Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/eIBl1HoQNQ-VQP6EOhhLTAxPq7A.roa
File: eIBl1HoQNQ-VQP6EOhhLTAxPq7A.roa (raw, json)
Hash identifier: 2lO+vZHEUS9Rm/g+axX1OhG/iYyKH5hZJNahstXtg2k=
Subject key identifier: 78:80:65:D4:7A:10:35:0F:95:40:FE:84:3A:18:4B:4C:0C:4F:AB:B0
Certificate issuer: /CN=722a8c1d311895016108ffbd14575c77cc28773a
Certificate serial: 0192B2E3F70AAE4AABE87AB44D4D47780504
Authority key identifier: 72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/eIBl1HoQNQ-VQP6EOhhLTAxPq7A.roa
Signing time: Tue 22 Oct 2024 06:22:17 +0000
ROA not before: Tue 22 Oct 2024 06:22:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12615
IP address blocks: 78.108.252.0/24 maxlen: 24
87.246.4.0/24 maxlen: 24
109.160.44.0/24 maxlen: 24
109.160.45.0/24 maxlen: 24
109.160.118.0/24 maxlen: 24
109.160.119.0/24 maxlen: 24
185.43.59.0/24 maxlen: 24
212.70.130.0/23 maxlen: 23
212.70.132.0/24 maxlen: 24
212.70.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:b2:e3:f7:0a:ae:4a:ab:e8:7a:b4:4d:4d:47:78:05:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=722a8c1d311895016108ffbd14575c77cc28773a
Validity
Not Before: Oct 22 06:22:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=788065d47a10350f9540fe843a184b4c0c4fabb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:bf:48:b3:d6:4e:34:eb:fc:a1:93:f6:4a:1b:
b6:f1:a8:46:59:be:b9:60:40:d3:98:3a:1b:c2:a2:
35:2e:ae:f5:c8:fc:13:d5:81:3e:7e:6f:de:15:f3:
75:63:00:b1:77:5a:54:1c:d6:4d:9f:59:67:22:12:
e6:6a:2e:26:34:fd:c8:ef:dc:6b:a7:10:25:6c:8a:
a8:41:79:53:10:64:a4:51:dc:8b:5a:cf:f0:9e:ed:
2a:23:3a:7f:d7:85:e3:74:ae:94:91:f7:46:4f:b1:
40:4e:64:94:d1:a5:71:97:86:e9:c4:23:bd:d3:3c:
a1:04:d7:b5:8c:6b:b0:f2:eb:35:43:10:d0:67:8a:
78:6b:32:cf:6c:fe:b4:ef:ae:01:16:d1:6c:08:df:
59:5a:ea:6b:2a:e0:95:4c:c6:40:bb:a6:c0:ae:da:
cc:8f:61:05:1e:1c:41:73:81:72:88:8b:17:2d:20:
9e:af:8a:40:03:a8:a9:df:85:53:c7:c3:9a:42:78:
90:96:b8:40:33:30:a9:b7:fd:ba:c1:82:96:8e:cd:
6b:2d:fb:ef:c4:f8:40:25:10:a9:1a:a2:51:43:2c:
9e:3a:8e:ac:37:6e:8f:4b:3e:04:42:99:72:32:e3:
df:50:b5:15:e3:7f:29:8b:c6:c6:4b:4f:bb:9f:7f:
a3:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:80:65:D4:7A:10:35:0F:95:40:FE:84:3A:18:4B:4C:0C:4F:AB:B0
X509v3 Authority Key Identifier:
keyid:72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/eIBl1HoQNQ-VQP6EOhhLTAxPq7A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.108.252.0/24
87.246.4.0/24
109.160.44.0/23
109.160.118.0/23
185.43.59.0/24
212.70.130.0-212.70.133.255
Signature Algorithm: sha256WithRSAEncryption
07:ae:ac:a5:45:5c:17:82:bd:26:23:e8:4b:93:48:52:80:66:
