Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/4wqQljtx52CdhaW3I7YBib5OxaE.roa
File: 4wqQljtx52CdhaW3I7YBib5OxaE.roa (raw, json)
Hash identifier: UzovKeeOfQV9M8SCJ7QHGOoqDdwyyBsuE+ZIybyRpoI=
Subject key identifier: E3:0A:90:96:3B:71:E7:60:9D:85:A5:B7:23:B6:01:89:BE:4E:C5:A1
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 0190A1C9C995A55538A6FB7A4CAB72F33AC2
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/4wqQljtx52CdhaW3I7YBib5OxaE.roa
Signing time: Thu 11 Jul 2024 12:34:34 +0000
ROA not before: Thu 11 Jul 2024 12:34:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207713
IP address blocks: 147.45.48.0/24 maxlen: 24
193.233.18.0/24 maxlen: 24
193.233.48.0/24 maxlen: 24
193.233.49.0/24 maxlen: 24
193.233.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:a1:c9:c9:95:a5:55:38:a6:fb:7a:4c:ab:72:f3:3a:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Jul 11 12:34:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e30a90963b71e7609d85a5b723b60189be4ec5a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:0d:5e:03:0b:ad:00:dc:5b:5a:a8:d4:30:5d:
ed:a7:2b:81:ff:be:2e:09:35:8e:12:ce:84:48:a1:
07:63:c8:00:f1:d0:f3:16:f5:c0:6b:dd:8b:36:9b:
5d:2a:c0:30:d6:f2:74:29:7e:03:ca:6c:d0:ff:21:
2b:d2:23:af:dd:98:f3:6b:56:c0:e0:18:17:9a:c7:
76:2e:20:9c:7e:ab:30:76:d9:be:84:f2:ee:86:26:
d6:bf:8a:39:74:5f:a5:c9:f7:f6:46:72:1d:dc:c1:
20:ac:dc:14:f9:92:ab:9a:c4:fa:b7:ff:ec:3b:01:
e7:b3:0c:73:b7:4e:9c:b5:d4:c4:80:53:00:b9:58:
b3:f4:1a:a7:47:e6:cb:d5:95:76:4a:c5:30:bb:ab:
9f:54:7c:43:56:86:6f:c1:9c:52:08:9d:b3:cd:0f:
65:d6:49:64:22:f8:bd:98:1b:6a:43:bd:9d:27:13:
a5:12:13:6e:19:42:94:c1:93:1a:b2:76:a5:40:fe:
d5:b2:93:ff:40:02:90:04:b5:10:e9:d7:8e:a3:5a:
1c:c4:13:fe:06:a1:89:b5:b7:90:c1:fd:25:65:e9:
24:2d:ab:6c:82:8d:15:3a:bf:3d:f0:ca:39:81:0b:
d7:6a:4f:05:0b:90:34:99:78:84:3a:c8:47:06:e6:
04:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:0A:90:96:3B:71:E7:60:9D:85:A5:B7:23:B6:01:89:BE:4E:C5:A1
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/4wqQljtx52CdhaW3I7YBib5OxaE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.45.48.0/24
193.233.18.0/24
193.233.48.0/23
193.233.84.0/24
Signature Algorithm: sha256WithRSAEncryption
81:66:47:29:63:f7:25:a4:53:d9:77:34:57:de:75:1b:a7:62:
d7:1c:c3:5f:b8:e4:e7:aa:7a:44:0c:54:12:4b:7c:96:69:4c:
a9:2a:f2:6c:06:24:c9:a4:3c:7c:11:03:25:5b:ac:ff:c0:a3:
aa:e6:e9:62:64:19:a4:a0:ae:d2:57:44:6c:48:68:a5:12:3d:
db:8d:c2:27:a0:7d:70:44:dc:2c:12:89:77:47:dd:c6:bd:aa:
25:f5:f5:98:f8:5d:55:4c:ad:6e:74:1c:a3:04:04:4d:e7:90:
6b:a5:49:38:b8:ab:b7:2a:5a:6a:b1:a8:5a:16:f9:e9:cb:ad:
28:80:20:b8:a3:16:f7:a1:7d:47:24:e4:f3:30:08:d0:0d:69:
63:0c:9c:a3:54:b6:b7:ad:5c:1b:03:e6:4f:a2:e6:3f:ad:9e:
53:1a:ab:b7:9e:f1:6b:89:fd:3d:d2:eb:6f:54:ce:f6:14:fe:
36:cd:b3:f6:77:82:bd:29:e1:95:9b:8a:7e:04:c5:ae:10:3b:
95:85:85:8f:0e:60:fd:6f:76:5c:be:a6:d4:c4:9b:b0:a8:2d:
4e:59:97:16:eb:f6:7c:5d:35:0b:3d:a9:5d:76:f7:56:d6:e3:
72:f0:f2:b3:70:b3:a7:0f:da:75:ad:91:69:33:7a:3a:13:17:
9b:c6:35:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:33:58 2024 by rpki-client on console-fra.rpki-client.org