Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/CId7OgyVlmxRzO22u1cjZMLBBHs.roa
File: CId7OgyVlmxRzO22u1cjZMLBBHs.roa (raw, json)
Hash identifier: aUeLpaT6qzFST9Tixe9kAmhk7CdwK0teOKP4qOZoDUQ=
Subject key identifier: 08:87:7B:3A:0C:95:96:6C:51:CC:ED:B6:BB:57:23:64:C2:C1:04:7B
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 018ECE3B27DEB78A12CD6E75DB9CE0D01AFA
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/CId7OgyVlmxRzO22u1cjZMLBBHs.roa
Signing time: Thu 11 Apr 2024 17:36:07 +0000
ROA not before: Thu 11 Apr 2024 17:36:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9123
IP address blocks: 147.45.101.0/24 maxlen: 24
147.45.102.0/24 maxlen: 24
147.45.103.0/24 maxlen: 24
147.45.104.0/24 maxlen: 24
147.45.105.0/24 maxlen: 24
147.45.106.0/24 maxlen: 24
147.45.107.0/24 maxlen: 24
147.45.108.0/24 maxlen: 24
147.45.109.0/24 maxlen: 24
147.45.110.0/24 maxlen: 24
147.45.111.0/24 maxlen: 24
147.45.132.0/24 maxlen: 24
147.45.133.0/24 maxlen: 24
147.45.134.0/24 maxlen: 24
147.45.135.0/24 maxlen: 24
147.45.136.0/24 maxlen: 24
147.45.137.0/24 maxlen: 24
147.45.138.0/24 maxlen: 24
147.45.139.0/24 maxlen: 24
147.45.140.0/24 maxlen: 24
147.45.141.0/24 maxlen: 24
147.45.142.0/24 maxlen: 24
147.45.143.0/24 maxlen: 24
147.45.144.0/20 maxlen: 24
147.45.180.0/24 maxlen: 24
147.45.181.0/24 maxlen: 24
147.45.182.0/24 maxlen: 24
147.45.183.0/24 maxlen: 24
147.45.184.0/24 maxlen: 24
147.45.185.0/24 maxlen: 24
147.45.186.0/24 maxlen: 24
147.45.187.0/24 maxlen: 24
147.45.189.0/24 maxlen: 24
147.45.190.0/24 maxlen: 24
147.45.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 20:58:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:ce:3b:27:de:b7:8a:12:cd:6e:75:db:9c:e0:d0:1a:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Apr 11 17:36:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=08877b3a0c95966c51ccedb6bb572364c2c1047b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:73:62:73:86:b3:bb:b8:3d:a9:ba:f1:5b:7a:
a4:e1:27:eb:71:68:b5:31:6a:99:11:c1:cd:14:23:
7b:4e:36:99:45:44:8f:ce:c9:3d:56:28:46:b2:a5:
04:db:2c:33:72:86:65:4b:73:06:3e:f6:c1:30:a6:
78:2c:9f:f6:54:d7:9f:c5:6b:bb:3d:43:2d:09:38:
26:8c:78:81:18:79:2f:b3:7e:c4:ad:37:64:7a:3a:
43:a6:db:84:cf:20:04:1f:5b:38:58:07:43:c4:03:
d1:aa:96:a5:25:87:1b:29:86:7b:4f:e3:1c:84:16:
36:01:ad:bb:61:e9:0e:eb:87:af:80:38:ee:2f:6c:
5a:ae:ca:2d:bf:b6:dd:62:b2:91:15:23:99:93:cb:
3e:17:5d:fc:20:60:e7:91:e9:e0:1c:b2:96:0d:25:
fe:14:12:8a:46:9a:4e:92:ef:20:12:eb:98:76:a6:
2c:80:e7:2e:86:1e:f3:71:40:93:a4:9b:33:25:94:
a3:83:b4:22:40:72:07:15:99:e5:e7:7e:c4:07:13:
93:2d:ab:51:48:a4:ef:ef:0f:23:dc:0d:2e:ad:14:
f5:e4:0b:2d:06:8a:8b:f9:83:2e:2f:56:20:1b:56:
ce:de:40:03:fb:07:44:9e:78:f6:43:af:e8:1e:26:
b6:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:87:7B:3A:0C:95:96:6C:51:CC:ED:B6:BB:57:23:64:C2:C1:04:7B
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/CId7OgyVlmxRzO22u1cjZMLBBHs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.45.101.0-147.45.111.255
147.45.132.0-147.45.159.255
147.45.180.0-147.45.187.255
147.45.189.0-147.45.191.255
Signature Algorithm: sha256WithRSAEncryption
4a:f1:3f:27:4b:2d:b5:f8:4c:ba:59:e4:f8:86:5a:29:91:9e:
5e:c9:89:90:91:5b:e6:5a:31:3d:76:53:c4:d6:6b:cf:93:10:
0f:5f:d0:aa:55:83:49:fe:0e:db:35:53:9e:b2:0e:6a:91:1d:
80:fb:86:d8:81:74:76:f3:d3:35:a0:a7:d3:69:fb:45:af:a3:
d3:7d:91:c5:8d:91:a8:a9:8e:f2:7c:6a:54:74:a8:d0:c3:2e:
ff:4f:87:ec:61:66:08:9c:49:8c:1f:40:04:ed:70:91:08:10:
2f:4f:0f:99:c3:97:e4:af:af:80:d7:f0:77:92:91:d4:0f:9f:
fe:2a:32:db:87:c6:ab:e9:bf:7d:03:05:c3:b8:c1:3c:00:42:
69:d9:78:8b:5f:b8:07:42:66:dc:35:6a:38:7b:88:7c:27:32:
6a:06:c1:5a:c8:55:f8:7a:21:13:4a:fa:4c:31:dd:7a:2a:c7:
4c:79:35:bd:25:6f:33:ae:1e:a7:61:da:fa:ed:7f:ad:f7:ad:
d5:1b:9f:82:2e:2d:d5:e2:8b:8b:53:ea:e4:b7:b3:4e:1f:ee:
43:e1:bd:70:fe:25:8a:32:5b:3a:3c:b7:37:36:67:33:71:90:
bf:01:2a:7c:c9:88:8f:ee:aa:78:4c:99:c8:40:b9:e9:7d:1a:
06:24:d2:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 00:15:45 2024 by rpki-client on console-fra.rpki-client.org