Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1-RgeCGB4Khfe5-fbzmuL1A28qSY.roa
File: 1-RgeCGB4Khfe5-fbzmuL1A28qSY.roa (raw, json)
Hash identifier: x3F+5GyMNNy5JHo8QUZefsKBHMi5UKJvTXq87KULUAA=
Subject key identifier: F9:18:1E:08:60:78:2A:17:DE:E7:E7:DB:CE:6B:8B:D4:0D:BC:A9:26
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018E1F50C3825EA25D2552EAA7F00A250ADE
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1-RgeCGB4Khfe5-fbzmuL1A28qSY.roa
Signing time: Fri 08 Mar 2024 18:26:10 +0000
ROA not before: Fri 08 Mar 2024 18:26:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204843
IP address blocks: 37.221.120.0/22 maxlen: 24
45.81.241.0/24 maxlen: 24
45.144.152.0/24 maxlen: 24
45.144.153.0/24 maxlen: 24
45.144.154.0/24 maxlen: 24
45.151.88.0/24 maxlen: 24
94.156.11.0/24 maxlen: 24
141.98.1.0/24 maxlen: 24
193.149.2.0/24 maxlen: 24
193.149.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 20:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:1f:50:c3:82:5e:a2:5d:25:52:ea:a7:f0:0a:25:0a:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Mar 8 18:26:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f9181e0860782a17dee7e7dbce6b8bd40dbca926
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:be:9a:ad:b7:be:b8:0c:7b:40:2c:2d:6a:1b:
46:b0:a8:03:8c:be:45:02:63:b6:fa:a1:03:58:46:
ed:1c:57:47:40:26:34:5e:2b:47:78:fa:e5:26:3c:
8d:5c:84:74:10:6f:67:12:6a:9d:40:4f:cc:9d:f2:
a6:ed:51:28:06:2c:9d:cf:19:6a:5f:10:54:1d:0e:
59:10:a2:b6:d6:88:eb:35:cc:92:a3:8d:6c:62:3c:
94:c4:8b:3b:a9:74:98:6c:1e:48:51:49:b7:eb:f2:
b9:0c:8e:ff:c5:34:48:63:99:f4:ca:cc:76:db:82:
17:6d:74:2b:2c:c1:c3:0d:60:bf:e0:fe:1d:13:0e:
40:63:37:38:d4:84:02:e9:b4:9d:25:8d:52:3f:14:
49:26:ca:6e:7c:51:f8:80:5f:84:e6:a0:ad:f3:f3:
39:09:fc:0d:59:6c:de:89:77:70:c4:57:75:e3:7d:
da:99:5c:d1:95:16:df:b1:2f:4a:23:b5:cb:bb:94:
65:72:8d:73:28:64:35:50:15:bf:a2:fe:bb:ec:d7:
fa:ee:7e:0d:1b:c9:e5:7e:15:5f:81:52:1d:0b:50:
61:a1:61:89:b1:46:71:2a:7b:57:7e:80:da:26:fd:
81:a1:43:b4:eb:c2:26:90:9f:0a:db:f6:c7:f2:d6:
fb:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:18:1E:08:60:78:2A:17:DE:E7:E7:DB:CE:6B:8B:D4:0D:BC:A9:26
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1-RgeCGB4Khfe5-fbzmuL1A28qSY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.221.120.0/22
45.81.241.0/24
45.144.152.0-45.144.154.255
45.151.88.0/24
94.156.11.0/24
141.98.1.0/24
193.149.2.0/23
Signature Algorithm: sha256WithRSAEncryption
b0:48:b7:c7:df:89:41:d2:b5:fe:0c:e3:52:74:80:ec:cf:22:
67:d2:b6:e1:b4:55:02:51:17:20:c1:a9:e7:9b:10:6f:c9:4a:
a5:46:56:8a:4b:16:fb:1d:1f:74:8c:bd:e3:77:66:f9:a1:8b:
a8:c7:d2:6a:b9:cf:fe:e5:15:5a:cb:09:9a:a0:54:ee:52:53:
f4:44:ce:7f:99:20:b9:1b:bb:ec:e1:14:28:2f:07:a1:01:9a:
92:af:5d:57:3a:a1:82:6b:e0:2c:92:f7:2b:79:77:6c:70:70:
11:03:95:3a:6b:bb:cf:07:1e:6d:62:c9:1f:90:5f:03:f1:90:
f1:37:4a:6d:71:f9:70:bd:e5:4b:5b:ec:6c:d6:2b:01:ec:16:
ca:56:56:08:1a:db:1c:e0:be:6e:cc:3f:22:58:7b:a2:37:05:
0b:29:7c:8d:ae:9a:76:af:ab:a5:1b:53:57:05:26:8d:5c:b2:
fc:ae:4c:8c:91:27:e3:e9:73:a6:74:e9:10:2b:6d:44:06:af:
89:18:4c:88:7f:18:da:c9:21:87:55:67:6b:16:71:9b:ed:ab:
b6:d4:74:78:36:a5:37:fc:18:ff:92:f1:da:84:b3:e9:c6:05:
47:bd:4d:10:6d:10:a6:e0:d2:2f:84:9b:6c:e9:1a:c5:c1:58:
98:b0:03:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 01:06:34 2024 by rpki-client on console-ams.rpki-client.org