Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/tTRCa9wHZhpacwHt66y0rxvBcNY.roa
File: tTRCa9wHZhpacwHt66y0rxvBcNY.roa (raw, json)
Hash identifier: HKNmHJKywjuc46BMgBtHlk+HJToHhGqn2mrQwlGPZkU=
Subject key identifier: B5:34:42:6B:DC:07:66:1A:5A:73:01:ED:EB:AC:B4:AF:1B:C1:70:D6
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 018E2E3761F14632319D68BFEB716BCF9E04
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/tTRCa9wHZhpacwHt66y0rxvBcNY.roa
Signing time: Mon 11 Mar 2024 15:52:45 +0000
ROA not before: Mon 11 Mar 2024 15:52:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61317
IP address blocks: 37.77.147.0/24 maxlen: 24
37.140.221.0/24 maxlen: 24
45.90.197.0/24 maxlen: 24
45.93.22.0/24 maxlen: 24
62.233.44.0/24 maxlen: 24
89.106.202.0/24 maxlen: 24
91.132.226.0/24 maxlen: 24
185.11.63.0/24 maxlen: 24
185.92.211.0/24 maxlen: 24
193.109.213.0/24 maxlen: 24
194.26.134.0/24 maxlen: 24
213.217.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:2e:37:61:f1:46:32:31:9d:68:bf:eb:71:6b:cf:9e:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Mar 11 15:52:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b534426bdc07661a5a7301edebacb4af1bc170d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:48:28:e8:06:05:86:01:49:9f:f0:dd:5b:0a:
0a:4a:fe:cd:76:da:02:41:89:2c:0f:f7:a2:80:15:
6d:f3:64:22:6b:23:c9:bc:b7:dd:79:52:95:22:ce:
b3:f0:17:41:19:a4:35:b0:f8:f0:3f:db:3a:2e:0d:
e6:94:3c:75:73:0f:79:e3:4a:78:ae:7c:a0:e4:2b:
0e:61:ad:03:a2:7f:63:85:48:68:ce:47:ad:0f:23:
94:22:3f:45:c1:90:69:a2:13:5a:c4:55:bb:12:60:
54:13:c9:87:56:96:8a:e4:cd:32:1d:50:eb:1e:b6:
f9:92:70:78:a9:8b:77:77:65:ff:3a:37:c2:25:79:
a8:73:68:55:f0:1f:25:b4:6b:13:27:55:84:18:cd:
2d:df:e8:d8:2b:ba:25:9c:89:93:a6:9f:85:0f:0e:
55:cb:e5:ed:35:eb:2c:22:73:1f:eb:41:b7:46:60:
78:95:8c:25:40:cb:19:9a:86:99:1a:d2:1d:da:1c:
31:6f:bb:7a:86:33:05:2e:65:3a:50:a1:91:61:b3:
74:05:86:eb:ca:ca:b3:dc:ad:f5:18:15:15:ea:77:
80:a3:aa:50:ef:cb:e0:00:76:cb:a9:8c:e5:70:4a:
f0:25:a9:68:7a:22:af:22:59:bd:a6:c9:27:76:7c:
f1:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:34:42:6B:DC:07:66:1A:5A:73:01:ED:EB:AC:B4:AF:1B:C1:70:D6
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/tTRCa9wHZhpacwHt66y0rxvBcNY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.77.147.0/24
37.140.221.0/24
45.90.197.0/24
45.93.22.0/24
62.233.44.0/24
89.106.202.0/24
91.132.226.0/24
185.11.63.0/24
185.92.211.0/24
193.109.213.0/24
194.26.134.0/24
213.217.11.0/24
Signature Algorithm: sha256WithRSAEncryption
51:f4:0c:f4:a4:d0:e1:56:df:dd:0c:e7:e8:9a:d6:9e:47:8f:
00:bc:29:0d:59:9f:3f:08:f8:0d:99:ee:d4:ca:70:cc:f6:c3:
d4:48:b7:e9:39:f0:33:dd:17:87:4f:94:62:e3:ff:0d:c2:ba:
c6:3f:6b:a9:82:3c:46:6b:2b:42:d6:df:96:12:37:c9:fc:51:
31:bc:4b:9c:c5:e5:5f:37:b4:1e:0e:1a:19:2f:bf:52:88:72:
3c:39:31:f4:4c:de:da:97:44:74:ee:b9:7a:07:7d:50:78:ec:
24:48:54:35:01:df:0f:16:09:7d:8b:cf:05:9f:bb:a3:a7:f3:
b6:67:41:02:42:0a:59:db:e3:d4:b3:64:af:a3:6c:a9:a5:74:
ea:7f:c5:1d:f2:fd:54:c6:43:ac:07:6e:63:04:d6:ff:7c:b9:
f7:a2:84:d6:55:0f:aa:ff:e8:5b:44:04:d3:b4:84:06:87:83:
31:8e:68:df:80:99:b0:4a:19:31:f3:bf:76:08:99:7e:62:98:
dc:5d:7d:de:8c:10:65:b1:c6:4a:e5:49:4b:d1:8b:27:7a:60:
3f:86:cf:ca:8e:15:11:83:da:9d:d0:5c:8e:9e:7e:48:72:f2:
c5:8a:8f:62:c5:5f:29:fe:8b:48:84:f1:3a:1f:e6:cb:ad:0a:
da:70:9a:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 12:52:40 2024 by rpki-client on console-ams.rpki-client.org