Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/EIyCQioV5uf4qsdMciIC98wjkZ0.roa
File: EIyCQioV5uf4qsdMciIC98wjkZ0.roa (raw, json)
Hash identifier: N7IzAh+xPS+/8SySReD1hexrybNTAkj+nILf6SLMns4=
Subject key identifier: 10:8C:82:42:2A:15:E6:E7:F8:AA:C7:4C:72:22:02:F7:CC:23:91:9D
Certificate issuer: /CN=f2e2810f49b36fdd641c326bd1de4e42d128b046
Certificate serial: 018CCA29B86E64CD38976C7E31AD3AE6A262
Authority key identifier: F2:E2:81:0F:49:B3:6F:DD:64:1C:32:6B:D1:DE:4E:42:D1:28:B0:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8uKBD0mzb91kHDJr0d5OQtEosEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/EIyCQioV5uf4qsdMciIC98wjkZ0.roa
Signing time: Tue 02 Jan 2024 12:33:00 +0000
ROA not before: Tue 02 Jan 2024 12:33:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12670
IP address blocks: 195.167.224.0/20 maxlen: 20
185.204.172.0/22 maxlen: 22
92.102.0.0/16 maxlen: 16
46.218.64.0/18 maxlen: 18
195.167.192.0/20 maxlen: 20
92.102.0.0/15 maxlen: 15
213.244.0.0/19 maxlen: 19
82.101.0.0/18 maxlen: 18
77.104.0.0/18 maxlen: 18
212.99.0.0/17 maxlen: 17
212.103.0.0/19 maxlen: 19
92.103.0.0/18 maxlen: 18
92.103.0.0/16 maxlen: 16
89.227.192.0/18 maxlen: 18
89.224.0.0/16 maxlen: 16
89.225.192.0/18 maxlen: 18
89.224.0.0/14 maxlen: 14
213.30.128.0/18 maxlen: 18
46.218.0.0/18 maxlen: 18
46.218.0.0/16 maxlen: 16
217.66.112.0/20 maxlen: 20
83.145.64.0/18 maxlen: 18
195.248.0.0/19 maxlen: 19
92.103.64.0/18 maxlen: 18
2a02:e000::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/8uKBD0mzb91kHDJr0d5OQtEosEY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/8uKBD0mzb91kHDJr0d5OQtEosEY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8uKBD0mzb91kHDJr0d5OQtEosEY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 May 2024 04:02:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:b8:6e:64:cd:38:97:6c:7e:31:ad:3a:e6:a2:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2e2810f49b36fdd641c326bd1de4e42d128b046
Validity
Not Before: Jan 2 12:33:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=108c82422a15e6e7f8aac74c722202f7cc23919d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:bd:ee:ef:09:22:49:a5:75:df:be:29:65:f4:
0d:51:9c:0f:e3:07:78:8d:a9:df:10:ff:d1:72:e7:
7c:b2:c7:8b:91:52:b4:71:cd:57:9f:06:f8:ff:e2:
a9:e0:28:80:04:b5:79:d9:ee:f6:75:28:23:90:f9:
37:17:9d:bc:f7:3c:2d:03:ed:3c:1e:6b:d1:ba:42:
46:7c:d3:8f:9d:06:67:d4:10:76:59:70:82:36:64:
2a:58:21:23:18:fe:71:b7:47:4e:92:8a:83:ad:f5:
f7:16:55:54:f0:23:02:65:3d:49:37:22:6e:cb:91:
67:2d:77:f4:12:3c:5b:df:37:68:d0:a7:2f:d6:52:
0d:e4:7e:f2:5d:f2:d6:5d:9d:cc:0e:77:11:66:c5:
5e:22:2e:1f:38:51:52:c2:df:f0:d1:cb:49:55:40:
14:02:37:03:66:6a:c8:be:ce:4b:d9:4d:24:be:06:
96:7c:d3:49:9e:f2:a3:d3:d2:0b:33:e1:14:0f:3d:
ed:cd:0d:d7:f0:77:75:46:08:c4:cc:81:a3:67:63:
aa:ff:1b:21:60:9a:a3:f1:11:de:1d:da:41:9c:89:
a9:1b:52:ba:50:9c:84:ed:64:7b:79:46:39:75:ee:
ad:21:13:b5:d8:04:28:47:c9:fb:da:e0:44:f8:6b:
ca:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:8C:82:42:2A:15:E6:E7:F8:AA:C7:4C:72:22:02:F7:CC:23:91:9D
X509v3 Authority Key Identifier:
keyid:F2:E2:81:0F:49:B3:6F:DD:64:1C:32:6B:D1:DE:4E:42:D1:28:B0:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8uKBD0mzb91kHDJr0d5OQtEosEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/EIyCQioV5uf4qsdMciIC98wjkZ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/8uKBD0mzb91kHDJr0d5OQtEosEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.218.0.0/16
77.104.0.0/18
82.101.0.0/18
83.145.64.0/18
89.224.0.0/14
92.102.0.0/15
185.204.172.0/22
195.167.192.0/20
195.167.224.0/20
195.248.0.0/19
212.99.0.0/17
212.103.0.0/19
213.30.128.0/18
213.244.0.0/19
217.66.112.0/20
IPv6:
2a02:e000::/29
Signature Algorithm: sha256WithRSAEncryption
1a:b1:f1:f5:0f:b8:14:9f:6a:83:4e:0a:b2:e6:26:d3:30:6c:
8c:6c:38:dd:ea:0b:06:d2:b6:5c:24:f3:44:c8:34:56:55:d5:
94:9d:99:f3:87:af:d5:ff:db:3b:48:35:05:14:6e:09:89:18:
69:21:58:9f:67:16:f3:38:83:7f:35:cd:e8:9a:38:29:48:ad:
86:12:a2:08:64:39:07:3b:f8:18:2e:f9:be:1e:e7:3d:ce:f3:
91:9e:0d:2d:ca:57:aa:52:fa:0d:79:c8:1a:a1:1e:49:b9:6a:
e0:6c:fd:0a:f5:a3:5b:05:8c:57:47:75:39:89:f9:c5:6e:7b:
dd:28:d0:27:ec:61:a2:98:78:3a:f6:5e:d9:25:b0:d7:de:d6:
86:db:a0:f8:8f:e0:a3:d2:75:ab:2d:e3:f9:74:bb:ad:42:70:
dc:83:65:70:98:a1:d4:9a:26:bf:47:90:d3:5d:57:dd:9d:d2:
01:51:e8:53:e7:04:e1:35:93:f3:90:4d:91:35:4b:7f:7d:b8:
1c:b8:8a:74:95:92:f4:9d:62:ab:32:9f:de:68:ef:1e:ce:ba:
cc:80:fc:02:70:31:eb:63:d4:71:5c:a4:90:66:92:2f:d3:4c:
90:00:35:a9:8e:bf:0c:84:d7:f3:f1:79:ff:5f:a7:74:3f:34:
31:c9:de:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 25 08:11:59 2024 by rpki-client on console-fra.rpki-client.org