Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/fupJSvfAR-cTS7ZVePGlA0cOcLE.roa
File: fupJSvfAR-cTS7ZVePGlA0cOcLE.roa (raw, json)
Hash identifier: KDW/odAW7rAS40Osf9vO0xRZgw9Pz0/nPMqPpSPmyPE=
Subject key identifier: 7E:EA:49:4A:F7:C0:47:E7:13:4B:B6:55:78:F1:A5:03:47:0E:70:B1
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01934A3FB8ECF1C7CF6FEA6443C9DB5928BC
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/fupJSvfAR-cTS7ZVePGlA0cOcLE.roa
Signing time: Wed 20 Nov 2024 15:45:10 +0000
ROA not before: Wed 20 Nov 2024 15:45:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 31.13.246.0/24 maxlen: 24
45.14.164.0/24 maxlen: 24
45.66.228.0/24 maxlen: 24
45.88.64.0/24 maxlen: 24
45.90.88.0/24 maxlen: 24
45.139.106.0/24 maxlen: 24
45.141.158.0/24 maxlen: 24
45.151.89.0/24 maxlen: 24
45.151.90.0/24 maxlen: 24
45.151.91.0/24 maxlen: 24
83.219.97.0/24 maxlen: 24
84.54.48.0/24 maxlen: 24
87.120.87.0/24 maxlen: 24
87.120.166.0/24 maxlen: 24
87.121.45.0/24 maxlen: 24
87.121.87.0/24 maxlen: 24
87.121.124.0/23 maxlen: 24
87.121.162.0/24 maxlen: 24
87.121.165.0/24 maxlen: 24
91.92.240.0/20 maxlen: 32
92.119.196.0/23 maxlen: 24
93.123.84.0/24 maxlen: 24
94.154.160.0/23 maxlen: 24
94.154.161.0/24 maxlen: 24
94.154.162.0/23 maxlen: 24
94.156.11.0/24 maxlen: 24
94.156.64.0/21 maxlen: 32
141.98.1.0/24 maxlen: 24
147.78.100.0/24 maxlen: 24
171.22.72.0/22 maxlen: 24
185.216.84.0/22 maxlen: 24
185.218.84.0/22 maxlen: 24
185.226.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 15:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:4a:3f:b8:ec:f1:c7:cf:6f:ea:64:43:c9:db:59:28:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Nov 20 15:45:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7eea494af7c047e7134bb65578f1a503470e70b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:d2:1c:67:6d:36:87:73:f1:27:bd:9a:5c:2e:
7d:07:70:a1:17:5b:e4:a4:98:ad:25:9b:73:8f:be:
18:39:60:92:e5:e9:fc:7c:84:c7:66:5b:ea:48:dd:
74:cb:c3:17:69:4f:f4:c7:25:e1:66:47:44:c2:71:
b3:84:23:68:e9:6b:a1:8a:87:d3:4e:d8:1f:a6:bc:
b2:c2:d7:c8:f8:e7:35:74:d2:b9:69:a5:26:6f:8f:
05:a4:e1:1d:bb:7c:ba:3c:20:fa:59:88:5d:cc:7d:
91:b8:8d:f1:d3:6a:7d:15:7e:06:5d:cd:71:fd:c7:
e6:07:35:a1:f0:37:b6:7c:18:b6:a0:59:4b:98:e1:
3f:cf:a3:c8:7a:2e:99:eb:e3:fb:bb:c8:c6:14:32:
06:ee:6f:79:bc:80:3d:68:6e:53:3f:96:8e:db:ab:
49:09:c2:9e:6f:26:c1:82:1e:6d:06:c0:96:9c:39:
45:a9:70:8b:b7:f5:14:ee:66:c9:2f:13:87:ac:a4:
68:50:0c:c9:19:65:c4:1b:de:d1:ea:38:56:aa:2a:
a3:5a:e3:c7:99:9d:fc:49:40:02:23:5c:cd:c5:e2:
f3:f6:7a:4f:05:6d:18:73:bd:4d:db:30:e6:4b:a8:
a1:1c:d6:4e:6f:c0:2c:de:14:2e:65:27:28:98:d9:
79:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:EA:49:4A:F7:C0:47:E7:13:4B:B6:55:78:F1:A5:03:47:0E:70:B1
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/fupJSvfAR-cTS7ZVePGlA0cOcLE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.13.246.0/24
45.14.164.0/24
45.66.228.0/24
45.88.64.0/24
45.90.88.0/24
45.139.106.0/24
45.141.158.0/24
45.151.89.0-45.151.91.255
83.219.97.0/24
84.54.48.0/24
87.120.87.0/24
87.120.166.0/24
87.121.45.0/24
87.121.87.0/24
87.121.124.0/23
87.121.162.0/24
87.121.165.0/24
91.92.240.0/20
92.119.196.0/23
93.123.84.0/24
94.154.160.0/22
94.156.11.0/24
94.156.64.0/21
141.98.1.0/24
147.78.100.0/24
171.22.72.0/22
185.216.84.0/22
185.218.84.0/22
185.226.174.0/24
Signature Algorithm: sha256WithRSAEncryption
65:93:78:9b:30:2b:5e:34:78:70:51:2b:f3:5a:29:62:e5:c2:
8d:74:ea:03:45:1d:3c:f9:fe:bc:7d:9e:4e:09:8f:dc:c4:4d:
aa:6f:b4:16:66:2f:62:e4:d0:bd:31:45:10:20:36:49:6e:ff:
95:42:98:c1:6d:79:ff:c0:8c:62:c8:ef:a9:90:5c:e0:66:0d:
45:76:c6:1a:69:de:c5:75:e9:bc:a7:c3:eb:9a:56:d9:3f:45:
d1:94:f0:0c:0f:52:3a:f4:96:96:f5:94:0b:e9:81:fa:a6:f9:
eb:c5:d0:f5:70:bc:1a:5c:9e:2d:e9:aa:70:72:7e:a9:56:15:
53:98:83:be:f1:ea:8a:77:f2:31:6b:90:08:fe:1e:ed:06:bf:
6f:30:a7:2b:61:37:fa:b7:9f:c5:5b:cd:c0:0b:9a:cc:04:2e:
91:df:7d:4c:ad:87:40:d2:a9:74:5f:38:05:04:5f:96:8d:61:
ec:6c:5e:9c:4f:bb:05:9c:7d:0c:4f:25:d5:d9:b9:dc:a6:ec:
74:53:e0:bb:de:86:9c:54:99:9c:1b:2a:fe:07:1a:b4:00:e7:
a9:bf:4e:33:87:f9:ab:dc:c0:72:b2:f8:9a:4d:e4:03:62:45:
29:0c:58:63:b0:be:77:92:b8:ed:b8:cb:84:c8:41:8c:a7:6f:
33:e9:1b:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:25:53 2024 by rpki-client on console-fra.rpki-client.org