Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/78WmjMLJ594O0JGbEHI9D-u7pgo.roa
File: 78WmjMLJ594O0JGbEHI9D-u7pgo.roa (raw, json)
Hash identifier: kM2tc+4dWMlFCqBLDxrVsTpee+YX1uiFo5MIX0ZDjm4=
Subject key identifier: EF:C5:A6:8C:C2:C9:E7:DE:0E:D0:91:9B:10:72:3D:0F:EB:BB:A6:0A
Certificate issuer: /CN=71bddeaf0f30fbdaf9e75b92ac7d5bd13f285de7
Certificate serial: 018E610731101E2EF45C0CCA09012D1F7F39
Authority key identifier: 71:BD:DE:AF:0F:30:FB:DA:F9:E7:5B:92:AC:7D:5B:D1:3F:28:5D:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cb3erw8w-9r551uSrH1b0T8oXec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/78WmjMLJ594O0JGbEHI9D-u7pgo.roa
Signing time: Thu 21 Mar 2024 12:40:44 +0000
ROA not before: Thu 21 Mar 2024 12:40:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200313
IP address blocks: 45.142.2.0/24 maxlen: 24
185.212.128.0/23 maxlen: 23
185.212.130.0/24 maxlen: 24
185.212.131.0/24 maxlen: 24
185.224.218.0/24 maxlen: 24
185.232.52.0/24 maxlen: 24
195.43.147.0/24 maxlen: 24
2a0d:1640::/32 maxlen: 32
2a0d:1643::/32 maxlen: 32
2a0d:63c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.mft
rsync://rpki.ripe.net/repository/DEFAULT/cb3erw8w-9r551uSrH1b0T8oXec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:61:07:31:10:1e:2e:f4:5c:0c:ca:09:01:2d:1f:7f:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71bddeaf0f30fbdaf9e75b92ac7d5bd13f285de7
Validity
Not Before: Mar 21 12:40:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=efc5a68cc2c9e7de0ed0919b10723d0febbba60a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:bc:ac:a1:f1:d8:99:6c:d0:2e:0d:79:84:6e:
75:c8:5d:d8:cb:fd:69:0a:a0:89:e0:77:b0:e8:a2:
f8:fa:bd:a3:27:6c:40:9b:e9:34:e0:bc:df:97:d0:
3c:1a:91:ce:cf:cd:c1:00:8a:f3:0d:75:d2:42:2c:
a5:31:fa:3d:5f:6d:95:2e:bf:cc:fd:8b:11:a0:65:
57:2e:da:d8:60:ec:bd:4b:3c:2d:ba:19:b6:45:02:
1e:1d:6a:07:3e:43:7f:f0:3c:a2:52:d4:f8:eb:b3:
28:f1:3a:ae:47:47:9b:48:56:be:ee:ea:93:b1:77:
51:5b:1d:54:d3:a2:58:0c:99:3b:0e:b4:d3:26:ce:
19:56:2c:ad:b1:7d:f2:7a:44:e7:4b:6a:c7:74:5c:
54:27:c5:82:3c:7b:47:3e:e1:60:a1:b0:49:13:db:
ff:88:3e:40:21:12:0f:37:05:5d:48:c6:fe:94:17:
36:74:d5:cd:88:d0:b4:4f:0a:87:54:75:5c:e9:23:
49:c6:77:7a:59:83:c9:d7:d8:69:41:4c:36:1d:27:
8a:89:8c:0c:6f:e1:29:b5:76:71:48:da:c1:4b:37:
b8:e7:b7:ee:64:84:cf:ba:a3:49:ce:0c:23:54:87:
4c:d9:43:e9:bd:aa:12:ec:bd:2a:50:a9:30:24:1c:
3c:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:C5:A6:8C:C2:C9:E7:DE:0E:D0:91:9B:10:72:3D:0F:EB:BB:A6:0A
X509v3 Authority Key Identifier:
keyid:71:BD:DE:AF:0F:30:FB:DA:F9:E7:5B:92:AC:7D:5B:D1:3F:28:5D:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb3erw8w-9r551uSrH1b0T8oXec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/78WmjMLJ594O0JGbEHI9D-u7pgo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.2.0/24
185.212.128.0/22
185.224.218.0/24
185.232.52.0/24
195.43.147.0/24
IPv6:
2a0d:1640::/32
2a0d:1643::/32
2a0d:63c0::/32
Signature Algorithm: sha256WithRSAEncryption
1a:2f:5e:01:a4:e0:8b:1d:63:4f:e4:df:4d:e8:b8:85:89:2b:
e7:e6:8f:eb:66:3d:35:90:6b:b9:e2:3f:78:e9:64:8d:01:3a:
b3:db:28:fa:2b:e7:bd:02:8f:3b:b6:3d:f1:76:1c:5a:f4:54:
ef:09:b8:17:8a:43:cc:72:81:08:ea:e8:8d:12:21:da:86:12:
11:a1:69:ce:d2:d3:7e:f7:2b:5b:25:91:51:36:2d:bf:6f:c8:
2e:4f:72:a9:45:24:82:a5:d3:15:42:90:00:1b:0d:25:ce:ef:
33:b1:0f:ca:1a:b2:48:ff:12:5a:c6:86:85:e0:51:98:bb:3e:
c1:d9:87:dc:c4:8e:7c:80:ed:85:55:0d:4c:8f:90:63:1a:4e:
ad:84:a3:f0:34:8a:52:9f:5d:fb:97:cc:a9:ff:bb:92:8c:f8:
03:7d:89:b6:ec:9f:fb:f9:35:dd:1a:53:57:cb:2d:d0:9b:9e:
fe:7c:99:f2:da:dd:ac:92:b6:44:c3:d9:c5:70:48:0a:de:a1:
e2:72:ca:11:c8:f7:fc:8a:f6:cc:d4:5e:75:1c:7b:54:20:dc:
4f:70:b5:f1:b5:d7:20:71:39:35:c3:be:50:12:4e:e2:2b:08:
08:17:d3:9d:ab:73:ce:41:0b:e5:fe:86:db:88:c6:ac:ca:eb:
5c:7a:0e:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:34:03 2024 by rpki-client on console-ams.rpki-client.org