Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/e5e379-656d-4622-a7bc-ea26e746a0ad/1/GRS7dY6iR9fYeaQWcSHp_YWcluw.roa
File: GRS7dY6iR9fYeaQWcSHp_YWcluw.roa (raw, json)
Hash identifier: vW9AyHVgtHHqYF/6t3qPwLT+tt+lvM2wv8kHHn1BZyE=
Subject key identifier: 19:14:BB:75:8E:A2:47:D7:D8:79:A4:16:71:21:E9:FD:85:9C:96:EC
Certificate issuer: /CN=0146b429f8c49611fcfea1efa1a51b9c0eddb6e7
Certificate serial: 018CC9BBFC011B3FB63CBB2A2A71F0DE0A9D
Authority key identifier: 01:46:B4:29:F8:C4:96:11:FC:FE:A1:EF:A1:A5:1B:9C:0E:DD:B6:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AUa0KfjElhH8_qHvoaUbnA7dtuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/e5e379-656d-4622-a7bc-ea26e746a0ad/1/GRS7dY6iR9fYeaQWcSHp_YWcluw.roa
Signing time: Tue 02 Jan 2024 10:33:09 +0000
ROA not before: Tue 02 Jan 2024 10:33:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42568
IP address blocks: 89.36.152.0/23 maxlen: 23
93.114.140.0/24 maxlen: 24
89.33.202.0/23 maxlen: 23
89.45.160.0/23 maxlen: 23
89.33.10.0/24 maxlen: 24
89.33.11.0/24 maxlen: 24
188.213.200.0/23 maxlen: 23
89.42.234.0/24 maxlen: 24
89.42.235.0/24 maxlen: 24
89.41.174.0/23 maxlen: 23
31.14.222.0/23 maxlen: 23
89.42.176.0/23 maxlen: 23
89.45.64.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/e5e379-656d-4622-a7bc-ea26e746a0ad/1/AUa0KfjElhH8_qHvoaUbnA7dtuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/e5e379-656d-4622-a7bc-ea26e746a0ad/1/AUa0KfjElhH8_qHvoaUbnA7dtuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/AUa0KfjElhH8_qHvoaUbnA7dtuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 13:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bb:fc:01:1b:3f:b6:3c:bb:2a:2a:71:f0:de:0a:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0146b429f8c49611fcfea1efa1a51b9c0eddb6e7
Validity
Not Before: Jan 2 10:33:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1914bb758ea247d7d879a4167121e9fd859c96ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:6a:42:00:fd:86:e6:7c:e4:3f:c9:97:15:23:
df:99:ac:9d:9d:53:d8:3b:3d:2c:85:6b:aa:a0:f6:
1e:1c:f8:d7:53:7d:0c:d9:78:62:b9:d7:7b:37:9e:
5a:e6:09:cc:bc:59:83:17:fe:c5:c4:0d:56:10:23:
df:08:0c:f9:9f:31:32:9b:b0:55:1c:7e:11:f8:04:
ea:ac:a8:03:8a:58:bd:30:98:a7:79:b0:57:7f:0e:
57:77:31:c4:05:3c:09:d9:6f:0b:0c:82:da:90:ae:
f7:91:0a:49:da:3e:c0:2a:a2:7c:39:05:be:31:a4:
79:87:8e:cb:11:5f:cf:10:9e:9d:11:71:a0:21:a2:
a1:f7:84:85:5f:8b:c9:ff:f0:08:49:96:28:6c:48:
d1:84:a8:9d:be:25:95:5a:82:e8:8e:6c:02:4d:34:
1b:62:2f:c1:ed:2a:7d:af:be:20:5b:91:d9:65:18:
31:b7:8c:24:cd:e8:27:76:cf:73:94:33:e3:d6:2d:
0e:05:ff:f9:8b:ae:93:ec:20:4b:20:7c:3b:8d:69:
56:18:4d:a8:a0:3b:53:18:89:89:27:6a:55:c1:d4:
95:dc:fb:95:d8:b8:74:41:80:ea:57:72:8e:fd:50:
07:14:b6:7d:08:62:59:6c:d6:2d:2f:1c:3d:45:1a:
a5:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:14:BB:75:8E:A2:47:D7:D8:79:A4:16:71:21:E9:FD:85:9C:96:EC
X509v3 Authority Key Identifier:
keyid:01:46:B4:29:F8:C4:96:11:FC:FE:A1:EF:A1:A5:1B:9C:0E:DD:B6:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AUa0KfjElhH8_qHvoaUbnA7dtuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/e5e379-656d-4622-a7bc-ea26e746a0ad/1/GRS7dY6iR9fYeaQWcSHp_YWcluw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/e5e379-656d-4622-a7bc-ea26e746a0ad/1/AUa0KfjElhH8_qHvoaUbnA7dtuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.222.0/23
89.33.10.0/23
89.33.202.0/23
89.36.152.0/23
89.41.174.0/23
89.42.176.0/23
89.42.234.0/23
89.45.64.0/23
89.45.160.0/23
93.114.140.0/24
188.213.200.0/23
Signature Algorithm: sha256WithRSAEncryption
50:01:2f:06:f9:c5:7e:fc:f7:90:5f:a9:42:8b:b4:df:82:9b:
cf:a7:56:d0:3d:45:5e:fd:1d:c3:2e:c9:e1:8b:f9:b3:c3:3e:
18:10:55:9c:8c:c0:7f:9b:71:01:99:44:73:26:2a:82:0b:c8:
ca:b2:98:38:60:b2:f0:70:2a:2b:6f:f8:be:77:b8:a8:25:a6:
0b:55:79:ae:49:0d:59:b0:94:68:ae:26:c2:b4:fb:fc:31:03:
79:ea:c8:09:cf:b3:b8:6f:47:0a:37:d9:94:1b:f8:c1:bf:cd:
20:bf:2e:b3:97:81:d6:c1:da:c1:f9:35:8a:55:90:7a:ca:e8:
b7:af:e9:74:b3:6c:38:d3:29:12:ae:1c:b0:3d:b5:cd:d3:16:
16:ae:2a:61:e7:60:cf:5f:ce:89:7d:aa:3b:37:95:44:ad:d2:
90:7f:64:63:d7:25:38:f4:0f:66:1c:bf:07:76:5f:08:20:07:
10:c3:00:51:fa:73:fd:d7:5b:b0:ed:d8:b8:a9:ac:06:70:a8:
0c:3a:d8:fa:bd:96:55:96:d4:9d:d0:2e:35:f1:87:c2:56:00:
74:0b:f0:b2:0d:c6:72:7f:a0:97:31:a3:7c:3c:a0:56:a1:4c:
99:2a:11:23:b4:91:93:c7:36:4a:48:a3:49:7a:8c:13:9a:69:
3a:c0:3b:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:07:40 2024 by rpki-client on console-fra.rpki-client.org