Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/3d2d7b-2c5c-498f-85bf-285ec8fe8ec6/1/EIRufWVz_xAgtGxgJic8RpbEF5s.roa
File: EIRufWVz_xAgtGxgJic8RpbEF5s.roa (raw, json)
Hash identifier: 7rREy5SzhUholSqXfSbGtdnY/wqAtE2ABm8ZjOowxg0=
Subject key identifier: 10:84:6E:7D:65:73:FF:10:20:B4:6C:60:26:27:3C:46:96:C4:17:9B
Certificate issuer: /CN=7dbacb1fc2c2063042781631b517ce475233a2bd
Certificate serial: 018CC8DF7804DA44A5A0FAB857756C5F535D
Authority key identifier: 7D:BA:CB:1F:C2:C2:06:30:42:78:16:31:B5:17:CE:47:52:33:A2:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fbrLH8LCBjBCeBYxtRfOR1Izor0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/3d2d7b-2c5c-498f-85bf-285ec8fe8ec6/1/EIRufWVz_xAgtGxgJic8RpbEF5s.roa
Signing time: Tue 02 Jan 2024 06:32:17 +0000
ROA not before: Tue 02 Jan 2024 06:32:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207903
IP address blocks: 185.88.64.0/24 maxlen: 24
185.88.64.0/22 maxlen: 22
185.88.65.0/24 maxlen: 24
185.88.67.0/24 maxlen: 24
185.88.66.0/24 maxlen: 24
45.81.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/3d2d7b-2c5c-498f-85bf-285ec8fe8ec6/1/fbrLH8LCBjBCeBYxtRfOR1Izor0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/3d2d7b-2c5c-498f-85bf-285ec8fe8ec6/1/fbrLH8LCBjBCeBYxtRfOR1Izor0.mft
rsync://rpki.ripe.net/repository/DEFAULT/fbrLH8LCBjBCeBYxtRfOR1Izor0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 12:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:78:04:da:44:a5:a0:fa:b8:57:75:6c:5f:53:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dbacb1fc2c2063042781631b517ce475233a2bd
Validity
Not Before: Jan 2 06:32:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=10846e7d6573ff1020b46c6026273c4696c4179b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:da:d9:0b:15:59:a5:aa:48:6c:7d:68:cb:44:
25:4b:37:b7:21:0f:a8:9f:51:bc:c1:47:b1:29:f9:
d3:cb:bc:ab:4b:61:da:19:4c:44:8b:b3:12:3d:68:
df:73:e7:36:87:c5:4a:be:87:c9:95:c0:60:99:20:
49:d0:80:08:74:40:e6:66:de:a6:cd:b3:f0:98:dd:
ac:e6:88:c2:6d:14:ef:f6:b9:9f:28:fd:9e:e1:17:
a4:50:52:1a:32:94:4c:e3:f8:eb:08:1c:1a:71:6f:
57:c1:10:0d:7c:ca:9b:24:a1:11:af:63:10:f6:36:
6b:25:78:76:ab:1d:83:00:be:f8:56:c5:28:de:6b:
55:e9:a6:9c:96:03:39:68:ec:cf:a4:bf:7f:25:4a:
c7:f5:7c:c4:6f:f3:33:7a:de:47:6d:be:a7:44:a0:
32:ae:1d:01:c2:2b:8f:1c:4a:60:47:fd:94:79:e8:
60:48:a2:98:bc:8f:38:c1:1a:cc:87:46:9a:24:5f:
7f:9e:d9:41:f2:7d:74:5d:c5:40:a9:5d:4b:36:39:
91:89:4a:df:11:b6:3d:8a:7b:94:f9:f2:e9:58:71:
69:59:89:ae:9a:08:6e:ba:24:bd:2b:1b:2f:61:16:
3a:90:2f:dc:14:3a:e3:29:6e:7d:8e:f4:17:d0:bb:
5e:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:84:6E:7D:65:73:FF:10:20:B4:6C:60:26:27:3C:46:96:C4:17:9B
X509v3 Authority Key Identifier:
