Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/3j7mTvqo_S_PKrfokQ12NrFFMsk.roa
File: 3j7mTvqo_S_PKrfokQ12NrFFMsk.roa (raw, json)
Hash identifier: ZAA+whfeVC1P+ikiB8I/T4a9/BMJsAJ/8Q7fGos1hrw=
Subject key identifier: DE:3E:E6:4E:FA:A8:FD:2F:CF:2A:B7:E8:91:0D:76:36:B1:45:32:C9
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0190C241DD7143AE74D820D9B0C89BD70F88
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/3j7mTvqo_S_PKrfokQ12NrFFMsk.roa
Signing time: Wed 17 Jul 2024 19:53:34 +0000
ROA not before: Wed 17 Jul 2024 19:53:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8100
IP address blocks: 5.253.56.0/23 maxlen: 24
5.253.58.0/23 maxlen: 24
45.139.123.0/24 maxlen: 24
91.92.67.0/24 maxlen: 24
93.123.76.0/22 maxlen: 24
94.154.173.0/24 maxlen: 24
94.156.152.0/24 maxlen: 24
94.156.154.0/23 maxlen: 24
94.156.178.0/24 maxlen: 24
94.156.180.0/23 maxlen: 24
94.156.237.0/24 maxlen: 24
185.252.177.0/24 maxlen: 24
193.25.219.0/24 maxlen: 24
193.47.62.0/24 maxlen: 24
193.58.121.0/24 maxlen: 24
193.58.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Sep 2024 14:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:c2:41:dd:71:43:ae:74:d8:20:d9:b0:c8:9b:d7:0f:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jul 17 19:53:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=de3ee64efaa8fd2fcf2ab7e8910d7636b14532c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:31:45:18:31:ab:36:1b:c0:a1:e0:0d:ee:7f:
a9:cf:69:8e:ef:55:77:ba:e3:19:f5:a1:42:af:67:
e4:72:6c:96:29:63:ac:7f:b2:75:84:ec:10:4e:b7:
7f:b6:ea:03:26:eb:80:57:16:e7:fd:7b:a4:49:96:
cf:66:f0:3b:33:92:09:a6:37:c5:07:c4:88:03:6b:
ea:f2:4a:e3:ae:56:11:e2:ba:17:b0:e4:83:4c:82:
28:a2:a6:4a:50:0a:be:18:1b:f6:a5:20:b5:66:98:
14:67:ed:cb:8a:6a:4d:65:fe:54:8d:c7:6b:5f:4d:
77:d3:aa:74:ca:43:4b:39:65:f2:9f:ec:f3:63:34:
fc:39:ac:f8:7f:df:c8:1c:3e:be:e9:38:5d:5c:3d:
7c:10:c3:df:ee:ee:a4:5b:ad:e8:33:f8:dc:0c:f7:
56:e5:cf:0f:70:10:92:00:98:4a:8e:55:17:d7:d8:
6c:18:f0:b5:ca:79:a9:03:a0:f4:8b:a5:6e:63:2d:
3c:dd:f0:ba:94:ee:60:73:3c:be:a8:74:13:99:03:
05:85:c9:b5:e2:ec:ea:d7:93:da:8f:4d:94:b5:c4:
d9:0d:4e:eb:3f:72:56:6e:8d:b5:18:13:9c:59:a1:
40:3a:20:e0:ba:42:04:eb:95:54:9d:8d:c3:b5:00:
85:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:3E:E6:4E:FA:A8:FD:2F:CF:2A:B7:E8:91:0D:76:36:B1:45:32:C9
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/3j7mTvqo_S_PKrfokQ12NrFFMsk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.56.0/22
45.139.123.0/24
91.92.67.0/24
93.123.76.0/22
94.154.173.0/24
94.156.152.0/24
94.156.154.0/23
94.156.178.0/24
94.156.180.0/23
94.156.237.0/24
185.252.177.0/24
193.25.219.0/24
193.47.62.0/24
193.58.121.0/24
193.58.123.0/24
Signature Algorithm: sha256WithRSAEncryption
29:a6:04:e9:de:53:a4:37:95:d2:7e:48:ba:dc:3b:9f:9b:9c:
4c:cf:16:ff:8c:2f:99:cd:d1:85:78:f2:39:87:95:34:5c:c5:
31:a4:11:96:e8:7e:40:fa:cc:15:f5:ca:b8:b7:38:c3:62:db:
8b:c9:b9:9b:1b:ff:67:ac:70:63:f4:0c:0c:4e:80:42:8d:d8:
54:d2:ec:3c:18:b7:a5:0a:a4:bb:58:67:ff:4f:6f:9f:9a:5f:
e1:95:31:c3:fd:da:8f:2e:15:47:ec:8c:9a:2b:c5:dd:75:b9:
c4:8b:10:31:93:11:0e:9e:c0:e8:92:96:0f:ed:b3:a6:e6:d7:
cc:a7:7e:20:70:a8:23:8a:2a:0a:dd:43:61:52:3f:79:fa:8d:
85:34:47:f7:52:73:13:cb:06:87:5b:21:34:ff:69:72:7a:b4:
05:cb:1b:7f:56:d7:52:ef:ff:a2:bb:56:c2:74:e9:cf:59:91:
82:39:60:21:c5:b0:0c:51:e8:c4:16:9c:a7:2e:c7:35:f9:f7:
28:6c:8b:47:e1:a4:66:10:37:41:4c:bd:2a:8c:7b:c6:c7:66:
dd:75:28:fc:24:39:34:dc:93:2f:22:50:35:44:fe:dc:a9:07:
d9:e5:8c:9e:05:04:d5:79:b0:c8:75:6c:05:9f:51:76:6f:94:
a7:41:69:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 23:19:08 2024 by rpki-client on console-fra.rpki-client.org