Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/EE6ybrFLb6V0-WI2lVgiVbhoun4.roa
File: EE6ybrFLb6V0-WI2lVgiVbhoun4.roa (raw, json)
Hash identifier: DCsh0BQIWN0x17BAKbrR9JMEwK6QggDdlAnRQ8Kp+PE=
Subject key identifier: 10:4E:B2:6E:B1:4B:6F:A5:74:F9:62:36:95:58:22:55:B8:68:BA:7E
Certificate issuer: /CN=2ac64dc21cb5fd4d0bcb02cc2b43fd751fd91e1e
Certificate serial: 018CC3B73E6D0E4F78B327161037ACAC30DB
Authority key identifier: 2A:C6:4D:C2:1C:B5:FD:4D:0B:CB:02:CC:2B:43:FD:75:1F:D9:1E:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsZNwhy1_U0LywLMK0P9dR_ZHh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/EE6ybrFLb6V0-WI2lVgiVbhoun4.roa
Signing time: Mon 01 Jan 2024 06:30:15 +0000
ROA not before: Mon 01 Jan 2024 06:30:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43803
IP address blocks: 213.155.176.0/24 maxlen: 24
213.155.182.0/23 maxlen: 23
213.155.188.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/KsZNwhy1_U0LywLMK0P9dR_ZHh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:3e:6d:0e:4f:78:b3:27:16:10:37:ac:ac:30:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac64dc21cb5fd4d0bcb02cc2b43fd751fd91e1e
Validity
Not Before: Jan 1 06:30:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=104eb26eb14b6fa574f9623695582255b868ba7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:72:4a:08:7f:d8:e6:85:14:98:8a:c6:80:c3:
63:4e:41:a4:d7:d6:09:3c:7c:1e:7f:94:28:6f:da:
11:9b:f4:d0:82:5e:4f:6b:6c:63:67:80:e0:73:35:
46:ee:a3:d0:e6:65:53:8c:ac:d9:f4:e9:de:22:71:
a1:d5:ad:2c:da:f2:ec:c3:f6:ff:d3:14:af:12:2a:
79:81:4d:10:1b:09:93:61:de:15:cd:77:46:0c:92:
14:43:df:ad:a7:36:d1:ac:9d:a4:59:ee:09:a7:73:
46:ff:6c:6e:db:a2:0f:f8:53:74:dd:64:e2:ad:e8:
47:7d:c8:dd:98:14:35:f5:02:59:6b:41:15:2e:e6:
10:79:0f:d4:03:03:2b:66:09:13:57:92:ee:41:13:
6e:59:6e:6c:e9:f1:e3:29:cc:46:32:7c:c4:96:17:
e5:a7:07:26:6f:f3:88:0e:d7:f0:da:18:45:07:e5:
c5:0e:96:23:3c:01:df:5b:03:d3:c0:ad:69:54:38:
5b:49:57:cc:d9:f2:e0:0b:d9:23:c1:ac:1c:0c:30:
db:d1:6e:9b:b8:b5:cb:22:f7:e2:9d:a9:72:6c:f3:
d8:f1:9f:7a:ae:df:cf:67:33:3a:74:ac:b2:fb:e0:
57:bd:43:da:13:a6:75:54:09:3a:3e:b9:61:51:c0:
cc:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:4E:B2:6E:B1:4B:6F:A5:74:F9:62:36:95:58:22:55:B8:68:BA:7E
X509v3 Authority Key Identifier:
keyid:2A:C6:4D:C2:1C:B5:FD:4D:0B:CB:02:CC:2B:43:FD:75:1F:D9:1E:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsZNwhy1_U0LywLMK0P9dR_ZHh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/EE6ybrFLb6V0-WI2lVgiVbhoun4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.155.176.0/24
213.155.182.0/23
213.155.188.0/23
Signature Algorithm: sha256WithRSAEncryption
36:4e:d1:69:51:00:fc:e9:dd:0f:4c:55:3a:94:a5:ca:99:fb:
07:76:17:c9:31:c0:6c:34:c0:02:b3:50:d5:3e:e1:88:55:8c:
0d:16:40:ba:af:7d:4d:c9:cd:14:33:03:80:a3:f5:b3:36:91:
0d:f9:b2:14:82:2c:cc:b7:15:c9:fc:cd:44:d2:e0:77:5d:ff:
8d:84:2a:85:b7:8d:bf:4b:b7:85:15:46:3a:23:50:c1:e3:b7:
49:38:28:65:41:4f:6a:1e:bc:13:30:25:26:db:ff:2d:c1:11:
23:96:2a:4a:1c:12:af:09:c7:d8:ef:f9:81:9d:b6:dc:d3:bb:
4a:12:1c:8a:88:a9:16:3e:78:af:f8:3a:e9:fb:e7:ef:05:51:
ed:61:04:d1:1b:67:6d:6d:b8:c4:d5:ac:86:6b:e6:2f:8b:7e:
54:49:df:f2:41:88:73:7d:da:a1:19:25:c2:22:a8:ac:a1:8a:
f0:39:0f:ab:b6:4e:4d:1f:88:47:c0:9d:fa:c4:de:1a:93:ba:
f6:0d:77:7d:ca:e8:23:28:2d:24:ca:9d:46:6a:d4:01:c2:f7:
8a:e4:77:c7:6f:98:01:e0:64:e3:a7:c6:1e:a2:63:fd:9d:ab:
3e:40:2c:c3:7d:b9:14:30:37:ce:b0:39:48:3c:40:7b:7d:5a:
6d:e3:08:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:17:47 2024 by rpki-client on console-ams.rpki-client.org