keyid:7D:BA:CB:1F:C2:C2:06:30:42:78:16:31:B5:17:CE:47:52:33:A2:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fbrLH8LCBjBCeBYxtRfOR1Izor0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/3d2d7b-2c5c-498f-85bf-285ec8fe8ec6/1/EIRufWVz_xAgtGxgJic8RpbEF5s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/3d2d7b-2c5c-498f-85bf-285ec8fe8ec6/1/fbrLH8LCBjBCeBYxtRfOR1Izor0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.168.0/24
185.88.64.0/22
Signature Algorithm: sha256WithRSAEncryption
69:ce:88:1c:ef:3d:6b:5d:34:fa:e1:94:11:d1:dd:2d:3c:b7:
1c:90:df:7c:d2:cb:6a:d6:3c:49:f3:07:ee:8c:18:20:a3:cd:
2e:4e:22:e8:5a:f6:2b:0b:c4:e0:1a:d0:e8:d2:ca:dd:87:d5:
55:45:be:45:65:d2:ba:8c:6e:f1:5e:4d:33:ff:c8:53:ca:e1:
23:4d:58:b0:8b:75:96:e5:21:09:b8:e7:fb:07:5e:65:6c:1f:
fb:0d:db:c4:52:78:96:3d:ef:72:90:06:c0:8b:69:46:4e:9c:
e3:cf:86:67:ad:14:1a:0a:b6:01:3a:df:60:20:10:2d:75:c1:
9a:2c:9b:db:8a:9d:7e:86:d2:d1:5f:34:8c:e1:bf:cd:f7:86:
a5:1a:00:84:74:67:49:6f:f9:52:92:22:b8:e3:2e:84:e8:bc:
cd:dd:ae:d3:44:9c:8c:a2:6c:07:e3:c8:e7:b7:8d:b8:ed:90:
e4:9a:f8:42:5a:83:47:d1:c2:b5:cf:4f:fd:61:bc:02:33:91:
80:d3:45:44:1e:6c:81:a0:3d:e2:76:07:f1:ec:1d:b1:20:27:
f6:39:c3:77:27:20:48:a8:71:a3:fc:e7:8b:8c:86:2d:82:2e:
b3:fc:34:85:18:a3:ae:7c:e8:b0:64:61:dc:f2:5e:9b:7d:20:
4c:12:d8:74
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzI33gE2kSloPq4V3VsX1NdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYmFjYjFmYzJjMjA2MzA0Mjc4MTYzMWI1MTdjZTQ3NTIz
M2EyYmQwHhcNMjQwMTAyMDYzMjE3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMDg0NmU3ZDY1NzNmZjEwMjBiNDZjNjAyNjI3M2M0Njk2YzQxNzliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNrZCxVZpapIbH1oy0QlSze3IQ+o
n1G8wUexKfnTy7yrS2HaGUxEi7MSPWjfc+c2h8VKvofJlcBgmSBJ0IAIdEDmZt6m
zbPwmN2s5ojCbRTv9rmfKP2e4RekUFIaMpRM4/jrCBwacW9XwRANfMqbJKERr2MQ
9jZrJXh2qx2DAL74VsUo3mtV6aaclgM5aOzPpL9/JUrH9XzEb/Mzet5Hbb6nRKAy
rh0BwiuPHEpgR/2UeehgSKKYvI84wRrMh0aaJF9/ntlB8n10XcVAqV1LNjmRiUrf
EbY9inuU+fLpWHFpWYmumghuuiS9KxsvYRY6kC/cFDrjKW59jvQX0LteWwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFBCEbn1lc/8QILRsYCYnPEaWxBebMB8GA1UdIwQY
MBaAFH26yx/CwgYwQngWMbUXzkdSM6K9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmJyTEg4TENCakJDZUJZeHRSZk9SMUl6b3IwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8zZDJkN2ItMmM1Yy00OThmLTg1YmYt
Mjg1ZWM4ZmU4ZWM2LzEvRUlSdWZXVnpfeEFndEd4Z0ppYzhScGJFRjVzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC8zZDJkN2ItMmM1Yy00OThmLTg1YmYtMjg1ZWM4ZmU4ZWM2
LzEvZmJyTEg4TENCakJDZUJZeHRSZk9SMUl6b3IwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALVGoAwQC
uVhAMA0GCSqGSIb3DQEBCwUAA4IBAQBpzogc7z1rXTT64ZQR0d0tPLcckN980stq
1jxJ8wfujBggo80uTiLoWvYrC8TgGtDo0srdh9VVRb5FZdK6jG7xXk0z/8hTyuEj
TViwi3WW5SEJuOf7B15lbB/7DdvEUniWPe9ykAbAi2lGTpzjz4ZnrRQaCrYBOt9g
IBAtdcGaLJvbip1+htLRXzSM4b/N94alGgCEdGdJb/lSkiK44y6E6LzN3a7TRJyM
omwH48jnt4247ZDkmvhCWoNH0cK1z0/9YbwCM5GA00VEHmyBoD3idgfx7B2xICf2
OcN3JyBIqHGj/OeLjIYtgi6z/DSFGKOufOiwZGHc8l6bfSBMEth0
-----END CERTIFICATE-----
Generated at Sat Nov 23 20:54:03 2024 by rpki-client on console-ams.rpki-client.org