:b3:15:4e:64:eb:c7:
ab:0b:23:5e:75:dc:85:88:83:7c:2b:2a:8f:2f:4a:de:75:40:
ab:1e:f1:e9:f7:f2:17:b9:ee:52:12:9e:27:b4:69:a9:56:c6:
70:82:13:02:10:25:a4:af:c6:8b:ee:27:dd:d7:78:51:7c:04:
7a:f5:8d:ee:89:64:e6:5d:fa:83:5c:54:b6:78:6b:00:8b:59:
d5:6d:8d:d4:9c:87:f8:fc:37:d6:39:b5:8e:14:da:d7:18:0a:
7c:2f:bc:5a:68:18:cb:1b:29:61:ea:cb:df:19:2b:60:e5:a7:
69:b8:ab:0e:75:19:28:a5:be:b0:12:9a:af:4e:cd:ab:bd:4f:
66:0b:5f:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:51:57 2024 by rpki-client on console-ams.rpki-client.org