Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/Y7VpyD9x7TfN3qn73OQos49neig.roa
File: Y7VpyD9x7TfN3qn73OQos49neig.roa (raw, json)
Hash identifier: 7Kk0+JLAKU232rkt7LeSf49k+vZXOm9S8Qz5jEG4FlA=
Subject key identifier: 63:B5:69:C8:3F:71:ED:37:CD:DE:A9:FB:DC:E4:28:B3:8F:67:7A:28
Certificate issuer: /CN=36b413e536d99353f0b050ee746ffdd24edb5930
Certificate serial: 018CC7954E3EB552F53B077545CC0E01D8EE
Authority key identifier: 36:B4:13:E5:36:D9:93:53:F0:B0:50:EE:74:6F:FD:D2:4E:DB:59:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NrQT5TbZk1PwsFDudG_90k7bWTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/Y7VpyD9x7TfN3qn73OQos49neig.roa
Signing time: Tue 02 Jan 2024 00:31:40 +0000
ROA not before: Tue 02 Jan 2024 00:31:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47901
IP address blocks: 94.125.226.0/24 maxlen: 24
94.125.225.0/24 maxlen: 24
94.125.224.0/24 maxlen: 24
94.125.231.0/24 maxlen: 24
94.125.230.0/24 maxlen: 24
94.125.229.0/24 maxlen: 24
94.125.228.0/24 maxlen: 24
94.125.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/NrQT5TbZk1PwsFDudG_90k7bWTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:4e:3e:b5:52:f5:3b:07:75:45:cc:0e:01:d8:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36b413e536d99353f0b050ee746ffdd24edb5930
Validity
Not Before: Jan 2 00:31:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=63b569c83f71ed37cddea9fbdce428b38f677a28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b1:7b:d1:45:3f:2c:e3:50:65:cf:d9:21:16:
e2:2d:e9:29:d9:1f:e7:15:4b:94:61:e7:c6:21:ac:
a3:63:d6:9c:f0:c4:0c:d3:5c:ca:ca:40:a7:2f:e9:
2c:95:86:2f:a3:77:17:1e:b3:a2:5d:92:a8:78:62:
de:1c:ca:e1:66:e8:00:c1:09:b1:c6:5e:be:03:16:
ef:1f:b5:ec:6b:f7:79:1f:b6:34:76:5c:2a:94:8d:
2f:26:c8:df:8d:37:49:5f:11:01:6d:aa:13:5c:28:
2c:11:4d:f1:54:2e:fa:10:09:fc:60:39:b7:4f:c9:
36:66:47:5a:87:66:68:3e:3f:29:61:cd:89:99:b4:
42:d9:0f:01:03:ae:3f:cb:c8:36:f2:d3:f0:87:78:
a9:3b:26:f3:4f:44:97:0e:fb:4b:0a:7c:d0:62:e8:
5c:27:36:80:37:30:8c:a2:9c:14:98:98:3a:01:1b:
00:40:9c:5c:e9:c4:6b:6b:b7:bc:46:80:dd:e8:05:
bf:30:f8:b2:99:a9:70:fb:e6:48:59:60:1b:98:94:
cf:b0:9b:d7:f8:5f:13:9e:0f:76:f7:fa:15:94:de:
d4:ed:c2:22:d9:34:d2:28:f3:97:20:0f:57:95:2f:
73:dc:26:90:38:5a:2a:6a:e7:59:19:6c:5b:b7:a1:
25:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:B5:69:C8:3F:71:ED:37:CD:DE:A9:FB:DC:E4:28:B3:8F:67:7A:28
X509v3 Authority Key Identifier:
keyid:36:B4:13:E5:36:D9:93:53:F0:B0:50:EE:74:6F:FD:D2:4E:DB:59:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NrQT5TbZk1PwsFDudG_90k7bWTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/Y7VpyD9x7TfN3qn73OQos49neig.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.125.224.0/21
Signature Algorithm: sha256WithRSAEncryption
2a:49:ae:3d:32:bb:4d:d4:3e:1b:b8:a2:dc:8f:33:0e:bd:29:
7f:c4:57:7c:70:29:a7:cf:7c:8d:9a:9e:13:58:63:58:ed:46:
51:75:af:bd:e6:c8:e3:44:55:fc:a7:5d:d7:d6:ee:1d:cf:e5:
be:67:c5:cf:99:99:83:c1:25:3b:e0:e2:45:ff:2f:d1:3a:5d:
96:a6:a2:c7:2e:b9:e0:f7:ad:f3:95:51:27:15:29:ec:63:6f:
43:87:d2:7a:2e:7f:97:3e:8f:89:ba:0c:23:1a:d4:cc:20:21:
ee:33:24:83:bf:8c:fe:1f:71:12:ac:66:9c:a4:50:40:04:2c:
19:d2:51:7e:49:02:bb:18:cf:1d:c4:6c:6a:4a:48:3a:d5:c6:
da:83:ad:52:55:dc:8e:08:b1:76:da:99:62:87:92:cf:89:ea:
6a:7e:50:f2:42:51:f6:f4:d5:5d:fb:e1:bb:63:48:f2:b5:59:
2d:a4:98:28:ab:d4:2c:16:db:33:bd:64:96:a1:66:4f:d0:17:
90:31:26:2d:46:c6:bc:41:20:37:c6:50:b1:ba:fe:31:40:bc:
6e:e9:3d:29:39:3d:6b:ea:27:a1:6e:31:6a:97:59:df:48:2e:
56:93:99:7c:49:b3:7d:a9:d8:dc:12:9f:ee:f6:28:9c:f0:65:
25:7b:48:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:34:17 2024 by rpki-client on console-ams.rpki-client.org