Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/13b4bc-197e-40a6-b845-9ecd8cc50a88/1/EhUXGR9CPUfOaGYVXO8l5dVhB28.roa
File: EhUXGR9CPUfOaGYVXO8l5dVhB28.roa (raw, json)
Hash identifier: 0IBiWFtZ+dfzDFhVBY8SOrw0tsfhjupbLmecMflHJqo=
Subject key identifier: 12:15:17:19:1F:42:3D:47:CE:68:66:15:5C:EF:25:E5:D5:61:07:6F
Certificate issuer: /CN=2791a7b8ee8440522b0b5530c85dce1d73f967b7
Certificate serial: 01904B280EA8A858AD9E96ACE53A25CF0A7A
Authority key identifier: 27:91:A7:B8:EE:84:40:52:2B:0B:55:30:C8:5D:CE:1D:73:F9:67:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J5GnuO6EQFIrC1UwyF3OHXP5Z7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/13b4bc-197e-40a6-b845-9ecd8cc50a88/1/EhUXGR9CPUfOaGYVXO8l5dVhB28.roa
Signing time: Mon 24 Jun 2024 16:50:34 +0000
ROA not before: Mon 24 Jun 2024 16:50:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198154
IP address blocks: 95.128.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/13b4bc-197e-40a6-b845-9ecd8cc50a88/1/J5GnuO6EQFIrC1UwyF3OHXP5Z7c.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/13b4bc-197e-40a6-b845-9ecd8cc50a88/1/J5GnuO6EQFIrC1UwyF3OHXP5Z7c.mft
rsync://rpki.ripe.net/repository/DEFAULT/J5GnuO6EQFIrC1UwyF3OHXP5Z7c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:4b:28:0e:a8:a8:58:ad:9e:96:ac:e5:3a:25:cf:0a:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2791a7b8ee8440522b0b5530c85dce1d73f967b7
Validity
Not Before: Jun 24 16:50:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=121517191f423d47ce6866155cef25e5d561076f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:34:f5:e8:b8:8a:a8:29:b3:06:4c:18:b1:4b:
70:47:30:8e:5d:e1:66:ee:9d:dc:6f:2a:7e:46:13:
65:87:3f:96:36:ae:e9:3e:7a:d9:d4:d2:2d:b7:59:
27:c2:4b:47:cd:1d:c4:4e:57:b4:99:96:87:1c:d7:
ce:12:c2:87:34:68:19:76:40:1e:45:e9:58:1a:6e:
43:cf:ef:a3:97:9a:ad:dd:d5:21:bb:ff:7a:4d:dc:
40:ca:62:3a:c8:c9:4e:c0:32:1b:17:ff:87:e2:4d:
ab:5b:46:c6:db:84:4b:50:52:da:4d:6a:ee:fd:3a:
cc:de:51:b2:96:1d:34:97:ab:f5:ce:46:79:bb:5e:
8f:c7:1e:d3:50:e1:62:f3:a7:71:c3:9d:69:3b:f4:
0f:03:ab:70:6f:97:51:8e:7c:42:49:f0:00:bd:3d:
d5:6b:5b:ce:8e:2c:23:f5:fd:88:66:51:b5:d9:92:
71:06:6d:6a:6d:6a:a4:39:20:1f:f2:fd:80:bd:0f:
ae:fb:55:bd:5e:38:f1:f1:22:69:a8:6a:c0:f4:7b:
1f:e7:43:de:da:be:42:2e:c9:db:1c:0d:a8:64:1e:
68:b0:30:4e:ec:d9:db:19:58:9a:b0:44:81:06:88:
79:84:3f:28:77:07:11:77:48:93:ed:4b:79:ba:6d:
ea:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:15:17:19:1F:42:3D:47:CE:68:66:15:5C:EF:25:E5:D5:61:07:6F
X509v3 Authority Key Identifier:
keyid:27:91:A7:B8:EE:84:40:52:2B:0B:55:30:C8:5D:CE:1D:73:F9:67:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J5GnuO6EQFIrC1UwyF3OHXP5Z7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/13b4bc-197e-40a6-b845-9ecd8cc50a88/1/EhUXGR9CPUfOaGYVXO8l5dVhB28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/13b4bc-197e-40a6-b845-9ecd8cc50a88/1/J5GnuO6EQFIrC1UwyF3OHXP5Z7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.128.196.0/24
Signature Algorithm: sha256WithRSAEncryption
32:ad:e8:80:24:2a:d5:7e:80:24:dc:19:9b:33:c4:65:9e:1b:
07:8a:d8:1b:70:bd:cd:29:7a:df:49:cf:29:e2:a5:28:cc:b2:
aa:5a:65:2f:60:55:2e:63:14:86:7e:41:bb:f8:fa:4d:a6:70:
f8:a0:f7:65:5d:81:46:2f:e9:0f:6f:ef:7b:cb:1c:9e:01:6e:
72:73:c0:94:08:3e:46:80:1e:df:ce:33:35:aa:d9:01:cf:0f:
16:36:da:c0:1c:a4:f5:17:1c:0f:f5:78:fe:1c:9e:bf:72:45:
af:6c:5f:4f:06:1c:c3:92:d2:3e:bd:3b:db:e5:c3:70:65:1b:
26:de:3f:30:9d:40:cb:5d:61:49:0e:f1:74:c8:c9:5b:cc:d1:
53:91:c4:e9:ec:0a:98:fd:58:0e:9f:26:d6:e0:55:39:f3:2e:
5a:16:64:67:05:de:0e:a3:ab:08:94:a0:6b:e2:53:99:97:fe:
44:81:11:d7:b3:32:ae:2f:b9:2e:f8:18:8d:f8:bb:08:7d:e4:
17:5a:f4:30:6f:97:7a:20:1c:27:16:c4:88:24:87:2b:5a:07:
de:0a:91:93:a3:40:c8:3b:bf:56:52:6b:5b:7c:e3:36:da:bf:
d8:49:1c:1d:fa:30:03:d6:d0:16:ff:fa:68:0d:11:a1:f7:f5:
78:81:30:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 07:12:24 2024 by rpki-client on console.sobornost.net