Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/R4Wk7nGGohe7qxTn2tRtneaS918.roa
File: R4Wk7nGGohe7qxTn2tRtneaS918.roa (raw, json)
Hash identifier: SA17ev7Nk11i4IXVqDYvHune3rqnAlZEEzufZbaT+IE=
Subject key identifier: 47:85:A4:EE:71:86:A2:17:BB:AB:14:E7:DA:D4:6D:9D:E6:92:F7:5F
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018CC8DD00FEB09CDFC9C047FA7D8CD4664E
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/R4Wk7nGGohe7qxTn2tRtneaS918.roa
Signing time: Tue 02 Jan 2024 06:29:35 +0000
ROA not before: Tue 02 Jan 2024 06:29:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201749
IP address blocks: 194.55.226.0/24 maxlen: 24
87.120.87.0/24 maxlen: 24
80.76.50.0/24 maxlen: 24
83.171.204.0/24 maxlen: 24
83.171.205.0/24 maxlen: 24
83.171.206.0/24 maxlen: 24
45.139.105.0/24 maxlen: 24
83.171.207.0/24 maxlen: 24
194.49.87.0/24 maxlen: 24
176.125.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 11:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:dd:00:fe:b0:9c:df:c9:c0:47:fa:7d:8c:d4:66:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 06:29:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4785a4ee7186a217bbab14e7dad46d9de692f75f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:50:25:41:9e:ce:97:d1:00:d9:43:cc:1b:3b:
22:1a:37:8c:74:cb:18:22:27:8b:04:5f:73:b1:15:
2c:c8:2a:a7:71:ce:8c:56:ae:d1:29:96:af:e4:07:
b0:58:a2:a7:ee:9d:47:23:da:b9:7e:68:90:d1:02:
bd:51:ba:24:36:79:fb:e0:40:e1:07:3d:14:09:cc:
b0:38:2d:8f:a2:47:08:c9:c8:1e:f2:d7:89:6a:49:
8e:6a:33:10:03:3e:ab:83:f8:4b:14:aa:2d:40:31:
f2:02:c9:3d:d9:e2:22:c4:65:ab:b4:fa:76:30:a9:
92:54:64:32:a9:6f:ad:25:c8:bf:86:29:9a:29:63:
85:b7:3d:ec:d8:97:e7:99:4a:16:81:65:02:21:85:
ef:c8:f4:11:1d:30:79:ad:48:e1:c3:2d:57:59:b8:
61:b3:e5:d0:21:5c:8b:05:92:ba:86:23:2f:61:f9:
20:f7:81:b9:48:26:a3:ad:7b:1b:c0:6f:e3:a0:fa:
9a:37:cf:86:ca:75:17:d6:12:d5:28:44:cf:29:81:
1a:0f:9e:bf:d5:b4:f6:63:62:6b:3a:49:07:be:4c:
46:1d:28:f4:22:a5:27:12:ae:80:e7:36:49:90:2c:
d1:d5:65:0a:14:e5:0f:da:4c:b1:d4:ce:8f:11:56:
6c:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:85:A4:EE:71:86:A2:17:BB:AB:14:E7:DA:D4:6D:9D:E6:92:F7:5F
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/R4Wk7nGGohe7qxTn2tRtneaS918.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.105.0/24
80.76.50.0/24
83.171.204.0/22
87.120.87.0/24
176.125.255.0/24
194.49.87.0/24
194.55.226.0/24
Signature Algorithm: sha256WithRSAEncryption
18:7e:07:e8:2b:e6:0e:bf:e2:f0:ac:3c:4b:78:b8:d9:2e:c9:
3c:13:26:e2:3b:9d:93:ee:7c:c1:7a:ae:cc:10:98:6d:18:91:
47:82:0e:d0:da:b2:73:77:0d:60:30:b2:07:69:3a:4d:04:0a:
80:ed:5d:ab:3f:5b:41:08:1f:61:81:47:fb:2b:bb:71:8b:80:
f5:92:2d:bd:1e:d5:ca:cc:26:58:d6:d3:0f:ca:b8:88:bd:47:
86:74:13:02:b7:3b:a1:36:13:67:99:97:ad:ff:8d:fe:dc:6e:
5f:cb:53:35:22:85:3a:20:2f:32:fb:37:fc:f9:b1:f5:96:b8:
ac:47:78:05:0d:b5:ac:f1:79:ef:9e:8e:07:68:bf:eb:35:24:
70:c2:e9:e2:97:97:19:58:ff:ac:90:0a:7b:0e:f3:75:73:59:
89:bd:ae:3e:6f:64:07:30:4e:2b:12:d7:3f:06:85:b2:15:30:
a8:6d:18:b7:38:a5:e0:d0:f8:62:da:a0:f6:ac:8b:bc:2d:f8:
f2:cd:57:e3:3c:f2:da:2c:64:18:31:f7:40:fb:06:33:20:00:
75:9d:95:15:33:b9:9b:52:d1:48:80:cb:ed:4b:80:d5:2e:7b:
48:49:68:2b:d2:33:cb:fc:71:5c:53:e8:c2:cb:b0:b0:79:82:
d8:3f:21:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 17:58:06 2024 by rpki-client on console-ams.rpki-client.org