Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/E2pYeo5gPEZPGZg0oAKXd5Upt08.roa
File: E2pYeo5gPEZPGZg0oAKXd5Upt08.roa (raw, json)
Hash identifier: sRRdZYu/e+LDzshW1E6p2mGTTxGfhaBw/oxXX0hyK+I=
Subject key identifier: 13:6A:58:7A:8E:60:3C:46:4F:19:98:34:A0:02:97:77:95:29:B7:4F
Certificate issuer: /CN=49722a0ca8bbc94d48a5cb48ccc92efef845a7e3
Certificate serial: 018CC3B6E780547E77A04E6B5B5F6703C749
Authority key identifier: 49:72:2A:0C:A8:BB:C9:4D:48:A5:CB:48:CC:C9:2E:FE:F8:45:A7:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SXIqDKi7yU1IpctIzMku_vhFp-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/E2pYeo5gPEZPGZg0oAKXd5Upt08.roa
Signing time: Mon 01 Jan 2024 06:29:53 +0000
ROA not before: Mon 01 Jan 2024 06:29:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44486
IP address blocks: 45.81.232.0/22 maxlen: 24
2a0e:66c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/SXIqDKi7yU1IpctIzMku_vhFp-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/SXIqDKi7yU1IpctIzMku_vhFp-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/SXIqDKi7yU1IpctIzMku_vhFp-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 May 2024 00:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:e7:80:54:7e:77:a0:4e:6b:5b:5f:67:03:c7:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49722a0ca8bbc94d48a5cb48ccc92efef845a7e3
Validity
Not Before: Jan 1 06:29:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=136a587a8e603c464f199834a00297779529b74f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:28:e5:c3:e3:c7:e3:49:33:7f:1e:47:ed:45:
f0:69:ae:cc:a6:c9:0d:f6:69:30:f1:6d:10:61:34:
b0:20:13:90:c8:e3:7b:84:95:89:bb:b4:5e:a8:16:
38:e9:e7:7e:72:cd:4e:13:08:b5:d0:04:e1:cf:df:
4e:de:34:22:cf:a8:31:28:27:43:e1:1e:77:6a:ea:
95:f3:db:36:5e:b8:9f:af:59:24:ab:16:4f:93:95:
8b:b9:7e:2f:b6:0c:74:80:ae:7a:60:89:d7:cd:4d:
2d:13:33:fb:8d:7d:6a:38:ed:c8:c1:bd:6b:af:56:
f5:e6:ab:42:76:dc:d5:23:b1:79:94:be:22:02:c0:
f9:2a:c5:87:f9:c9:1b:74:df:71:8b:18:1b:e1:9d:
61:28:14:5a:e5:1d:1b:f6:29:a0:d0:a3:2c:95:b2:
e2:d1:95:ad:e2:77:9e:3d:42:f3:1d:56:8a:17:f4:
61:d3:59:55:3f:43:2e:ec:23:27:bf:d1:80:08:92:
04:a6:d8:9b:4a:0e:e7:87:c5:d3:b4:7a:48:62:db:
31:4a:ea:f3:60:32:28:cd:f2:e5:ae:e5:b4:9e:c4:
cc:79:10:da:91:88:22:f2:fa:0a:a6:41:f3:4e:07:
cf:16:c7:62:97:54:de:d4:4b:cd:d5:73:16:9f:f5:
0e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:6A:58:7A:8E:60:3C:46:4F:19:98:34:A0:02:97:77:95:29:B7:4F
X509v3 Authority Key Identifier:
keyid:49:72:2A:0C:A8:BB:C9:4D:48:A5:CB:48:CC:C9:2E:FE:F8:45:A7:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SXIqDKi7yU1IpctIzMku_vhFp-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/E2pYeo5gPEZPGZg0oAKXd5Upt08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/SXIqDKi7yU1IpctIzMku_vhFp-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.232.0/22
IPv6:
2a0e:66c0::/29
Signature Algorithm: sha256WithRSAEncryption
75:a8:9a:f5:5f:3c:a0:f1:8e:7e:6d:e7:7b:22:ca:eb:b2:36:
a1:4f:08:37:5d:30:94:9c:b8:d3:77:fc:b7:cd:51:f0:a1:d7:
b8:87:89:a8:c8:76:9d:6f:28:13:4e:a5:56:03:f3:d6:92:dd:
62:d1:5c:90:13:ed:2c:39:59:18:be:ee:b8:06:e2:ed:d5:e1:
40:d4:04:ab:0b:a4:63:1d:dd:ed:f2:a0:15:e9:14:81:9d:6c:
92:c6:3b:75:b5:9c:6e:b6:5d:3f:58:c3:b0:e2:de:f0:8d:0a:
3d:c3:d4:0b:0f:f6:bc:2f:94:8d:f4:f3:06:25:c0:c7:83:3a:
e0:a9:87:54:6c:ea:91:60:5f:9c:eb:18:7f:e3:67:0b:aa:3a:
57:f4:0a:2d:a5:78:a1:cb:00:aa:a2:13:4b:53:b2:f3:31:20:
54:93:d9:7c:9e:6b:93:29:04:b5:4b:b7:7e:50:ab:11:82:e4:
ef:ed:1f:43:84:be:50:6c:89:2d:79:78:6d:96:27:96:ef:c1:
33:1d:1f:b5:ff:f6:9c:f6:0b:98:2a:cd:37:1d:a1:5d:91:8f:
d5:18:20:5e:15:d9:0c:d8:d3:7e:ec:a1:ec:04:33:9d:4d:b7:
77:47:0b:a5:57:88:34:79:6a:3f:da:4a:38:61:b0:cd:98:28:
6a:f3:cf:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 08:35:54 2024 by rpki-client on console-fra.rpki-client.org