Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/490e12-1a45-4b00-a46c-af1e6d077e0c/1/IhOemoKcFNJ1GK0NEcuwkepzG5Y.roa
File: IhOemoKcFNJ1GK0NEcuwkepzG5Y.roa (raw, json)
Hash identifier: GdSh2CrscINFiegDkLUczgo4ptMfp9B9t0+PLqn0z9s=
Subject key identifier: 22:13:9E:9A:82:9C:14:D2:75:18:AD:0D:11:CB:B0:91:EA:73:1B:96
Certificate issuer: /CN=b62dd60548b67cc41e67b6a616a12ec53bf42978
Certificate serial: 018CC56E813277C4B4F56DB3978630123C3B
Authority key identifier: B6:2D:D6:05:48:B6:7C:C4:1E:67:B6:A6:16:A1:2E:C5:3B:F4:29:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ti3WBUi2fMQeZ7amFqEuxTv0KXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/490e12-1a45-4b00-a46c-af1e6d077e0c/1/IhOemoKcFNJ1GK0NEcuwkepzG5Y.roa
Signing time: Mon 01 Jan 2024 14:30:02 +0000
ROA not before: Mon 01 Jan 2024 14:30:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201401
IP address blocks: 45.157.76.0/22 maxlen: 22
31.14.32.0/24 maxlen: 24
31.14.44.0/24 maxlen: 24
31.14.48.0/24 maxlen: 24
185.76.168.0/22 maxlen: 22
89.31.56.0/21 maxlen: 21
185.76.88.0/22 maxlen: 22
31.14.11.0/24 maxlen: 24
2a05:52a0::/30 maxlen: 30
2a10:c240::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/490e12-1a45-4b00-a46c-af1e6d077e0c/1/ti3WBUi2fMQeZ7amFqEuxTv0KXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/490e12-1a45-4b00-a46c-af1e6d077e0c/1/ti3WBUi2fMQeZ7amFqEuxTv0KXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ti3WBUi2fMQeZ7amFqEuxTv0KXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 14:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:81:32:77:c4:b4:f5:6d:b3:97:86:30:12:3c:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b62dd60548b67cc41e67b6a616a12ec53bf42978
Validity
Not Before: Jan 1 14:30:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=22139e9a829c14d27518ad0d11cbb091ea731b96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:8c:6d:64:23:95:e0:fb:4b:09:96:38:e8:c6:
37:c3:40:26:6b:e3:7a:b5:e8:b6:f7:9c:e5:d0:bc:
a5:6f:19:1f:0b:10:7c:bc:36:aa:85:39:7d:7b:a7:
46:c8:49:4a:e3:ab:2f:9f:20:0a:b5:00:a9:28:18:
97:63:a3:70:6b:2a:38:8a:64:37:19:04:62:c9:8e:
8e:16:1b:8b:4c:ac:46:5e:c0:1c:9e:ea:fa:65:64:
e3:68:5c:be:78:1c:f8:b3:3c:6d:78:e2:5b:a1:42:
a6:d6:ab:6a:08:49:49:e2:78:5c:ab:8f:c6:4c:fd:
fc:3d:84:d8:68:c1:aa:30:ce:4a:d9:6e:c2:34:02:
51:4b:51:35:1f:be:d7:73:63:8a:29:36:a9:8b:5e:
63:dd:11:8c:45:ff:98:7a:1f:06:5c:0b:cc:62:17:
f4:16:51:01:5c:3b:e4:41:ae:78:95:f8:a1:1c:1d:
ce:99:14:7a:f5:62:b2:d5:2e:47:5e:b3:cd:1b:f1:
ba:86:6b:72:a8:17:e2:d3:35:09:5a:7c:d3:5f:f5:
d4:a8:da:3d:4a:0b:81:d8:4f:e2:96:56:8e:d9:91:
e3:59:bd:ee:9f:9c:80:b4:f7:d4:4d:7b:60:8d:2f:
a0:b7:c2:f4:09:e7:ea:2f:c9:e9:41:a0:fa:62:55:
ec:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:13:9E:9A:82:9C:14:D2:75:18:AD:0D:11:CB:B0:91:EA:73:1B:96
X509v3 Authority Key Identifier:
keyid:B6:2D:D6:05:48:B6:7C:C4:1E:67:B6:A6:16:A1:2E:C5:3B:F4:29:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ti3WBUi2fMQeZ7amFqEuxTv0KXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/490e12-1a45-4b00-a46c-af1e6d077e0c/1/IhOemoKcFNJ1GK0NEcuwkepzG5Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/490e12-1a45-4b00-a46c-af1e6d077e0c/1/ti3WBUi2fMQeZ7amFqEuxTv0KXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.11.0/24
31.14.32.0/24
31.14.44.0/24
31.14.48.0/24
45.157.76.0/22
89.31.56.0/21
185.76.88.0/22
185.76.168.0/22
IPv6:
2a05:52a0::/30
2a10:c240::/32
Signature Algorithm: sha256WithRSAEncryption
3e:71:ca:50:45:c3:e1:6a:5c:9f:01:b5:c5:25:b9:ff:b4:ca:
6a:4a:08:01:aa:c9:6d:0a:81:04:3e:ce:9d:d9:65:3f:36:ed:
21:01:55:14:1b:5b:ee:87:86:b4:ba:0f:9a:d8:ec:e8:be:92:
dc:9c:07:4d:77:d9:78:e3:04:b8:64:af:14:3e:5e:44:96:db:
fb:18:98:32:d0:7f:e4:d7:c5:cd:f4:2b:90:70:99:db:e4:37:
b8:ce:62:eb:b5:57:8b:b5:f9:73:02:0b:b3:78:28:fd:aa:b7:
d2:df:61:b4:50:ae:82:d2:17:1e:05:d4:cb:a3:c8:37:2c:af:
bf:76:46:71:46:48:3e:e6:ee:6a:e0:4c:a6:59:e1:ec:3d:c1:
32:aa:f6:28:5e:a0:ec:fd:4f:6e:74:c9:76:fe:37:cf:6c:ec:
61:c8:65:c9:85:67:b6:5f:a7:9e:5c:67:b8:09:d5:5e:c2:03:
4f:7e:ce:71:da:45:94:20:7d:a7:4e:6e:39:49:30:70:42:97:
d9:da:34:e0:6c:fb:b7:3f:74:01:57:ef:c5:70:2e:3d:89:be:
e8:46:42:a4:aa:de:ae:74:ae:91:a4:27:36:76:bb:d1:29:09:
4b:e7:3b:20:d3:3f:49:d2:96:c1:b0:9b:3c:f8:4d:8f:db:37:
cd:5e:d3:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 22:51:10 2024 by rpki-client on console-fra.rpki-client.org