Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/EUGr_JUcdaLr9IiwjzHpBfbed08.roa
File: EUGr_JUcdaLr9IiwjzHpBfbed08.roa (raw, json)
Hash identifier: 5buNlZcizJECEsPAtQ/zj0RZS5twHYscPRflqIUJ3z0=
Subject key identifier: 11:41:AB:FC:95:1C:75:A2:EB:F4:88:B0:8F:31:E9:05:F6:DE:77:4F
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 0192220E81C0880BD071E796D71FF4C8FBB6
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/EUGr_JUcdaLr9IiwjzHpBfbed08.roa
Signing time: Tue 24 Sep 2024 03:23:48 +0000
ROA not before: Tue 24 Sep 2024 03:23:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29069
IP address blocks: 77.87.112.0/21 maxlen: 21
77.87.112.0/24 maxlen: 24
95.215.96.0/21 maxlen: 21
185.13.112.0/22 maxlen: 22
185.13.112.0/25 maxlen: 25
185.13.112.128/25 maxlen: 25
195.128.56.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:22:0e:81:c0:88:0b:d0:71:e7:96:d7:1f:f4:c8:fb:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Sep 24 03:23:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1141abfc951c75a2ebf488b08f31e905f6de774f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:6d:81:b2:55:34:23:48:7b:08:f8:a3:95:84:
72:3b:92:b5:a7:fe:94:ae:b6:bd:ba:42:29:35:8d:
72:e5:3a:09:b6:49:5b:30:6a:fc:19:a6:ba:10:1d:
9d:99:aa:ef:c7:ab:43:72:7b:23:d4:c0:92:71:0c:
0f:38:fe:65:38:64:25:1b:76:b3:1d:e8:43:28:71:
93:6e:90:6b:8a:86:7f:b5:c7:47:8b:44:e5:0f:66:
9f:6b:71:cf:53:3f:d8:b7:93:7c:3e:d1:ac:08:c2:
15:a5:c4:48:e3:4c:6a:ae:0a:94:a1:f7:ef:65:0e:
9d:4a:a9:8f:2b:c5:f9:80:bb:e3:8b:ff:b3:98:ed:
67:2c:49:ac:66:d5:e8:e2:4c:0b:d5:ff:22:23:d0:
3b:1c:88:2f:32:35:cc:c1:0e:cf:95:5d:fc:da:d7:
60:d3:ca:67:26:c5:90:73:f6:fc:81:58:aa:38:7e:
ef:0e:77:d4:28:d6:91:c8:02:6d:2c:b9:ba:88:dc:
7b:4d:0e:7e:3a:64:f7:b6:4d:ca:24:f2:6d:e8:2b:
d5:d2:5f:e6:21:15:dc:13:82:73:e9:48:99:89:d7:
0f:6d:5c:1a:94:d3:51:05:03:3c:d5:6b:a5:1f:7f:
6f:96:9a:6a:6f:09:a8:86:50:0a:69:61:a6:2d:ac:
2b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:41:AB:FC:95:1C:75:A2:EB:F4:88:B0:8F:31:E9:05:F6:DE:77:4F
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/EUGr_JUcdaLr9IiwjzHpBfbed08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.87.112.0/21
95.215.96.0/21
185.13.112.0/22
195.128.56.0/21
Signature Algorithm: sha256WithRSAEncryption
4f:f7:26:0d:11:3d:35:df:f5:71:4c:f4:c6:f8:a6:6c:65:31:
ad:24:40:f7:a3:06:19:88:db:f7:44:bc:29:86:a0:32:34:c4:
33:56:b5:ee:e2:27:3b:d4:c2:5c:50:7e:18:00:62:88:e5:28:
c0:21:71:1d:6b:e0:7a:9a:f8:91:c0:38:82:de:53:63:70:90:
34:c8:a5:67:ff:d1:14:f1:cb:04:89:81:ac:d1:36:53:40:84:
6a:fc:d7:eb:63:ae:53:a3:d3:bd:2e:38:ea:71:58:c3:92:92:
8b:20:fb:35:4f:ab:13:1a:7e:43:af:e9:e6:ac:04:1a:bc:a8:
46:53:a6:56:48:31:30:51:32:a2:30:79:c7:0c:03:ef:94:3a:
72:5e:24:a2:1d:c9:d3:e4:11:f7:c0:2c:74:a8:52:4e:e2:46:
40:56:d5:fc:08:4c:1a:90:e9:83:ae:b9:2b:16:20:65:8e:8b:
90:af:d8:0c:0b:d5:fa:57:f8:2f:f5:64:04:d7:8f:54:4c:65:
38:c4:69:14:8f:f3:06:ad:53:c1:9a:5e:67:08:35:86:f8:dd:
24:71:09:7e:21:88:e8:cc:46:1a:43:50:b3:4d:f2:56:25:bf:
54:d1:66:ca:da:dd:e6:d5:9f:00:a6:2c:f2:d3:f8:35:0a:1a:
b7:6d:e8:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:27:56 2024 by rpki-client on console-ams.rpki-client.org