Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/9hrEP9ohLwAQ8nwdpkvSXD9ijNs.roa
File: 9hrEP9ohLwAQ8nwdpkvSXD9ijNs.roa (raw, json)
Hash identifier: 6AuuMrDn4OcwDCpaicyWZxHKI/HtMqJb32itQAFF7rQ=
Subject key identifier: F6:1A:C4:3F:DA:21:2F:00:10:F2:7C:1D:A6:4B:D2:5C:3F:62:8C:DB
Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial: 018D8D491D8A15CFAFD5365C0307C43BFAB8
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/9hrEP9ohLwAQ8nwdpkvSXD9ijNs.roa
Signing time: Fri 09 Feb 2024 09:53:15 +0000
ROA not before: Fri 09 Feb 2024 09:53:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9009
IP address blocks: 37.49.145.0/24 maxlen: 24
37.49.147.0/24 maxlen: 24
37.49.151.0/24 maxlen: 24
94.74.147.0/24 maxlen: 24
94.74.168.0/24 maxlen: 24
94.74.173.0/24 maxlen: 24
109.203.161.0/24 maxlen: 24
176.46.129.0/24 maxlen: 24
176.46.130.0/24 maxlen: 24
176.46.133.0/24 maxlen: 24
176.46.134.0/24 maxlen: 24
176.46.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 09:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:8d:49:1d:8a:15:cf:af:d5:36:5c:03:07:c4:3b:fa:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Validity
Not Before: Feb 9 09:53:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f61ac43fda212f0010f27c1da64bd25c3f628cdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:46:b1:3d:5b:a5:de:19:3b:05:5f:98:c0:10:
54:84:b2:65:26:14:49:31:38:81:81:19:31:a3:9f:
68:7b:c8:6d:8a:24:75:cc:3d:24:12:55:15:4e:c0:
14:e4:3e:92:75:6a:49:57:6f:14:cd:2f:2d:dc:65:
10:cb:17:95:11:b5:4f:09:3e:5e:f8:84:64:a5:83:
9c:0f:fd:d0:a9:03:8e:ac:4d:97:78:f8:17:fb:59:
a6:6e:52:96:23:91:35:9f:d9:47:c2:94:83:49:44:
06:a3:77:ca:a9:20:ae:97:f9:7f:d5:e0:89:b0:cc:
7a:fb:d9:c8:15:f5:6d:8a:44:40:dc:de:d8:a3:ff:
f8:40:1c:17:1a:fb:c8:49:8f:0b:3d:56:56:c3:9a:
8f:f5:5e:08:aa:d5:f0:73:ca:06:40:b6:96:23:22:
4f:25:6c:ee:11:37:c2:e9:3a:0b:97:f0:91:b8:2b:
17:b8:82:8e:5a:f2:05:e4:eb:12:48:11:c9:f2:5d:
b2:64:1f:ca:fb:b9:2e:ef:bd:12:8f:69:06:f4:2e:
78:b4:0a:46:6b:ea:9a:f0:e7:8c:6d:0e:9e:a5:67:
c3:f9:31:be:3e:a8:47:b5:7f:ee:c4:d8:d0:22:d9:
25:03:28:a3:bf:81:96:3f:63:41:4d:4c:0a:36:c2:
96:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:1A:C4:3F:DA:21:2F:00:10:F2:7C:1D:A6:4B:D2:5C:3F:62:8C:DB
X509v3 Authority Key Identifier:
keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/9hrEP9ohLwAQ8nwdpkvSXD9ijNs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.49.145.0/24
37.49.147.0/24
37.49.151.0/24
94.74.147.0/24
94.74.168.0/24
94.74.173.0/24
109.203.161.0/24
176.46.129.0-176.46.130.255
176.46.133.0-176.46.135.255
Signature Algorithm: sha256WithRSAEncryption
09:22:ff:76:cd:3f:12:61:a5:cb:72:84:47:ad:82:3f:38:8b:
ba:75:f4:eb:83:ba:94:eb:82:25:bf:98:fa:ce:08:f5:19:83:
d3:d2:70:f6:ef:35:8d:5d:8e:7f:54:f4:a0:8f:37:94:cf:87:
bf:2e:96:b5:3b:c0:cb:12:d0:b7:53:38:31:0f:99:41:cd:cd:
10:f3:71:c9:ce:f7:e3:f9:95:6b:8e:63:01:05:34:cc:3a:bd:
4b:0d:e4:0b:6f:95:50:71:5e:dc:cf:f6:19:5f:98:95:1e:b3:
91:c5:46:a6:09:05:03:bc:9c:27:46:bc:01:0e:f7:41:e7:ff:
a8:46:b3:fc:ac:d9:12:99:ce:45:61:38:79:d6:5d:8d:4f:c4:
db:46:81:7b:b9:bb:53:97:a9:de:c3:2b:34:48:f4:cc:3f:6b:
aa:8c:29:b3:3d:bd:09:14:65:8f:2d:e1:8a:bf:d4:ea:e3:67:
d1:1f:96:04:6b:3f:cc:b2:8a:ac:c8:66:0d:18:27:62:9c:ab:
e7:38:8e:0a:91:5e:42:89:1f:19:1b:a2:ad:ed:c6:e2:84:62:
b8:b3:4c:f9:6c:ea:01:91:b4:49:a7:5b:f4:5a:9f:56:1b:90:
3b:0b:12:fc:a3:9d:b6:80:c7:b8:c7:bf:ee:dd:7f:22:ee:1c:
2a:59:8c:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 15:45:29 2024 by rpki-client on console-ams.rpki-client.org