Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/eveyaYfpev-wrwfLjCF66NRZOP8.roa
File: eveyaYfpev-wrwfLjCF66NRZOP8.roa (raw, json)
Hash identifier: y5ooxx7ogCIXqBsUF+VpY3b7PzuKHMCKQthwG1L8WTY=
Subject key identifier: 7A:F7:B2:69:87:E9:7A:FF:B0:AF:07:CB:8C:21:7A:E8:D4:59:38:FF
Certificate issuer: /CN=ac67c93b8225d04c3761c13cefee5f8329358e23
Certificate serial: 018CC7274C9B4E4F440706E43E9E75E552FD
Authority key identifier: AC:67:C9:3B:82:25:D0:4C:37:61:C1:3C:EF:EE:5F:83:29:35:8E:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rGfJO4Il0Ew3YcE87-5fgyk1jiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/eveyaYfpev-wrwfLjCF66NRZOP8.roa
Signing time: Mon 01 Jan 2024 22:31:30 +0000
ROA not before: Mon 01 Jan 2024 22:31:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62140
IP address blocks: 185.24.139.0/24 maxlen: 24
185.24.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/rGfJO4Il0Ew3YcE87-5fgyk1jiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/rGfJO4Il0Ew3YcE87-5fgyk1jiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/rGfJO4Il0Ew3YcE87-5fgyk1jiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:4c:9b:4e:4f:44:07:06:e4:3e:9e:75:e5:52:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac67c93b8225d04c3761c13cefee5f8329358e23
Validity
Not Before: Jan 1 22:31:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7af7b26987e97affb0af07cb8c217ae8d45938ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:36:5f:21:ec:26:cb:e6:f9:a0:92:c9:b0:47:
3b:f3:c3:b4:a0:36:99:14:c7:ba:de:1d:4d:72:12:
19:cb:70:6e:53:bf:ad:ca:e0:9a:47:a5:5b:84:34:
39:72:a6:3a:bc:ee:ea:82:5b:b5:4f:6c:56:5f:3e:
b8:7a:c0:c1:6a:b7:32:fb:29:2b:1a:4e:34:99:b5:
9e:39:ec:1f:cc:f5:99:ab:7a:a7:4e:09:99:b3:ef:
f7:a6:83:9b:57:ae:0f:e9:f4:7a:c1:5f:5c:fd:52:
15:8c:01:04:c0:40:f8:c6:48:dd:ba:f5:15:30:bb:
24:59:6c:9c:12:d1:37:1b:50:04:cf:fa:b5:95:40:
e3:7a:83:ac:5f:08:5f:45:90:cf:2c:34:a4:01:5b:
58:35:d1:e4:c6:7b:43:ba:19:4a:52:a6:6a:dd:37:
cd:1a:5e:d2:9e:03:1f:48:88:98:cd:fd:02:dd:76:
19:fa:8e:85:7c:24:ce:7e:68:e2:55:3f:f7:47:9f:
42:2f:75:26:bd:0d:3d:cc:e5:68:ef:98:41:ef:54:
25:7e:08:4f:e3:42:39:f8:63:06:0d:cd:2b:f2:a3:
5e:12:fb:18:bb:69:b9:0a:27:87:b9:2b:3f:4c:75:
67:dd:f8:70:f9:c0:1e:f8:c6:16:b4:e9:0c:83:a4:
2b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:F7:B2:69:87:E9:7A:FF:B0:AF:07:CB:8C:21:7A:E8:D4:59:38:FF
X509v3 Authority Key Identifier:
keyid:AC:67:C9:3B:82:25:D0:4C:37:61:C1:3C:EF:EE:5F:83:29:35:8E:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rGfJO4Il0Ew3YcE87-5fgyk1jiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/eveyaYfpev-wrwfLjCF66NRZOP8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/rGfJO4Il0Ew3YcE87-5fgyk1jiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.24.138.0/23
