Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/ca510c-b6d1-4eb3-8dd1-498f4c10b655/1/ewyIGd-N3tGRBOLrnEcxosUA25c.roa
File: ewyIGd-N3tGRBOLrnEcxosUA25c.roa (raw, json)
Hash identifier: GV8O9tmb1Wwc9Cw0hyRAoBm8YWL3oWvoTgl2rqJQ2VQ=
Subject key identifier: 7B:0C:88:19:DF:8D:DE:D1:91:04:E2:EB:9C:47:31:A2:C5:00:DB:97
Certificate issuer: /CN=ded8582b0243863c572ce25786ccb36ff795b22e
Certificate serial: 018CC8DE97DB5850E27092F3F65286A75B07
Authority key identifier: DE:D8:58:2B:02:43:86:3C:57:2C:E2:57:86:CC:B3:6F:F7:95:B2:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3thYKwJDhjxXLOJXhsyzb_eVsi4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/ca510c-b6d1-4eb3-8dd1-498f4c10b655/1/ewyIGd-N3tGRBOLrnEcxosUA25c.roa
Signing time: Tue 02 Jan 2024 06:31:20 +0000
ROA not before: Tue 02 Jan 2024 06:31:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34605
IP address blocks: 178.218.79.0/24 maxlen: 24
45.142.90.0/24 maxlen: 24
45.142.88.0/24 maxlen: 24
178.218.64.0/24 maxlen: 24
178.218.67.0/24 maxlen: 24
178.218.66.0/24 maxlen: 24
178.218.65.0/24 maxlen: 24
178.218.71.0/24 maxlen: 24
178.218.70.0/24 maxlen: 24
178.218.69.0/24 maxlen: 24
178.218.68.0/24 maxlen: 24
178.218.74.0/24 maxlen: 24
178.218.73.0/24 maxlen: 24
178.218.72.0/24 maxlen: 24
178.218.78.0/24 maxlen: 24
178.218.77.0/24 maxlen: 24
178.218.76.0/24 maxlen: 24
178.218.75.0/24 maxlen: 24
194.126.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/ca510c-b6d1-4eb3-8dd1-498f4c10b655/1/3thYKwJDhjxXLOJXhsyzb_eVsi4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/ca510c-b6d1-4eb3-8dd1-498f4c10b655/1/3thYKwJDhjxXLOJXhsyzb_eVsi4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3thYKwJDhjxXLOJXhsyzb_eVsi4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:97:db:58:50:e2:70:92:f3:f6:52:86:a7:5b:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ded8582b0243863c572ce25786ccb36ff795b22e
Validity
Not Before: Jan 2 06:31:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7b0c8819df8dded19104e2eb9c4731a2c500db97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:51:e0:dd:f7:e5:52:6f:e2:73:08:e1:5c:b5:
51:c5:bf:82:19:3c:80:35:88:b5:9f:88:07:41:ce:
6b:36:1f:fd:de:96:c7:cc:fb:4d:e2:39:bc:c6:c7:
ee:85:2a:bf:02:1e:e0:bc:b3:97:b7:29:30:83:84:
bb:3f:86:5f:4d:a0:ae:b8:65:1c:d7:7a:1e:e4:d4:
49:b9:02:ea:f0:1f:22:c7:87:aa:33:0f:99:c6:36:
25:84:2b:4c:19:07:c1:fb:e7:11:3d:dc:6c:e2:ca:
94:d4:2c:2a:95:5c:38:51:0f:81:0a:ae:36:9f:b0:
2d:ec:29:7e:f5:32:e0:68:ed:d2:d4:3e:e0:cb:31:
42:58:94:5a:ee:e3:66:c4:44:10:9a:a4:af:c1:aa:
54:00:68:95:8c:5f:fa:ee:76:f4:06:af:54:5f:73:
62:4a:00:71:ec:39:3b:95:18:08:6d:07:83:0b:e8:
83:5f:e4:e9:5d:37:74:8c:52:f9:44:9d:b4:26:bd:
82:1e:3e:45:7e:6b:8a:1a:3a:a9:38:db:30:5f:0f:
ac:cf:ef:b1:1f:45:24:a4:74:e6:e1:20:93:44:af:
80:a9:d6:ae:2c:7a:a9:43:bb:51:d6:0f:32:6c:21:
8a:4e:67:f6:43:b8:c7:2f:e4:74:41:40:a3:72:66:
e2:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:0C:88:19:DF:8D:DE:D1:91:04:E2:EB:9C:47:31:A2:C5:00:DB:97
X509v3 Authority Key Identifier:
keyid:DE:D8:58:2B:02:43:86:3C:57:2C:E2:57:86:CC:B3:6F:F7:95:B2:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3thYKwJDhjxXLOJXhsyzb_eVsi4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ca510c-b6d1-4eb3-8dd1-498f4c10b655/1/ewyIGd-N3tGRBOLrnEcxosUA25c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ca510c-b6d1-4eb3-8dd1-498f4c10b655/1/3thYKwJDhjxXLOJXhsyzb_eVsi4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.88.0/24
45.142.90.0/24
178.218.64.0/20
194.126.204.0/24
Signature Algorithm: sha256WithRSAEncryption
07:61:df:71:d9:54:ed:a7:e6:15:ab:48:57:e3:b8:f2:4b:f4:
e4:46:1c:94:1e:2d:d5:97:96:ad:fb:a4:e2:1f:45:fe:d2:4c:
cd:f1:12:8b:e9:05:09:98:1f:ba:47:9a:6a:df:2c:83:d2:f0:
1f:3d:a8:62:75:65:e6:85:13:6d:0a:41:46:0c:79:48:1f:39:
19:15:00:d1:14:eb:f0:81:5e:93:68:78:4b:dc:c0:7a:da:06:
59:9c:73:d0:04:76:8e:a4:4e:4b:bd:51:47:76:3d:d2:cb:4d:
ad:fa:ca:2f:1b:be:a2:4b:55:72:9e:b0:f0:aa:a8:77:83:48:
f6:0f:6a:40:66:66:21:fd:b3:5b:ac:7e:e7:9c:cb:4a:b4:4c:
ca:ab:68:ec:55:5d:ae:30:e1:92:f1:56:d9:bb:e7:6f:b6:ab:
5a:36:54:c7:5a:76:3f:7f:a8:76:b9:50:7c:87:51:9f:a4:60:
ac:d9:d7:bf:c6:b6:98:fb:bb:e6:d8:ae:72:7e:eb:e4:62:49:
f2:88:63:9c:55:04:49:96:fb:ad:3d:9f:b6:3c:4e:23:d2:c7:
27:85:8a:99:5c:9b:02:6c:c8:96:e7:e9:09:9f:b0:40:1b:c2:
26:83:49:45:a0:ff:f9:15:05:8b:36:67:5e:ec:51:0c:6f:a9:
40:51:01:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 14:55:37 2024 by rpki-client on console-ams.rpki-client.org