Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/dG7QHhYOmZjAjUv6MRhWdFZKvAU.roa
File: dG7QHhYOmZjAjUv6MRhWdFZKvAU.roa (raw, json)
Hash identifier: jzF545PpicabBb9DNHKI1q8p+TIGgGXFSRhWrscJ4GU=
Subject key identifier: 74:6E:D0:1E:16:0E:99:98:C0:8D:4B:FA:31:18:56:74:56:4A:BC:05
Certificate issuer: /CN=670e60779f3cd4d03d5e507840f5fa2a31a6ab8d
Certificate serial: 01907DF2497631FF243092AECF4E2BCBADF2
Authority key identifier: 67:0E:60:77:9F:3C:D4:D0:3D:5E:50:78:40:F5:FA:2A:31:A6:AB:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zw5gd5881NA9XlB4QPX6KjGmq40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/dG7QHhYOmZjAjUv6MRhWdFZKvAU.roa
Signing time: Thu 04 Jul 2024 13:32:28 +0000
ROA not before: Thu 04 Jul 2024 13:32:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204206
IP address blocks: 185.78.244.0/24 maxlen: 24
185.78.245.0/24 maxlen: 24
185.78.246.0/24 maxlen: 24
185.78.247.0/24 maxlen: 24
213.42.48.0/24 maxlen: 24
213.42.49.0/24 maxlen: 24
213.42.50.0/24 maxlen: 24
213.42.51.0/24 maxlen: 24
213.42.52.0/24 maxlen: 24
213.42.53.0/24 maxlen: 24
213.42.54.0/24 maxlen: 24
213.42.55.0/24 maxlen: 24
213.42.56.0/24 maxlen: 24
213.42.84.0/24 maxlen: 24
213.42.85.0/24 maxlen: 24
213.42.86.0/24 maxlen: 24
213.42.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zw5gd5881NA9XlB4QPX6KjGmq40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:7d:f2:49:76:31:ff:24:30:92:ae:cf:4e:2b:cb:ad:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=670e60779f3cd4d03d5e507840f5fa2a31a6ab8d
Validity
Not Before: Jul 4 13:32:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=746ed01e160e9998c08d4bfa31185674564abc05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e4:b2:28:cc:c8:39:34:56:3f:f3:0a:78:7a:
31:77:b8:87:2d:68:ac:1d:b6:ce:94:b4:d7:5c:08:
7e:f1:60:5d:77:56:7c:b6:c8:18:9a:6e:9a:93:44:
f3:17:14:40:4e:f9:bf:a1:30:45:b5:93:a0:46:5a:
47:e4:09:23:e8:0c:a8:c9:15:88:4e:b7:85:1b:b2:
c1:ab:a4:b9:c1:fb:31:9f:49:73:1e:61:53:84:ce:
c3:18:4a:6c:7b:c2:ad:c7:cf:5d:92:3c:67:9f:b5:
e9:85:49:41:86:98:a3:6e:1f:76:03:91:3a:a7:81:
8e:6a:60:5e:d2:fc:9d:05:5a:7a:48:43:38:8c:30:
e7:c3:06:cc:cd:d1:64:0f:42:33:31:a8:00:08:a9:
a6:fa:99:b9:d7:a8:b7:2b:cd:81:73:1a:2d:21:15:
26:46:6b:2d:3a:73:bb:18:43:ca:59:51:1e:99:49:
1a:09:f2:39:e0:e1:ab:4a:e1:dc:ba:fa:f8:d0:4a:
ab:f2:24:2a:7e:97:8a:91:eb:f2:87:5f:09:25:96:
f4:4f:56:85:11:e8:ee:d8:e1:ec:72:0c:a5:18:c0:
31:43:cf:37:89:61:be:03:fa:e2:58:37:f1:70:af:
80:0b:bc:ce:be:55:f1:fa:6e:07:b0:e3:ab:63:3f:
3f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:6E:D0:1E:16:0E:99:98:C0:8D:4B:FA:31:18:56:74:56:4A:BC:05
X509v3 Authority Key Identifier:
keyid:67:0E:60:77:9F:3C:D4:D0:3D:5E:50:78:40:F5:FA:2A:31:A6:AB:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zw5gd5881NA9XlB4QPX6KjGmq40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/dG7QHhYOmZjAjUv6MRhWdFZKvAU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.78.244.0/22
213.42.48.0-213.42.56.255
213.42.84.0/22
Signature Algorithm: sha256WithRSAEncryption
62:4c:d9:c6:8c:4b:98:87:53:a5:a1:7d:4d:e7:db:ec:62:8c:
78:c8:23:c9:97:4e:1a:a3:e3:63:9d:ef:a5:bd:f9:e2:4e:9d:
41:35:d5:f8:89:69:31:d6:89:79:1d:06:52:d8:45:74:d2:56:
2d:69:5f:da:27:47:28:1b:09:6b:11:6b:80:b1:dc:80:82:34:
de:12:f4:2e:35:a3:f3:b3:46:61:18:b2:0a:a1:f6:e4:44:ce:
96:23:1c:4d:2f:b1:75:f3:f4:cf:03:8d:22:1f:cf:90:c2:b3:
d4:d7:63:b3:11:ea:bf:2f:cb:f8:ba:db:75:c8:df:a0:3e:2d:
35:b1:1e:4c:57:75:b0:5a:26:a6:f0:c1:4b:3f:c9:3a:8e:f0:
ca:27:02:94:1b:b8:c1:17:09:f3:64:5a:1a:22:f0:e8:1f:b3:
13:a8:3b:f7:e0:82:18:0b:c8:4e:28:db:72:ec:a6:39:b9:2f:
33:df:8a:63:cc:87:26:dc:57:48:9c:bc:04:04:41:ee:af:d4:
79:30:ad:3d:2a:ba:5f:d4:50:3f:53:cf:1c:3a:e1:5b:39:38:
63:40:93:13:63:86:83:72:88:87:b5:f9:2e:fd:ea:ea:67:4f:
55:db:98:63:9e:39:06:a6:9f:48:86:73:24:96:96:11:92:83:
e3:46:a8:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 02:47:45 2024 by rpki-client on console-fra.rpki-client.org