Signature Algorithm: sha256WithRSAEncryption
44:bd:a5:a6:30:fa:14:37:36:1e:62:60:9c:0e:f1:9b:18:79:
06:ac:6d:97:b4:7d:28:dd:a1:2d:b2:b7:81:e4:76:e3:65:29:
50:d3:57:c6:f6:0d:c5:61:6f:70:2e:9a:b0:64:46:e4:53:b6:
44:5c:b0:96:b2:82:69:3a:1c:63:fb:6a:40:2e:66:e2:fe:02:
1f:5c:b0:8e:d3:6e:8f:01:b1:0c:99:51:2f:36:3a:47:ee:13:
a4:a1:8d:db:71:88:28:a7:67:3b:cc:66:f1:8d:f1:97:05:8f:
3b:dd:15:bd:1a:5a:83:58:27:ea:f5:62:40:e9:99:a6:f2:a8:
94:d6:20:66:82:a8:60:df:20:95:85:20:ae:f3:10:e2:0e:93:
59:ff:7e:22:6b:45:bd:ea:9f:52:d0:50:cf:12:da:b8:ae:f1:
c8:f8:02:53:a7:32:24:52:84:35:b4:ad:94:1a:61:78:bf:2b:
96:bd:3c:8d:d6:b5:44:f3:0d:d5:87:d3:9c:b5:bc:86:ea:d5:
f5:90:df:20:ee:2d:7a:06:cc:ad:7f:c3:82:c1:3b:07:ed:d5:
f3:51:a4:c2:13:ce:01:f0:8d:a7:92:6e:3a:37:0b:27:c3:76:
b4:21:81:f9:f8:d1:ea:02:e9:70:e2:a8:3f:86:90:49:ed:c3:
2a:8f:5e:74
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzHJ0ybTk9EBwbkPp515VL9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjNjdjOTNiODIyNWQwNGMzNzYxYzEzY2VmZWU1ZjgzMjkz
NThlMjMwHhcNMjQwMTAxMjIzMTMwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YWY3YjI2OTg3ZTk3YWZmYjBhZjA3Y2I4YzIxN2FlOGQ0NTkzOGZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTZfIewmy+b5oJLJsEc788O0oDaZ
FMe63h1NchIZy3BuU7+tyuCaR6VbhDQ5cqY6vO7qglu1T2xWXz64esDBarcy+ykr
Gk40mbWeOewfzPWZq3qnTgmZs+/3poObV64P6fR6wV9c/VIVjAEEwED4xkjduvUV
MLskWWycEtE3G1AEz/q1lUDjeoOsXwhfRZDPLDSkAVtYNdHkxntDuhlKUqZq3TfN
Gl7SngMfSIiYzf0C3XYZ+o6FfCTOfmjiVT/3R59CL3UmvQ09zOVo75hB71QlfghP
40I5+GMGDc0r8qNeEvsYu2m5CieHuSs/THVn3fhw+cAe+MYWtOkMg6QrYwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHr3smmH6Xr/sK8Hy4wheujUWTj/MB8GA1UdIwQY
MBaAFKxnyTuCJdBMN2HBPO/uX4MpNY4jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckdmSk80SWwwRXczWWNFODctNWZneWsxamlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9hYzhlNmYtNWY4My00NDliLThjOWQt
NzdjMTA0ODQyMmQ4LzEvZXZleWFZZnBldi13cndmTGpDRjY2TlJaT1A4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS9hYzhlNmYtNWY4My00NDliLThjOWQtNzdjMTA0ODQyMmQ4
LzEvckdmSk80SWwwRXczWWNFODctNWZneWsxamlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuRiKMA0G
CSqGSIb3DQEBCwUAA4IBAQBEvaWmMPoUNzYeYmCcDvGbGHkGrG2XtH0o3aEtsreB
5HbjZSlQ01fG9g3FYW9wLpqwZEbkU7ZEXLCWsoJpOhxj+2pALmbi/gIfXLCO026P
AbEMmVEvNjpH7hOkoY3bcYgop2c7zGbxjfGXBY873RW9GlqDWCfq9WJA6Zmm8qiU
1iBmgqhg3yCVhSCu8xDiDpNZ/34ia0W96p9S0FDPEtq4rvHI+AJTpzIkUoQ1tK2U
GmF4vyuWvTyN1rVE8w3Vh9OctbyG6tX1kN8g7i16Bsytf8OCwTsH7dXzUaTCE84B
8I2nkm46Nwsnw3a0IYH5+NHqAulw4qg/hpBJ7cMqj150
-----END CERTIFICATE-----
Generated at Fri Jun 7 14:25:21 2024 by rpki-client on console-ams.rpki-client.org