Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/fi3Osr6VYpUwwMFxDAJm2HmZapc.roa
File: fi3Osr6VYpUwwMFxDAJm2HmZapc.roa (raw, json)
Hash identifier: XjcmhI0X3o8Ux0HDPELKl2h7jQGJaIUcPqA+PmtYmXs=
Subject key identifier: 7E:2D:CE:B2:BE:95:62:95:30:C0:C1:71:0C:02:66:D8:79:99:6A:97
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018CC8DCDCD573497FA5405689FCD164F173
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/fi3Osr6VYpUwwMFxDAJm2HmZapc.roa
Signing time: Tue 02 Jan 2024 06:29:26 +0000
ROA not before: Tue 02 Jan 2024 06:29:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34577
IP address blocks: 93.123.40.0/21 maxlen: 21
87.120.178.0/23 maxlen: 23
87.120.180.0/22 maxlen: 22
87.120.184.0/22 maxlen: 22
93.123.67.0/24 maxlen: 24
212.73.149.0/24 maxlen: 24
93.123.66.0/24 maxlen: 24
87.120.190.0/23 maxlen: 23
87.121.88.0/23 maxlen: 23
87.120.45.119/32 maxlen: 32
94.156.123.0/24 maxlen: 24
37.60.141.0/24 maxlen: 24
87.121.48.0/22 maxlen: 22
87.120.0.0/22 maxlen: 22
93.123.96.0/22 maxlen: 22
87.120.12.0/24 maxlen: 24
87.120.14.0/23 maxlen: 23
87.120.44.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 29 Apr 2024 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:dc:dc:d5:73:49:7f:a5:40:56:89:fc:d1:64:f1:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 06:29:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7e2dceb2be95629530c0c1710c0266d879996a97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:49:9b:33:ee:6c:0d:c7:8a:b3:9a:a5:89:cc:
ca:b8:a3:9e:7f:b9:f2:16:92:f5:b0:97:16:88:85:
35:eb:3b:a3:6a:0b:08:65:a8:9b:ed:c7:60:f7:35:
cd:88:ab:f0:1a:29:55:36:4e:1b:52:05:b4:f0:b1:
1d:56:fc:7f:62:19:a1:37:ca:2b:e0:a5:dc:38:41:
fb:2c:a8:cb:2f:8b:85:48:76:bf:40:5b:4a:1d:09:
ea:7c:fd:e3:0d:8c:0c:d1:46:4f:eb:9f:04:c5:8b:
4a:5e:7d:35:6a:c7:d4:7b:02:0a:d8:3b:d1:0d:f7:
f0:71:8a:a6:c3:9c:59:33:65:52:39:5b:a6:84:b9:
2b:2b:af:44:c9:74:cb:36:82:9e:67:d2:9c:c4:48:
36:75:c2:2f:4a:ee:46:db:c2:8a:00:fd:44:c6:73:
2d:b4:44:13:bb:84:2e:25:cf:b0:e7:80:2d:7b:86:
5f:30:64:e7:77:3c:6e:02:d9:9f:62:5d:ec:38:9e:
55:61:0f:c7:53:c1:c0:91:2a:31:a6:2c:91:8e:b5:
9f:7a:24:a0:a9:b0:8d:71:98:d2:a2:fa:ea:5c:f7:
ee:c7:27:f1:f2:85:7c:b2:75:47:07:34:56:1a:60:
30:e8:1f:9c:f5:6e:54:c6:cf:9c:7f:dd:66:c3:7a:
0f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:2D:CE:B2:BE:95:62:95:30:C0:C1:71:0C:02:66:D8:79:99:6A:97
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/fi3Osr6VYpUwwMFxDAJm2HmZapc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.60.141.0/24
87.120.0.0/22
87.120.12.0/24
87.120.14.0/23
87.120.44.0/23
87.120.178.0-87.120.187.255
87.120.190.0/23
87.121.48.0/22
87.121.88.0/23
93.123.40.0/21
93.123.66.0/23
93.123.96.0/22
94.156.123.0/24
212.73.149.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:8b:b6:90:94:a1:26:e5:d6:6d:14:74:68:92:17:9e:00:27:
6f:c0:f5:e0:64:ef:de:82:12:14:6b:96:c3:e3:d9:b2:07:ee:
43:21:2d:5e:54:6b:49:3e:b6:55:10:bb:e0:df:d3:c8:88:d4:
73:5a:f9:2a:91:ba:26:28:55:06:0f:61:a4:68:1f:f3:c1:c2:
d0:47:a3:7b:dd:72:46:53:76:d5:d5:b5:05:de:63:88:a3:6d:
05:6e:26:8b:67:e8:8f:0a:6f:32:fd:d9:7e:00:e5:aa:09:93:
95:bf:c9:15:1c:5a:69:ee:ab:df:94:40:e9:b9:9c:aa:76:96:
be:dd:f3:46:f6:a8:e4:83:d3:c5:51:14:91:c7:8a:d9:4c:7e:
4f:d8:ec:be:54:4d:0b:f8:d9:95:ba:28:46:eb:42:4e:96:61:
3b:a9:67:dc:37:c5:28:d3:70:54:22:b6:c3:9a:6f:e3:b7:13:
75:46:1f:dd:36:b1:37:ab:e6:90:0e:24:67:e1:ef:e8:2b:84:
6b:e4:92:bb:85:02:c9:69:53:2a:a4:3c:84:ae:b7:83:b8:31:
30:68:2d:84:64:12:f2:f4:8c:d8:fc:9e:dd:20:da:b0:10:00:
67:07:0f:1c:49:62:65:61:a2:33:71:b2:7d:5f:d5:3f:94:77:
4b:d3:ca:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 16:19:04 2024 by rpki-client on console-fra.rpki-client.org