Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/12ba2a-0cca-437a-985d-fefe857fea80/1/IuZepCj7m26cglitlBkulMlSYFw.roa
File: IuZepCj7m26cglitlBkulMlSYFw.roa (raw, json)
Hash identifier: 91s/JFTHjtVKrlYQycfS3inR7u+EOIfUS6yKY2G4aYY=
Subject key identifier: 22:E6:5E:A4:28:FB:9B:6E:9C:82:58:AD:94:19:2E:94:C9:52:60:5C
Certificate issuer: /CN=ac6e3e13111439147f65d337d5f0b1bc2ed79434
Certificate serial: 018CC2DAB401F5EA99766684D25A47E854D7
Authority key identifier: AC:6E:3E:13:11:14:39:14:7F:65:D3:37:D5:F0:B1:BC:2E:D7:94:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rG4-ExEUORR_ZdM31fCxvC7XlDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/12ba2a-0cca-437a-985d-fefe857fea80/1/IuZepCj7m26cglitlBkulMlSYFw.roa
Signing time: Mon 01 Jan 2024 02:29:21 +0000
ROA not before: Mon 01 Jan 2024 02:29:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60068
IP address blocks: 185.93.1.0/24 maxlen: 24
185.93.2.0/24 maxlen: 24
185.93.3.0/24 maxlen: 24
185.93.0.0/24 maxlen: 24
89.187.165.0/24 maxlen: 24
89.187.160.0/23 maxlen: 23
89.187.162.0/23 maxlen: 23
89.187.164.0/24 maxlen: 24
89.187.172.0/23 maxlen: 23
89.187.166.0/23 maxlen: 23
89.187.168.0/24 maxlen: 24
89.187.169.0/24 maxlen: 24
89.187.170.0/23 maxlen: 23
89.187.174.0/24 maxlen: 24
89.187.175.0/24 maxlen: 24
89.187.176.0/22 maxlen: 22
89.187.180.0/22 maxlen: 22
89.187.184.0/22 maxlen: 22
89.187.188.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/12ba2a-0cca-437a-985d-fefe857fea80/1/rG4-ExEUORR_ZdM31fCxvC7XlDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/12ba2a-0cca-437a-985d-fefe857fea80/1/rG4-ExEUORR_ZdM31fCxvC7XlDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/rG4-ExEUORR_ZdM31fCxvC7XlDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 22:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:b4:01:f5:ea:99:76:66:84:d2:5a:47:e8:54:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac6e3e13111439147f65d337d5f0b1bc2ed79434
Validity
Not Before: Jan 1 02:29:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=22e65ea428fb9b6e9c8258ad94192e94c952605c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:2a:0e:0f:1b:8d:ca:86:a4:c5:23:d3:1c:57:
0e:e7:83:46:bf:06:53:40:a3:76:8f:8f:01:97:8e:
9d:83:02:46:f6:64:d3:b9:53:a3:c7:6d:dd:d0:30:
59:2f:ec:14:18:8a:e7:54:49:84:55:51:d4:91:45:
ca:8d:95:dc:c9:66:07:dc:b3:04:56:b6:9e:52:f9:
d9:43:c0:76:c5:74:9d:fd:f4:24:26:f1:62:1d:1a:
48:5b:6e:84:34:90:da:47:67:5b:10:ce:f0:7c:63:
f9:d2:7b:df:c7:7d:a4:60:c6:12:b1:d1:7c:11:2c:
b5:fb:df:6f:fe:0f:65:87:1d:6b:eb:1a:e7:8e:3d:
06:f7:6f:04:ce:a0:a7:bc:15:c3:55:88:ce:43:a6:
b9:57:a3:3f:95:34:3d:a6:c0:f0:8a:02:d4:2e:5d:
34:7a:8e:8b:2b:7a:7b:05:08:79:77:2d:1a:ac:3d:
dd:26:c4:2f:f4:32:cb:9e:f0:8d:f0:eb:bf:6a:d4:
7e:a3:0a:88:05:c9:ab:a0:4f:f6:77:39:9e:05:83:
25:69:73:26:de:0d:9c:dd:89:c3:d4:d7:81:cf:e7:
b1:b8:f8:89:bb:9e:7f:59:6b:55:39:dd:33:30:33:
e4:c7:64:df:49:bc:83:ca:42:de:1e:97:c9:18:40:
69:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:E6:5E:A4:28:FB:9B:6E:9C:82:58:AD:94:19:2E:94:C9:52:60:5C
X509v3 Authority Key Identifier:
keyid:AC:6E:3E:13:11:14:39:14:7F:65:D3:37:D5:F0:B1:BC:2E:D7:94:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rG4-ExEUORR_ZdM31fCxvC7XlDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/12ba2a-0cca-437a-985d-fefe857fea80/1/IuZepCj7m26cglitlBkulMlSYFw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/12ba2a-0cca-437a-985d-fefe857fea80/1/rG4-ExEUORR_ZdM31fCxvC7XlDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.187.160.0/19
185.93.0.0/22
Signature Algorithm: sha256WithRSAEncryption
86:13:f9:e3:8b:89:97:37:aa:1e:7a:be:4d:f2:69:b5:d0:b5:
0a:8d:8e:2f:7f:5d:63:02:ae:6b:31:e6:e5:d8:dd:4c:15:ed:
e7:71:f6:fc:d5:f5:36:6a:78:64:a4:e1:a8:83:78:c7:79:b3:
2d:1f:df:40:7b:7c:31:28:76:95:d9:80:c4:56:3a:df:da:36:
62:f7:38:45:45:bc:92:9d:10:06:48:2a:40:96:d1:96:ac:29:
31:c0:17:1b:d7:fd:1a:66:ec:95:b3:51:e8:91:c3:a7:aa:4e:
6d:f5:2a:92:08:7c:90:25:5d:2a:46:92:71:aa:c4:20:fa:c9:
66:0c:0f:aa:0a:c5:5f:4b:56:c8:30:61:7a:b7:54:14:be:62:
08:6e:8d:a6:85:65:a8:be:aa:cc:4c:fc:75:80:83:89:a5:1d:
3e:d8:76:9f:5a:82:cf:02:b3:f1:74:5b:88:d9:06:7f:0e:55:
2e:93:61:ef:cb:97:4a:3d:c1:3e:bb:59:a8:9e:ca:4f:ba:ca:
02:0d:18:67:f6:62:0e:b5:12:d2:91:e6:bf:ad:6d:95:3b:6f:
ea:d5:ab:3a:9d:0d:be:bc:fd:f2:7b:6a:33:72:43:6f:37:c3:
e0:ea:a4:38:86:88:3a:6a:2f:6b:d0:27:c9:86:22:6c:da:52:
9f:66:ac:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 02:57:52 2024 by rpki-client on console-fra.rpki-client.org