Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/EQcHivCETSgQLQBH5xq1dagC6d4.roa
File: EQcHivCETSgQLQBH5xq1dagC6d4.roa (raw, json)
Hash identifier: lvfPqAS1CpuLTfZwW2xAIoUP9mKALyDsq4nhBUV7+w8=
Subject key identifier: 11:07:07:8A:F0:84:4D:28:10:2D:00:47:E7:1A:B5:75:A8:02:E9:DE
Certificate issuer: /CN=9a5f0d912b5e747ae568d808a04029b4ebc66e47
Certificate serial: 018CC86F8C65308EF1E9D2172FFB92D74AF6
Authority key identifier: 9A:5F:0D:91:2B:5E:74:7A:E5:68:D8:08:A0:40:29:B4:EB:C6:6E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ml8NkStedHrlaNgIoEAptOvGbkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/EQcHivCETSgQLQBH5xq1dagC6d4.roa
Signing time: Tue 02 Jan 2024 04:30:02 +0000
ROA not before: Tue 02 Jan 2024 04:30:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12637
IP address blocks: 185.228.250.0/24 maxlen: 24
176.56.128.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ml8NkStedHrlaNgIoEAptOvGbkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 28 Jun 2024 20:47:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:8c:65:30:8e:f1:e9:d2:17:2f:fb:92:d7:4a:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a5f0d912b5e747ae568d808a04029b4ebc66e47
Validity
Not Before: Jan 2 04:30:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1107078af0844d28102d0047e71ab575a802e9de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:be:0a:56:51:d3:d3:e3:2c:a1:1c:5a:e6:b8:
4e:70:e2:3b:bb:4b:9c:74:57:20:a5:92:c6:a3:67:
8b:af:9c:60:48:6b:4b:91:d3:ef:93:58:79:f4:33:
d5:2a:b4:d0:75:b8:22:1f:de:45:ca:1c:63:06:0a:
10:cf:c3:91:1e:b2:9c:4b:bc:29:96:66:db:fd:f8:
b7:54:6b:70:c2:c5:b5:95:00:53:16:97:5c:05:df:
20:73:1c:82:76:ac:c1:b2:35:fa:03:02:c0:b9:62:
8d:42:91:83:70:ad:ba:a7:d4:e2:ee:6f:e6:49:f4:
94:67:09:dc:14:fe:ed:b2:6a:25:82:01:ab:65:e1:
de:a9:ff:23:ea:de:e6:06:63:1a:b8:3a:03:ce:c4:
8b:ce:70:57:8b:ee:ad:ab:d3:5d:f0:be:0b:28:98:
74:4b:85:c3:e3:f7:a7:42:8c:a0:2f:70:e6:87:a4:
52:4d:d1:e6:3f:ef:88:a7:69:ed:96:39:c8:c1:54:
38:db:ae:70:9e:a3:48:5c:3e:dd:27:5a:8d:72:46:
3c:45:65:76:d3:81:3f:ef:43:27:ec:a4:1c:45:0c:
73:83:d8:aa:3b:35:b5:a3:0a:07:f4:f1:d0:ad:61:
d7:d0:91:a5:17:12:c5:b0:24:6f:05:41:6a:d1:5f:
cb:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:07:07:8A:F0:84:4D:28:10:2D:00:47:E7:1A:B5:75:A8:02:E9:DE
X509v3 Authority Key Identifier:
keyid:9A:5F:0D:91:2B:5E:74:7A:E5:68:D8:08:A0:40:29:B4:EB:C6:6E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ml8NkStedHrlaNgIoEAptOvGbkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/EQcHivCETSgQLQBH5xq1dagC6d4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.56.128.0/21
185.228.250.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:6c:e8:0f:62:f6:06:fe:96:2e:e4:89:08:8a:6d:a8:e8:23:
f6:8e:d2:46:e3:aa:8c:13:c1:08:b4:54:eb:f1:84:02:3a:9a:
69:ca:78:0b:2a:75:0c:32:2c:00:f0:87:bf:2d:e7:8f:c2:e3:
f0:97:97:62:45:9d:f6:6c:4d:83:b6:54:11:82:c3:cb:e3:93:
98:86:b7:d0:31:df:a5:a4:18:22:3f:2a:fa:c4:13:89:38:34:
50:fa:65:05:06:62:38:e0:6e:d4:c2:70:19:89:99:4a:78:b9:
ab:dd:72:5c:20:6f:3c:61:86:cd:75:5a:e5:d3:b4:2e:da:3a:
e4:0a:af:d1:19:5e:63:9e:90:d3:cc:b1:7c:a4:b8:fd:bb:a3:
8c:43:ff:ac:55:ec:f1:a6:c6:e4:29:9a:7e:75:33:1e:6b:ed:
90:dd:a2:d0:3d:f2:c0:46:2a:ae:fb:38:3a:06:55:ae:b7:0d:
ba:8d:dd:05:46:95:17:c5:f5:35:de:09:e2:5c:c8:3e:f6:68:
b2:5c:36:ba:11:e5:f6:78:b5:3e:a8:4d:9b:72:6f:a3:63:75:
47:96:5c:78:60:c6:63:bf:0e:bf:62:1e:41:a3:b8:4d:3a:40:
11:5b:20:e4:14:3f:f9:bb:6e:a5:1d:70:f7:58:91:f9:3f:a0:
96:7f:ea:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 02:00:44 2024 by rpki-client on console-fra.rpki-client.org