Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/epZ_fTniAoy_UpebTrrUILrTLGc.roa
File: epZ_fTniAoy_UpebTrrUILrTLGc.roa (raw, json)
Hash identifier: 2BM0uVlKON3XhI7V67lskgZkNrOtPv1wzWKQyplX2AA=
Subject key identifier: 7A:96:7F:7D:39:E2:02:8C:BF:52:97:9B:4E:BA:D4:20:BA:D3:2C:67
Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Certificate serial: 018CC2DAC1AEC3A44DE326387726F2718E71
Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/epZ_fTniAoy_UpebTrrUILrTLGc.roa
Signing time: Mon 01 Jan 2024 02:29:25 +0000
ROA not before: Mon 01 Jan 2024 02:29:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47380
IP address blocks: 185.93.232.0/22 maxlen: 24
91.242.144.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 04:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:c1:ae:c3:a4:4d:e3:26:38:77:26:f2:71:8e:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Validity
Not Before: Jan 1 02:29:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7a967f7d39e2028cbf52979b4ebad420bad32c67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:7b:cc:4b:e8:89:e6:d6:ea:18:e8:a9:e4:a5:
76:b9:6e:02:07:4a:04:83:19:34:9d:62:3c:e8:cf:
98:3a:5f:17:09:a4:dd:b1:d9:31:e6:44:1c:be:da:
3c:b1:f5:93:99:80:8f:e5:07:41:df:35:00:de:c1:
a2:e2:e3:77:07:8e:5a:6a:c2:d6:d6:67:dd:e7:be:
58:fb:26:e5:0d:6b:48:99:91:dd:64:60:2e:25:07:
8d:2c:ea:2b:01:64:70:f4:a3:db:f7:6d:01:30:38:
4e:eb:00:e7:1b:ae:2e:63:f7:b5:59:71:7f:16:3d:
a5:f2:25:f6:bd:08:59:a4:86:2d:f1:07:7d:86:85:
13:08:e5:0e:59:11:b8:97:2a:85:c4:d8:bc:6f:f2:
05:67:aa:56:a3:72:0b:7d:11:52:f7:44:a9:11:cd:
e3:39:e3:00:52:e7:16:49:d2:da:07:0e:e0:72:56:
7c:38:00:a5:4b:ff:c0:1f:ba:3f:e1:71:ef:5c:38:
29:b0:6f:a6:fe:d3:92:66:1d:99:4a:e2:d3:95:e3:
9a:79:96:29:fe:63:8c:d5:6a:2a:a7:44:af:41:ed:
0c:f5:c7:44:bd:b7:67:38:41:8c:d5:2d:2f:75:e2:
98:a4:82:56:90:62:1e:a7:75:90:10:dd:85:1c:dd:
53:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:96:7F:7D:39:E2:02:8C:BF:52:97:9B:4E:BA:D4:20:BA:D3:2C:67
X509v3 Authority Key Identifier:
keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/epZ_fTniAoy_UpebTrrUILrTLGc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.242.144.0/22
185.93.232.0/22
Signature Algorithm: sha256WithRSAEncryption
84:2e:bc:67:00:f0:d1:72:f7:6c:f5:bb:35:fc:80:4f:69:c7:
f3:2b:b4:8c:4f:9f:18:8b:02:02:5b:c2:d9:44:51:e4:6f:0a:
15:ac:04:05:f2:76:98:18:a7:c5:bd:4e:b3:15:31:7f:e1:3f:
70:72:86:a7:45:15:90:3a:39:32:e7:56:d7:68:e5:c9:2a:8c:
b8:d8:a9:cf:2a:22:37:59:5e:1d:5d:7a:67:f3:9b:5a:cd:93:
d3:e8:ef:fe:be:86:68:0b:9f:a9:4a:c5:ee:92:72:19:33:23:
e0:28:ef:70:66:ee:cd:7f:07:1b:53:1d:a9:e6:1f:19:c5:46:
b3:de:6a:c2:53:99:0b:6d:60:39:99:e8:55:4b:34:db:8f:85:
2a:df:37:f2:95:74:57:15:3f:52:92:d1:06:7f:ed:14:6d:37:
27:ee:a4:cb:5b:d1:6d:8e:40:db:3a:31:5c:8c:43:e8:fa:61:
43:5b:2a:d4:a3:cd:e1:20:98:dd:9e:c7:39:af:28:57:19:ae:
19:ce:69:27:3a:87:0a:42:94:5e:c5:3c:e9:de:54:43:35:65:
fe:73:5e:00:f8:9c:a7:7e:52:cc:b9:46:6b:48:4e:72:b9:2b:
56:c7:e0:3d:4e:f7:5b:50:ce:45:40:0f:dd:ed:71:e9:bc:a6:
bb:57:c9:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 11:22:54 2024 by rpki-client on console-ams.rpki-client.org