Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/7lnxTRZ5wkiwDjAISPfjaDgoYmk.roa
File: 7lnxTRZ5wkiwDjAISPfjaDgoYmk.roa (raw, json)
Hash identifier: 79Wdee8CdTPtmKI5T8GAO7ku7UlqUt4gH408RliGiEI=
Subject key identifier: EE:59:F1:4D:16:79:C2:48:B0:0E:30:08:48:F7:E3:68:38:28:62:69
Certificate issuer: /CN=0563cb263df50d2d4d073c0f7db6cd2776302c9d
Certificate serial: 018D28191FF98DE92B47A657E82C4B0D9B1E
Authority key identifier: 05:63:CB:26:3D:F5:0D:2D:4D:07:3C:0F:7D:B6:CD:27:76:30:2C:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/7lnxTRZ5wkiwDjAISPfjaDgoYmk.roa
Signing time: Sat 20 Jan 2024 18:19:11 +0000
ROA not before: Sat 20 Jan 2024 18:19:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49434
IP address blocks: 37.44.236.0/24 maxlen: 24
37.44.237.0/24 maxlen: 24
79.110.237.0/24 maxlen: 24
185.142.54.0/24 maxlen: 24
185.142.55.0/24 maxlen: 24
193.177.0.0/24 maxlen: 24
193.177.162.0/24 maxlen: 24
193.178.0.0/24 maxlen: 24
2a09:ca00::/29 maxlen: 29
2a0f:9240::/32 maxlen: 32
2a0f:9240:1300::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:28:19:1f:f9:8d:e9:2b:47:a6:57:e8:2c:4b:0d:9b:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0563cb263df50d2d4d073c0f7db6cd2776302c9d
Validity
Not Before: Jan 20 18:19:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ee59f14d1679c248b00e300848f7e36838286269
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3d:95:80:7f:bd:84:c4:28:d5:80:60:d2:8d:
58:e5:1f:ca:a4:a3:a0:c1:bf:7b:ac:9b:66:95:20:
4d:19:fd:07:ed:9d:65:83:f7:ad:a5:75:ad:d8:54:
97:78:a6:be:70:d2:fa:c9:a5:c0:c2:e9:24:d5:66:
02:2e:04:73:aa:23:5f:c6:b0:2b:04:1d:38:30:c9:
ae:97:d5:32:7a:cf:c6:58:57:7b:97:c3:68:b7:60:
f3:50:7a:69:c4:43:b1:85:1e:ab:4c:d0:8a:57:14:
7b:f0:c5:48:a1:a6:69:d1:5b:f2:ab:b5:e2:4c:ae:
8e:08:99:0b:e4:cb:43:c9:f0:23:8a:ce:09:e6:c1:
b0:3c:9a:0a:89:bc:c9:ad:ff:b2:88:fb:84:47:80:
da:25:65:36:c5:62:0a:94:40:33:87:60:a1:17:e3:
f0:7a:d4:fb:27:19:93:66:4a:e0:7c:d0:95:cd:35:
11:82:83:1d:dc:7b:1a:6f:97:61:5b:31:74:00:b5:
07:eb:f9:0d:51:e1:45:7a:16:ab:2d:d4:16:47:6f:
b6:fc:d6:83:95:38:d0:22:81:8f:5e:dd:dc:08:00:
55:98:d3:44:cb:8a:9b:bc:b9:1d:57:b2:a4:5c:4e:
a6:2d:47:d3:0c:ee:75:e1:64:ff:15:a2:6c:27:8f:
86:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:59:F1:4D:16:79:C2:48:B0:0E:30:08:48:F7:E3:68:38:28:62:69
X509v3 Authority Key Identifier:
keyid:05:63:CB:26:3D:F5:0D:2D:4D:07:3C:0F:7D:B6:CD:27:76:30:2C:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/7lnxTRZ5wkiwDjAISPfjaDgoYmk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.44.236.0/23
79.110.237.0/24
185.142.54.0/23
193.177.0.0/24
193.177.162.0/24
193.178.0.0/24
IPv6:
2a09:ca00::/29
2a0f:9240::/32
Signature Algorithm: sha256WithRSAEncryption
78:cb:62:c4:d5:5d:15:9a:4b:30:84:4c:4e:41:88:80:f7:ac:
cc:85:db:1e:83:99:ec:cf:4e:e2:5f:3f:fb:fc:a6:0f:cc:a1:
aa:48:04:c7:56:4a:2c:39:df:b7:67:23:08:ba:fb:f1:9d:80:
78:c3:e8:e1:5c:b4:86:94:4a:b2:d0:c1:58:31:aa:22:8a:88:
f8:e3:7f:83:90:80:65:e0:1d:53:aa:5e:79:09:5a:12:3e:14:
aa:15:f3:4d:0b:0e:f2:30:43:ef:82:3f:bb:42:3f:d3:70:3f:
56:6e:c7:33:f2:ec:16:59:70:f6:76:c5:96:13:81:13:df:a0:
66:c1:6d:7b:dd:57:00:37:89:0d:59:a9:00:ca:0c:43:08:37:
66:69:2e:a2:3c:4b:cd:ad:fa:0c:3b:64:74:07:12:fc:65:1e:
95:e1:d0:6e:c4:4c:0a:47:bb:15:59:b7:97:39:2a:71:86:7c:
87:69:5a:81:f4:35:7a:bf:d1:ab:fe:68:c3:fb:c3:71:a0:68:
7a:50:fd:3f:92:5f:bd:69:6b:40:de:f0:57:65:39:2c:8d:40:
70:a2:40:68:cc:ec:9e:7e:cb:75:31:5a:7d:fc:18:a8:00:1e:
e2:ce:94:6b:09:c6:9f:eb:51:91:65:9d:19:93:74:21:24:98:
d9:46:f6:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:37:25 2024 by rpki-client on console-fra.rpki-client.org