Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/09200e-999d-4b45-a741-85a955f2163b/1/EeC9dXIfKNQX3vmx4QBu9kqjojU.roa
File: EeC9dXIfKNQX3vmx4QBu9kqjojU.roa (raw, json)
Hash identifier: kaU//+XuxfAsCiTXG7ignphzewftmi6mNXD+lpTydvo=
Subject key identifier: 11:E0:BD:75:72:1F:28:D4:17:DE:F9:B1:E1:00:6E:F6:4A:A3:A2:35
Certificate issuer: /CN=dcb65a90ed3cf4ae0452554ee34b92a8476dcf10
Certificate serial: 018ED480125A92AF0C8674B8E4B25A979CAF
Authority key identifier: DC:B6:5A:90:ED:3C:F4:AE:04:52:55:4E:E3:4B:92:A8:47:6D:CF:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3LZakO089K4EUlVO40uSqEdtzxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/09200e-999d-4b45-a741-85a955f2163b/1/EeC9dXIfKNQX3vmx4QBu9kqjojU.roa
Signing time: Fri 12 Apr 2024 22:49:06 +0000
ROA not before: Fri 12 Apr 2024 22:49:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59796
IP address blocks: 185.217.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/09200e-999d-4b45-a741-85a955f2163b/1/3LZakO089K4EUlVO40uSqEdtzxA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/09200e-999d-4b45-a741-85a955f2163b/1/3LZakO089K4EUlVO40uSqEdtzxA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3LZakO089K4EUlVO40uSqEdtzxA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:d4:80:12:5a:92:af:0c:86:74:b8:e4:b2:5a:97:9c:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcb65a90ed3cf4ae0452554ee34b92a8476dcf10
Validity
Not Before: Apr 12 22:49:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=11e0bd75721f28d417def9b1e1006ef64aa3a235
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ed:05:9c:f5:5e:e9:3f:02:a8:cd:ea:3e:58:
d8:6a:24:c1:ba:58:6b:20:54:c5:e7:ab:d1:ea:fa:
65:b3:d1:1a:86:4d:d4:6c:59:2f:59:2b:4b:64:2f:
cd:25:69:8f:41:9c:32:73:48:0d:23:0a:38:73:34:
f0:ff:fe:94:b5:b3:64:4c:84:b4:b3:73:e7:ea:61:
71:26:a6:10:9f:8f:bb:50:8e:12:40:a5:9f:2a:99:
92:8e:be:72:e4:2c:13:52:5f:db:d5:03:96:90:16:
25:90:3e:9d:31:c7:7f:2a:b1:3b:8b:47:b3:13:25:
e9:e0:90:b0:b2:e1:75:cb:4f:84:be:bd:2a:f8:b7:
97:a7:ce:2c:d3:0e:b3:a6:7c:7b:a5:87:f2:6d:b4:
b7:aa:1a:f3:95:c4:1d:81:2c:27:0a:b7:bf:86:fe:
37:04:5a:a8:22:8e:b1:ea:1e:91:b0:51:f6:77:57:
66:eb:d9:62:02:e8:74:02:d0:a5:26:d0:c3:88:6e:
98:93:f6:a3:32:8a:fe:e4:32:c2:6d:8c:5c:ed:79:
0c:c9:b4:fe:8b:03:0c:34:f5:3e:d3:5f:7b:20:ae:
45:01:ba:ca:c8:3b:2f:0b:cf:0d:85:b5:bd:56:68:
f0:47:d9:94:e0:54:40:e8:84:a7:04:05:77:e3:9f:
61:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:E0:BD:75:72:1F:28:D4:17:DE:F9:B1:E1:00:6E:F6:4A:A3:A2:35
X509v3 Authority Key Identifier:
keyid:DC:B6:5A:90:ED:3C:F4:AE:04:52:55:4E:E3:4B:92:A8:47:6D:CF:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3LZakO089K4EUlVO40uSqEdtzxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/09200e-999d-4b45-a741-85a955f2163b/1/EeC9dXIfKNQX3vmx4QBu9kqjojU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/09200e-999d-4b45-a741-85a955f2163b/1/3LZakO089K4EUlVO40uSqEdtzxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.217.90.0/24
Signature Algorithm: sha256WithRSAEncryption
67:49:d4:28:ba:5e:b0:39:fc:71:ce:bf:9b:2a:58:c7:7c:ca:
9f:55:57:95:c7:8c:12:f3:16:d0:cd:f3:3a:c2:92:5a:ea:2f:
31:50:4e:19:79:d9:1c:a7:bf:d1:c6:d6:f9:66:36:c9:4b:9d:
20:fa:62:e8:88:fe:9a:7e:bb:2d:31:9f:2c:89:52:02:e8:b5:
b7:3f:82:43:8a:51:d2:ee:16:dd:32:0b:c7:08:96:48:c9:83:
06:43:b7:f1:ae:20:10:fb:ca:8c:28:a4:e8:8f:8d:78:68:2b:
1c:30:25:52:f8:dc:91:3d:19:04:fa:9a:74:e5:01:d0:58:eb:
84:9c:05:bc:2c:48:c5:87:f8:7d:98:66:b2:21:ed:91:b8:c9:
65:a5:5a:24:76:14:4e:c3:56:d8:e4:e1:e3:be:16:4e:82:2d:
e7:02:b7:fe:d3:e0:92:2f:cd:c9:59:1e:60:9e:8a:74:10:c1:
2d:43:92:8f:f5:6b:0f:88:f2:95:15:b7:0c:45:d6:53:a4:c6:
c4:e0:80:3c:b1:af:24:ab:98:f5:f6:65:ae:c4:a9:2c:08:ff:
cc:03:f4:ed:6e:6a:1f:58:21:26:07:13:ff:b0:ee:bc:9c:a8:
45:54:8e:ce:e7:8a:7d:0d:9c:c3:e8:6c:42:82:e4:1a:23:4c:
ef:56:e4:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:26:42 2024 by rpki-client on console-ams.rpki-client.org