Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/logtcNztAn5GN42wgy3MGqvwQwU.roa
File: logtcNztAn5GN42wgy3MGqvwQwU.roa (raw, json)
Hash identifier: /IxtUj24Z6SGpXQtr9c+UIfcijNEZiGKft8ZyH0uAZg=
Subject key identifier: 96:88:2D:70:DC:ED:02:7E:46:37:8D:B0:83:2D:CC:1A:AB:F0:43:05
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 01910D108FF394D4DF3BC178316E93BC14C0
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/logtcNztAn5GN42wgy3MGqvwQwU.roa
Signing time: Thu 01 Aug 2024 08:31:14 +0000
ROA not before: Thu 01 Aug 2024 08:31:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207252
IP address blocks: 37.221.95.0/24 maxlen: 24
45.84.197.0/24 maxlen: 24
45.133.75.0/24 maxlen: 24
45.137.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.mft
rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 09:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:0d:10:8f:f3:94:d4:df:3b:c1:78:31:6e:93:bc:14:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Aug 1 08:31:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=96882d70dced027e46378db0832dcc1aabf04305
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:8d:85:c9:41:f8:a3:c5:89:35:d9:c1:a8:77:
dd:5c:61:7e:90:24:03:00:a1:94:e6:58:53:77:6c:
10:24:27:20:d3:b7:dd:67:c5:50:28:10:4d:f3:b6:
66:f7:79:e5:43:ce:6b:68:eb:6f:a5:6f:b6:6a:25:
f0:01:4e:89:25:39:9b:87:2f:47:35:94:ef:67:1c:
5d:8e:b3:13:1b:c0:5b:20:fd:bc:44:04:9f:e9:97:
3f:44:f8:32:40:e9:ba:28:c3:b1:18:14:6b:be:66:
1f:99:46:3a:6d:aa:85:05:e5:59:8c:d3:3a:63:94:
9f:04:f9:0f:7d:70:77:71:62:a9:8d:76:55:e5:ac:
2f:55:71:c9:52:4f:76:63:aa:37:ba:49:8d:8e:3a:
8b:da:fe:32:76:b4:03:9d:f7:2a:82:83:4e:63:f9:
52:4b:d4:66:83:a1:48:49:ad:87:23:86:3e:dc:28:
99:49:b7:b7:a0:18:3c:22:b4:3d:53:99:40:6f:cd:
c3:3a:a2:35:ac:c8:af:12:3a:09:2d:b5:8e:92:7d:
7d:7c:13:8d:3a:56:0c:d5:c6:e0:6e:84:3d:b8:4d:
f6:6b:da:b3:3a:6b:e7:1b:3a:56:1b:0f:c4:98:82:
ac:07:73:cc:c4:86:12:b3:7a:a5:24:fa:84:1d:36:
04:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:88:2D:70:DC:ED:02:7E:46:37:8D:B0:83:2D:CC:1A:AB:F0:43:05
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/logtcNztAn5GN42wgy3MGqvwQwU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.221.95.0/24
45.84.197.0/24
45.133.75.0/24
45.137.68.0/24
Signature Algorithm: sha256WithRSAEncryption
77:4c:a4:c1:30:2e:e3:9a:0b:26:69:b4:bb:ce:d6:b9:c9:74:
7f:36:06:48:5d:3f:3d:bc:2e:90:e0:8d:e2:ba:f4:ae:1a:09:
6d:70:37:73:2d:84:34:31:d5:51:51:b1:38:80:96:c5:09:6b:
6f:c7:e2:5c:7a:d6:1d:4b:37:ec:6e:f1:53:6c:0a:b6:fb:ad:
a8:a5:af:e2:f2:c8:ac:6b:53:b6:2f:e3:40:70:19:38:ac:aa:
84:bd:51:12:7d:b0:63:13:46:5d:05:8a:d7:db:c4:c9:a6:32:
3c:1e:44:2d:b1:53:53:12:fa:fe:29:a2:9c:90:c3:49:c4:64:
ef:02:ca:de:ec:86:6b:f5:16:ea:62:e6:cc:bf:ec:6d:cb:5f:
6b:19:ae:a8:e9:bf:e2:26:6a:7b:ee:4c:56:63:b7:8e:e2:ad:
2c:16:e2:11:54:01:42:3f:c7:0d:2b:1b:97:29:fc:d9:91:ab:
c9:05:fd:6f:5c:80:a2:88:d6:c1:3f:a1:99:7d:80:99:95:3a:
87:86:5f:4e:16:90:75:b2:6d:27:eb:d6:b3:65:24:16:71:1a:
a2:1d:be:0e:db:57:83:1d:74:50:d4:a4:9e:e6:05:48:f7:9a:
06:76:f9:bf:15:fc:95:89:86:74:1e:8f:8d:b5:bd:f6:cc:03:
2d:be:26:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:01:45 2024 by rpki-client on console-ams.rpki-client.org