Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/euPwUMyZn-vkdiei1LNUVQlEPEY.roa
File: euPwUMyZn-vkdiei1LNUVQlEPEY.roa (raw, json)
Hash identifier: f7GxQ//n27Ptg8IDA8Dh1k9lYy4aQbQsOsDUnCdlfz0=
Subject key identifier: 7A:E3:F0:50:CC:99:9F:EB:E4:76:27:A2:D4:B3:54:55:09:44:3C:46
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 018CC2DB659ACAAF4FBD2664D27DDF45BD86
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/euPwUMyZn-vkdiei1LNUVQlEPEY.roa
Signing time: Mon 01 Jan 2024 02:30:07 +0000
ROA not before: Mon 01 Jan 2024 02:30:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60842
IP address blocks: 185.39.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:65:9a:ca:af:4f:bd:26:64:d2:7d:df:45:bd:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: Jan 1 02:30:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7ae3f050cc999febe47627a2d4b3545509443c46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4a:89:27:2e:38:c8:9c:3c:af:50:31:5b:db:
19:4d:5f:db:9a:6b:dc:fc:16:86:cf:16:99:26:b2:
7f:83:67:4f:96:6d:40:7c:87:7e:6a:9d:60:90:af:
72:92:1e:4b:17:ab:f5:0b:74:8f:75:87:70:89:6f:
60:cc:f3:1b:69:92:6b:57:7b:5a:e3:ed:d6:3c:6d:
0f:d8:0e:2f:f3:1a:53:99:13:b7:7a:5e:4e:49:a5:
65:23:1f:e9:0f:2f:89:a1:91:af:fc:74:34:2e:16:
42:1b:b1:3c:1e:c3:31:e5:b6:93:b5:15:30:b6:bc:
b6:48:a6:8f:95:44:4d:27:86:3c:dc:33:06:85:f7:
b2:53:c1:13:cd:c5:78:2f:b7:6d:9c:35:5e:dd:18:
77:db:dc:f4:d4:f1:e4:56:f8:72:56:a7:06:9b:27:
3e:65:cf:90:8d:e0:42:23:c3:64:84:40:65:24:4f:
31:19:ca:ac:6c:10:6f:3a:d2:df:a6:36:33:38:6e:
8d:16:f1:bb:96:f1:4c:55:68:30:5d:32:00:8f:21:
f2:33:17:0e:8a:4d:ca:3b:4a:05:38:bc:e8:f6:cd:
14:9e:86:55:5a:7d:29:a7:14:60:e0:98:0c:a8:1b:
a3:03:bb:08:da:9a:0e:80:ef:7f:0e:23:79:63:1b:
80:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:E3:F0:50:CC:99:9F:EB:E4:76:27:A2:D4:B3:54:55:09:44:3C:46
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/euPwUMyZn-vkdiei1LNUVQlEPEY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.39.205.0/24
Signature Algorithm: sha256WithRSAEncryption
d3:4e:4e:05:ad:fc:45:11:11:6a:a0:9b:54:1f:f3:f2:3d:82:
b4:b0:78:67:87:a1:ad:61:14:d4:d2:1c:f3:fc:c4:d1:0d:11:
0e:a0:77:f0:e0:86:1b:61:4b:7e:db:86:d4:3c:c4:1d:69:af:
01:61:87:b3:c2:62:e8:3e:e6:00:00:6f:46:15:a6:c0:33:7c:
7a:46:0c:d5:7d:82:4e:cf:a0:53:4a:5c:20:a7:c0:35:6c:e7:
a1:24:8f:91:b8:db:28:0f:3f:2a:0b:a5:91:a2:33:d2:a2:8a:
ce:e4:95:09:be:a1:37:51:aa:cd:ef:13:78:4c:8c:44:f2:58:
e8:71:7a:92:6c:76:22:56:5c:4a:43:37:e9:d6:ed:38:06:9e:
eb:ec:43:9b:03:0d:c5:47:83:ca:19:61:d8:32:1c:3f:02:18:
53:61:cf:fe:f4:56:c1:98:a7:21:8f:28:b1:39:97:48:bc:ac:
9a:bb:a9:6d:ca:f6:84:11:b4:0c:47:89:eb:c0:b8:f1:74:d9:
3d:f2:fc:bd:0f:73:6e:c4:17:1a:19:8e:d2:33:7d:8a:aa:c5:
f6:fa:f6:6c:ee:70:33:0f:3d:3c:34:75:a0:9d:0d:9e:6e:b2:
1c:f6:1d:8b:fa:9c:ac:ea:8f:aa:bb:c5:09:77:5b:40:43:b4:
bf:27:eb:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:55:48 2024 by rpki-client on console-fra.rpki-client.org