Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/eU_MccWDoudyM8LaGT7rROZ0wnY.roa
File: eU_MccWDoudyM8LaGT7rROZ0wnY.roa (raw, json)
Hash identifier: ugu5xQ+pYyuzCQqBcDPCB8/QECzvI7IF39TYwWwrt2A=
Subject key identifier: 79:4F:CC:71:C5:83:A2:E7:72:33:C2:DA:19:3E:EB:44:E6:74:C2:76
Certificate issuer: /CN=47119a205683167925b9f04174312637b1600c07
Certificate serial: 018CC3489DD0318B945960D3296F08FC7AE5
Authority key identifier: 47:11:9A:20:56:83:16:79:25:B9:F0:41:74:31:26:37:B1:60:0C:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RxGaIFaDFnklufBBdDEmN7FgDAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/eU_MccWDoudyM8LaGT7rROZ0wnY.roa
Signing time: Mon 01 Jan 2024 04:29:25 +0000
ROA not before: Mon 01 Jan 2024 04:29:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15600
IP address blocks: 185.74.124.0/22 maxlen: 24
5.144.0.0/19 maxlen: 24
2a00:d4a0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/RxGaIFaDFnklufBBdDEmN7FgDAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/RxGaIFaDFnklufBBdDEmN7FgDAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/RxGaIFaDFnklufBBdDEmN7FgDAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:9d:d0:31:8b:94:59:60:d3:29:6f:08:fc:7a:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47119a205683167925b9f04174312637b1600c07
Validity
Not Before: Jan 1 04:29:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=794fcc71c583a2e77233c2da193eeb44e674c276
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:74:e1:d4:b0:33:a4:8c:76:42:08:e8:03:25:
0e:e7:84:14:e7:dc:c1:93:4a:ec:c5:5d:e9:c8:0b:
59:aa:a4:78:9a:2a:26:d3:53:9e:23:88:59:59:da:
50:af:b8:5b:40:02:10:f5:8b:ce:97:c4:bf:fb:3e:
c0:5d:59:9c:3e:c1:f0:c1:cf:05:b0:31:9e:14:1d:
67:e2:bc:e1:a4:97:7a:86:7a:46:c8:68:a7:1c:93:
a8:07:6d:30:97:c2:89:48:14:35:1b:89:66:23:5a:
58:7d:55:b4:7f:bb:e2:7e:69:31:23:3a:e4:d2:9f:
35:0d:ac:71:76:97:51:cf:b6:e4:0c:13:84:b6:7f:
6d:62:2c:18:9c:5a:75:b5:08:2c:6e:11:68:4a:f0:
38:85:ab:6e:b4:a6:2f:b8:67:9a:ab:5e:93:d1:27:
fd:3a:47:f0:bf:02:df:78:f4:09:0a:28:59:bf:4d:
ae:7d:76:63:80:d7:f4:89:ad:fb:b4:4b:f0:bd:91:
d5:7f:95:55:ec:cf:78:8b:89:24:20:79:e5:80:46:
2a:db:b9:3f:84:42:0f:cb:5a:ca:83:8d:9d:6e:18:
32:af:fe:d2:85:31:42:5b:2c:7b:dd:e9:12:a7:3f:
e8:85:b8:b3:3c:98:02:70:a3:8f:94:d6:b7:66:4f:
f3:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:4F:CC:71:C5:83:A2:E7:72:33:C2:DA:19:3E:EB:44:E6:74:C2:76
X509v3 Authority Key Identifier:
keyid:47:11:9A:20:56:83:16:79:25:B9:F0:41:74:31:26:37:B1:60:0C:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RxGaIFaDFnklufBBdDEmN7FgDAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/eU_MccWDoudyM8LaGT7rROZ0wnY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/RxGaIFaDFnklufBBdDEmN7FgDAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.144.0.0/19
185.74.124.0/22
IPv6:
2a00:d4a0::/29
Signature Algorithm: sha256WithRSAEncryption
6f:05:f8:5b:cc:1d:95:11:5f:c8:ba:50:dd:0f:82:d1:58:36:
c1:63:5f:f1:a3:61:10:f5:66:85:8b:6a:fb:89:51:08:5d:48:
b0:0c:dc:ef:f9:20:7a:95:48:a1:f4:2f:ca:a4:09:90:ca:fb:
2a:91:32:92:00:a3:34:89:4d:16:46:ba:58:4d:dc:78:ce:15:
25:a4:97:a9:8e:f8:51:14:b9:77:3b:96:07:d7:4f:d6:f0:f1:
e3:a3:7d:d9:97:ac:5c:c6:10:61:a8:21:90:20:48:d6:48:ae:
f9:ec:b7:36:a1:ea:7a:30:37:53:41:40:26:1c:43:7c:be:20:
37:75:e1:5d:e7:3d:84:4f:bb:de:db:0d:19:5e:62:d2:63:8a:
65:6b:6f:6d:69:d9:df:9a:db:70:a5:30:13:9f:dd:74:9e:cf:
64:cb:11:ab:6a:66:4b:9b:13:ac:46:f8:cf:77:51:6a:43:fc:
35:97:4a:88:8d:34:52:4d:13:57:33:94:7e:cb:3a:e5:7b:26:
39:8e:a5:d7:d2:89:74:b5:1e:64:f2:4c:4c:c9:98:e2:2c:51:
39:7a:5c:5a:21:85:00:24:bb:24:ac:bd:6c:09:9d:3d:af:de:
c3:23:7b:fd:74:35:fc:03:da:ba:fe:e5:25:82:d5:28:0b:21:
7b:a4:90:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 07:37:33 2024 by rpki-client on console-ams.rpki-client.org