Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/312132-2e2c-4a57-a8ac-578f02e78066/1/eafs4wSzhyjd02TnlHXmnGO4nkM.roa
File: eafs4wSzhyjd02TnlHXmnGO4nkM.roa (raw, json)
Hash identifier: Y0grCTdexWlz/KEGJNvaW7zXYxh/P2YmqPybVHhG9xk=
Subject key identifier: 79:A7:EC:E3:04:B3:87:28:DD:D3:64:E7:94:75:E6:9C:63:B8:9E:43
Certificate issuer: /CN=c207e10cbc5d249bf4d8eeb2549ec4cf843ef0ee
Certificate serial: 018CC56E830E3E886CD696F9B0132CEBA462
Authority key identifier: C2:07:E1:0C:BC:5D:24:9B:F4:D8:EE:B2:54:9E:C4:CF:84:3E:F0:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wgfhDLxdJJv02O6yVJ7Ez4Q-8O4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/312132-2e2c-4a57-a8ac-578f02e78066/1/eafs4wSzhyjd02TnlHXmnGO4nkM.roa
Signing time: Mon 01 Jan 2024 14:30:03 +0000
ROA not before: Mon 01 Jan 2024 14:30:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211914
IP address blocks: 94.158.209.0/24 maxlen: 24
94.158.210.0/24 maxlen: 24
94.158.211.0/24 maxlen: 24
94.158.208.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/312132-2e2c-4a57-a8ac-578f02e78066/1/wgfhDLxdJJv02O6yVJ7Ez4Q-8O4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/312132-2e2c-4a57-a8ac-578f02e78066/1/wgfhDLxdJJv02O6yVJ7Ez4Q-8O4.mft
rsync://rpki.ripe.net/repository/DEFAULT/wgfhDLxdJJv02O6yVJ7Ez4Q-8O4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 20:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:83:0e:3e:88:6c:d6:96:f9:b0:13:2c:eb:a4:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c207e10cbc5d249bf4d8eeb2549ec4cf843ef0ee
Validity
Not Before: Jan 1 14:30:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=79a7ece304b38728ddd364e79475e69c63b89e43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ad:87:f6:74:18:76:66:a4:4c:ca:45:34:7e:
97:d4:80:36:45:62:3c:28:79:57:d1:ef:69:84:72:
20:b2:a2:18:60:ec:2f:83:73:98:4b:1c:cb:80:b9:
9d:bf:b4:cb:ae:c2:50:eb:b6:58:8f:4a:35:8e:00:
f2:2d:8e:22:11:0a:f8:11:4d:96:ca:b4:fb:68:e5:
b9:e0:97:cf:c8:3f:07:62:ec:37:df:c1:0d:a5:83:
c0:4f:1f:4d:e6:aa:2b:e0:dc:02:dc:ec:35:c1:a6:
c8:2a:12:18:6f:63:f1:92:9c:72:34:e9:d5:58:30:
5f:75:77:09:a3:18:92:78:cb:ed:ca:a1:ff:5e:e5:
20:5f:39:85:d6:da:32:df:ae:0c:15:a7:3b:b6:b5:
50:a2:e9:96:37:a1:76:e7:f2:dc:f8:a5:c6:c7:78:
bb:00:d4:3b:cc:56:73:8c:f6:47:ad:84:7a:9e:f5:
82:c7:6d:0f:dd:f5:3f:16:b3:69:c1:97:08:0b:86:
3a:ea:c7:0e:5c:90:11:01:d0:44:52:a1:26:0e:4c:
a0:50:90:a5:6d:86:19:d6:99:c8:e7:d1:ad:3b:22:
ad:10:24:57:92:7e:ab:f1:9a:73:f5:5d:2f:58:ac:
1e:11:f8:08:f6:e9:24:ba:02:1b:88:7d:d3:62:b5:
24:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:A7:EC:E3:04:B3:87:28:DD:D3:64:E7:94:75:E6:9C:63:B8:9E:43
X509v3 Authority Key Identifier:
keyid:C2:07:E1:0C:BC:5D:24:9B:F4:D8:EE:B2:54:9E:C4:CF:84:3E:F0:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wgfhDLxdJJv02O6yVJ7Ez4Q-8O4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/312132-2e2c-4a57-a8ac-578f02e78066/1/eafs4wSzhyjd02TnlHXmnGO4nkM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/312132-2e2c-4a57-a8ac-578f02e78066/1/wgfhDLxdJJv02O6yVJ7Ez4Q-8O4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.158.208.0/21
Signature Algorithm: sha256WithRSAEncryption
17:01:62:31:e6:2a:7c:60:b5:bc:16:ec:11:e7:c0:38:89:96:
83:9e:27:4f:9c:c0:7f:9a:11:b8:e5:c6:ba:28:81:07:69:e7:
27:6d:e7:aa:7a:b6:26:ef:22:c0:fa:1b:25:aa:78:7b:e6:4d:
8b:93:c3:30:a0:ca:ba:18:bb:6e:76:ce:ba:f6:2e:b2:5c:05:
09:b9:51:7e:fe:7f:ac:d8:55:28:b7:76:4d:3a:ce:30:00:f4:
b1:fb:0a:43:b4:ae:3e:e2:18:cd:3f:2f:46:d7:00:51:39:cf:
45:48:2a:02:67:98:52:50:ed:29:9b:70:25:57:5c:f9:5d:f1:
78:b0:4e:a7:bb:c5:b0:19:1e:7b:7f:0b:73:9f:d0:8a:61:72:
66:67:42:b9:d7:46:a6:32:bf:4d:8f:31:f2:27:cd:f5:0f:66:
53:dd:1f:35:ba:b2:be:b1:3a:45:f4:e2:c3:b1:13:cc:96:bc:
44:a9:f1:d4:5f:e2:d1:1b:52:f1:63:16:e8:f4:be:c0:ef:78:
ea:2c:e3:a3:4a:3f:53:b2:75:29:76:17:fa:e7:e2:1e:ea:5c:
74:86:d0:e8:19:7f:d8:67:08:7a:00:60:bb:ab:a4:d7:5f:8a:
f8:4a:2e:57:52:0f:5d:72:40:dc:26:5b:22:63:bf:f9:70:fc:
e0:b2:8d:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 06:05:47 2024 by rpki-client on console-fra.rpki-client.org