Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/93841b-a526-40e3-8a4f-bc1d9a034593/1/Eyxr4tulYcviiizgUAjQmPA38K0.roa
File: Eyxr4tulYcviiizgUAjQmPA38K0.roa (raw, json)
Hash identifier: 8zY9xkGChZ6LzgCNUZcn0q/kBylNRQwx3n0BvRErbUk=
Subject key identifier: 13:2C:6B:E2:DB:A5:61:CB:E2:8A:2C:E0:50:08:D0:98:F0:37:F0:AD
Certificate issuer: /CN=4c071bad929e362b062b89c87fa41b5deda4ffc0
Certificate serial: 018CC94CE8D3B79B842EA8890D2284253AB8
Authority key identifier: 4C:07:1B:AD:92:9E:36:2B:06:2B:89:C8:7F:A4:1B:5D:ED:A4:FF:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TAcbrZKeNisGK4nIf6QbXe2k_8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/93841b-a526-40e3-8a4f-bc1d9a034593/1/Eyxr4tulYcviiizgUAjQmPA38K0.roa
Signing time: Tue 02 Jan 2024 08:31:49 +0000
ROA not before: Tue 02 Jan 2024 08:31:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47116
IP address blocks: 31.223.232.0/21 maxlen: 21
185.91.184.0/22 maxlen: 22
93.189.112.0/21 maxlen: 21
37.143.76.0/22 maxlen: 22
2a00:10b8::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/93841b-a526-40e3-8a4f-bc1d9a034593/1/TAcbrZKeNisGK4nIf6QbXe2k_8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/93841b-a526-40e3-8a4f-bc1d9a034593/1/TAcbrZKeNisGK4nIf6QbXe2k_8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/TAcbrZKeNisGK4nIf6QbXe2k_8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 22:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4c:e8:d3:b7:9b:84:2e:a8:89:0d:22:84:25:3a:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c071bad929e362b062b89c87fa41b5deda4ffc0
Validity
Not Before: Jan 2 08:31:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=132c6be2dba561cbe28a2ce05008d098f037f0ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:9c:68:71:9a:3e:6a:6e:bd:61:d0:3e:1c:31:
96:46:d7:cb:50:9f:76:5c:a8:b6:4f:a4:b4:6a:2a:
6b:a5:80:21:c6:10:1a:3f:aa:94:49:40:de:f7:c9:
02:72:ed:24:11:25:ec:fb:17:ce:35:84:73:9f:52:
13:96:6d:40:c3:f8:16:09:01:14:74:cc:2b:29:b6:
c3:5a:ed:20:ad:69:b7:43:fd:08:ab:aa:c8:88:60:
fd:b0:52:84:34:64:ca:36:17:57:5f:a0:49:e4:9e:
95:22:d1:74:4f:48:91:b4:a3:f5:0c:99:6f:16:16:
7b:a1:8f:03:b2:c9:73:43:ba:c8:3b:c1:8a:b4:62:
1a:3a:a6:de:01:15:9e:59:00:1b:25:91:3a:9c:2d:
bb:e5:98:6e:20:9a:3d:40:2f:e6:c7:84:e3:88:d8:
c2:ec:f3:43:1e:5e:fb:bb:e7:8b:ce:6c:48:9d:dc:
37:b5:9b:54:3a:b3:87:c5:a5:d6:2a:96:3e:9c:99:
89:db:ad:75:f4:94:c6:18:c4:7f:7b:c4:da:40:e1:
4d:a9:b0:67:d2:00:22:42:17:c8:35:d2:45:03:98:
c3:82:c6:1f:3a:12:4a:03:06:bc:b4:53:87:68:fe:
15:a9:35:19:f9:9d:d1:1f:1b:fd:6b:32:3b:ad:26:
90:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:2C:6B:E2:DB:A5:61:CB:E2:8A:2C:E0:50:08:D0:98:F0:37:F0:AD
X509v3 Authority Key Identifier:
keyid:4C:07:1B:AD:92:9E:36:2B:06:2B:89:C8:7F:A4:1B:5D:ED:A4:FF:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TAcbrZKeNisGK4nIf6QbXe2k_8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/93841b-a526-40e3-8a4f-bc1d9a034593/1/Eyxr4tulYcviiizgUAjQmPA38K0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/93841b-a526-40e3-8a4f-bc1d9a034593/1/TAcbrZKeNisGK4nIf6QbXe2k_8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.223.232.0/21
37.143.76.0/22
93.189.112.0/21
185.91.184.0/22
IPv6:
2a00:10b8::/32
Signature Algorithm: sha256WithRSAEncryption
5d:91:27:b1:fe:3a:23:71:7b:20:6b:32:1e:b5:e5:f1:ca:6a:
c9:32:e1:16:e4:5d:3c:3d:46:67:e4:80:54:5b:bd:f8:48:58:
00:0a:ff:ab:3f:af:ac:07:a6:9d:d2:7a:de:85:4b:b9:6c:b3:
74:bd:b4:54:b3:e6:58:d5:65:72:af:32:b1:a1:f3:50:b0:a2:
c9:c0:51:30:b9:59:ca:ec:01:ed:00:cf:51:36:ab:6a:43:0d:
90:a7:9e:3d:10:77:06:5b:d0:92:9c:af:d2:a7:fb:31:68:bd:
02:30:6a:29:ee:8a:76:e6:7f:fd:b0:a9:6a:83:fb:da:ce:c2:
ef:90:94:7d:47:84:4c:0e:6b:3f:95:b1:38:f1:3e:1f:c1:db:
55:d3:32:d1:93:11:38:85:72:c8:ae:5b:16:d5:44:05:c3:6e:
17:f0:11:f7:bc:6f:6b:e4:91:47:50:c6:f1:cd:79:9d:e6:c8:
64:6c:0c:46:67:90:84:8b:2f:65:60:6b:e8:40:21:d9:82:e9:
7d:7a:3e:e6:23:b7:e3:91:bd:a3:9b:28:ca:57:2b:e3:4c:2b:
d0:99:f0:8e:ea:cd:85:68:87:80:64:54:66:d2:7c:d4:89:99:
13:35:0f:20:b7:4f:9f:91:c0:14:f7:bc:36:af:4f:d2:ae:43:
c8:67:51:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 01:40:08 2024 by rpki-client on console-fra.rpki-client.org