9b:6c:e4:f8:fa:b1:67:91:ed:35:44:3c:ba:cb:98:1e:e4:dc:
34:76:4c:1c:79:8b:45:71:1e:31:87:9e:f2:5e:a3:65:d9:77:
28:61:58:ad:c9:ff:66:43:1b:fa:3b:9f:fe:26:c8:84:37:5c:
54:bb:26:14:34:d4:fc:6e:73:c2:53:c9:65:24:09:9d:a1:6c:
3a:48:58:90:49:37:50:12:02:3d:88:4c:f3:f4:ee:7d:05:64:
30:c6:e1:df:99:95:7e:69:41:7c:3a:7c:a0:b8:3a:44:c7:d1:
65:ab:8a:ca:29:2b:6e:f7:17:81:d3:fb:4e:db:3b:73:20:df:
a1:a2:7b:f7:91:43:c0:a0:9a:e2:9d:23:b6:51:95:99:86:72:
86:b4:ed:46:de:4c:8c:8a:75:49:2c:8b:f4:b0:82:60:42:61:
50:33:b1:2f:8f:d6:10:34:d5:8f:c4:c3:22:a7:43:f7:19:7c:
1a:eb:26:9a:63:7f:5c:f8:7d:11:d0:bf:13:fd:18:2b:e4:01:
5d:5c:db:ed:42:db:9b:4c:ae:eb:61:81:b1:fe:79:d7:50:eb:
9c:c3:9c:3b:6a:71:46:f9:ec:dd:97:cc:cd:88:56:4f:3a:c6:
db:35:f6:2a
-----BEGIN CERTIFICATE-----
MIIFIzCCBAugAwIBAgISAZKy4/cKrkqr6Hq0TU1HeAUEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMmE4YzFkMzExODk1MDE2MTA4ZmZiZDE0NTc1Yzc3Y2My
ODc3M2EwHhcNMjQxMDIyMDYyMjE3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ODgwNjVkNDdhMTAzNTBmOTU0MGZlODQzYTE4NGI0YzBjNGZhYmIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0L9Is9ZONOv8oZP2Shu28ahGWb65
YEDTmDobwqI1Lq71yPwT1YE+fm/eFfN1YwCxd1pUHNZNn1lnIhLmai4mNP3I79xr
pxAlbIqoQXlTEGSkUdyLWs/wnu0qIzp/14XjdK6UkfdGT7FATmSU0aVxl4bpxCO9
0zyhBNe1jGuw8us1QxDQZ4p4azLPbP60764BFtFsCN9ZWuprKuCVTMZAu6bArtrM
j2EFHhxBc4FyiIsXLSCer4pAA6ip34VTx8OaQniQlrhAMzCpt/26wYKWjs1rLfvv
xPhAJRCpGqJRQyyeOo6sN26PSz4EQplyMuPfULUV438pi8bGS0+7n3+jKQIDAQAB
o4ICLzCCAiswHQYDVR0OBBYEFHiAZdR6EDUPlUD+hDoYS0wMT6uwMB8GA1UdIwQY
MBaAFHIqjB0xGJUBYQj/vRRXXHfMKHc6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2lxTUhURVlsUUZoQ1AtOUZGZGNkOHdvZHpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9iMWY2ZWUtYzRlZi00MzU1LWFmMzYt
YTU1OGVlNjU0MzFmLzEvZUlCbDFIb1FOUS1WUVA2RU9oaExUQXhQcTdBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC9iMWY2ZWUtYzRlZi00MzU1LWFmMzYtYTU1OGVlNjU0MzFm
LzEvY2lxTUhURVlsUUZoQ1AtOUZGZGNkOHdvZHpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEUGCCsGAQUFBwEHAQH/BDYwNDAyBAIAATAsAwQATmz8AwQA
V/YEAwQBbaAsAwQBbaB2AwQAuSs7MAwDBAHURoIDBAHURoQwDQYJKoZIhvcNAQEL
BQADggEBAAeurKVFXBeCvSYj6EuTSFKAZpts5Pj6sWeR7TVEPLrLmB7k3DR2TBx5
i0VxHjGHnvJeo2XZdyhhWK3J/2ZDG/o7n/4myIQ3XFS7JhQ01Pxuc8JTyWUkCZ2h
bDpIWJBJN1ASAj2ITPP07n0FZDDG4d+ZlX5pQXw6fKC4OkTH0WWrisopK273F4HT
+07bO3Mg36Gie/eRQ8CgmuKdI7ZRlZmGcoa07UbeTIyKdUksi/SwgmBCYVAzsS+P
1hA01Y/EwyKnQ/cZfBrrJppjf1z4fRHQvxP9GCvkAV1c2+1C25tMruthgbH+eddQ
65zDnDtqcUb57N2XzM2IVk86xts19io=
-----END CERTIFICATE-----
Generated at Wed Nov 27 01:03:26 2024 by rpki-client on console-fra.rpki-client.org