Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/d8e096-4310-42b9-bd20-b5602d3da8a6/1/7RGjSX-ezauqcWa0I9YgnennQsI.roa
File: 7RGjSX-ezauqcWa0I9YgnennQsI.roa (raw, json)
Hash identifier: gdrnoZV5OplmNu0JTxE/mZTVUjgoLHxYD9yrPeHTlCU=
Subject key identifier: ED:11:A3:49:7F:9E:CD:AB:AA:71:66:B4:23:D6:20:9D:E9:E7:42:C2
Certificate issuer: /CN=6e60883aae491e5fb773a9264019ff4f888d5ca5
Certificate serial: 019257AA423EF31EDAFB9523A0B5D7E3DA34
Authority key identifier: 6E:60:88:3A:AE:49:1E:5F:B7:73:A9:26:40:19:FF:4F:88:8D:5C:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bmCIOq5JHl-3c6kmQBn_T4iNXKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/d8e096-4310-42b9-bd20-b5602d3da8a6/1/7RGjSX-ezauqcWa0I9YgnennQsI.roa
Signing time: Fri 04 Oct 2024 13:13:48 +0000
ROA not before: Fri 04 Oct 2024 13:13:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44143
IP address blocks: 37.19.104.0/21 maxlen: 21
37.19.104.0/22 maxlen: 22
37.19.107.0/24 maxlen: 24
37.19.108.0/23 maxlen: 23
37.19.110.0/24 maxlen: 24
77.243.16.0/20 maxlen: 20
77.243.16.0/21 maxlen: 21
77.243.16.0/24 maxlen: 24
77.243.19.0/24 maxlen: 24
77.243.20.0/22 maxlen: 22
77.243.20.0/23 maxlen: 23
77.243.20.0/24 maxlen: 24
77.243.22.0/24 maxlen: 24
77.243.23.0/24 maxlen: 24
77.243.24.0/22 maxlen: 22
77.243.28.0/22 maxlen: 22
77.243.28.0/24 maxlen: 24
77.243.29.0/24 maxlen: 24
77.243.30.0/24 maxlen: 24
77.243.31.0/24 maxlen: 24
95.86.4.0/22 maxlen: 22
95.86.8.0/22 maxlen: 22
95.86.48.0/21 maxlen: 21
185.37.24.0/22 maxlen: 22
185.37.24.0/24 maxlen: 24
185.37.25.0/24 maxlen: 24
185.37.26.0/24 maxlen: 24
185.37.27.0/24 maxlen: 24
188.120.96.0/20 maxlen: 20
188.120.96.0/21 maxlen: 21
188.120.96.0/24 maxlen: 24
188.120.97.0/24 maxlen: 24
188.120.98.0/24 maxlen: 24
188.120.99.0/24 maxlen: 24
188.120.100.0/24 maxlen: 24
188.120.101.0/24 maxlen: 24
188.120.102.0/24 maxlen: 24
188.120.103.0/24 maxlen: 24
188.120.104.0/21 maxlen: 21
188.120.112.0/21 maxlen: 21
188.120.112.0/22 maxlen: 22
188.120.113.0/24 maxlen: 24
188.120.116.0/22 maxlen: 22
188.120.116.0/24 maxlen: 24
188.120.117.0/24 maxlen: 24
188.120.118.0/24 maxlen: 24
188.120.119.0/24 maxlen: 24
2a00:61c0::/29 maxlen: 29
2a00:61c0::/32 maxlen: 32
2a00:61c1::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/d8e096-4310-42b9-bd20-b5602d3da8a6/1/bmCIOq5JHl-3c6kmQBn_T4iNXKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/d8e096-4310-42b9-bd20-b5602d3da8a6/1/bmCIOq5JHl-3c6kmQBn_T4iNXKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/bmCIOq5JHl-3c6kmQBn_T4iNXKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 28 Nov 2024 04:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:57:aa:42:3e:f3:1e:da:fb:95:23:a0:b5:d7:e3:da:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e60883aae491e5fb773a9264019ff4f888d5ca5
Validity
Not Before: Oct 4 13:13:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ed11a3497f9ecdabaa7166b423d6209de9e742c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e4:43:ac:80:9c:50:12:51:9a:98:76:c6:51:
12:19:94:9b:b5:ea:81:6a:29:a0:4a:13:10:52:26:
e1:6f:88:37:29:fc:93:95:ba:85:dd:00:cd:c2:38:
ce:74:ea:bd:84:aa:14:da:9e:e6:94:7b:e2:2b:41:
8c:83:2d:c7:38:2a:e6:f1:dd:a7:38:b8:53:f1:61:
8d:73:9b:f6:67:b4:a3:80:41:71:ca:e2:84:90:59:
d3:96:04:63:e7:cf:10:c0:64:f9:d9:b8:d9:94:6c:
f2:c4:74:d6:0d:b5:6b:07:5c:94:69:35:c9:69:01:
d3:02:f9:b0:db:00:24:23:a6:b0:f4:ec:cb:33:f1:
4d:0b:eb:fd:eb:09:de:89:ae:1d:48:08:a5:95:dc:
bd:e8:be:8f:04:8d:6d:4b:91:e9:3a:37:8f:81:59:
5d:1f:ec:c5:0e:01:df:18:2c:45:7d:15:70:43:96:
ff:13:fa:7b:f1:71:2b:30:c5:a7:08:7b:32:93:29:
d8:66:b7:8c:48:a3:e8:e5:c7:bc:86:ec:0c:af:64:
10:86:b4:86:f8:3a:a0:d9:11:cb:3a:7d:d5:c4:23:
ec:15:05:88:c0:fc:4e:d2:72:e1:3a:5e:2b:9c:5b:
0a:bb:db:c9:cc:c8:bd:1a:9d:95:64:01:1b:ec:6b:
ef:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:11:A3:49:7F:9E:CD:AB:AA:71:66:B4:23:D6:20:9D:E9:E7:42:C2
X509v3 Authority Key Identifier:
keyid:6E:60:88:3A:AE:49:1E:5F:B7:73:A9:26:40:19:FF:4F:88:8D:5C:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bmCIOq5JHl-3c6kmQBn_T4iNXKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/d8e096-4310-42b9-bd20-b5602d3da8a6/1/7RGjSX-ezauqcWa0I9YgnennQsI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/d8e096-4310-42b9-bd20-b5602d3da8a6/1/bmCIOq5JHl-3c6kmQBn_T4iNXKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.19.104.0/21
77.243.16.0/20
95.86.4.0-95.86.11.255
95.86.48.0/21
185.37.24.0/22
188.120.96.0-188.120.119.255
IPv6:
2a00:61c0::/29
Signature Algorithm: sha256WithRSAEncryption
6c:8c:ed:3e:a7:fe:d3:fe:70:b3:f4:c5:8f:f2:ac:b5:6c:53:
3e:3a:14:53:70:c3:88:c1:74:44:12:8c:9c:1d:a7:4e:73:8c:
cb:9a:11:d3:2b:42:4f:fd:9a:9d:1d:2f:35:33:6d:1a:31:c7:
de:2b:2d:0a:68:60:e7:aa:b8:af:70:89:e1:4f:6a:29:e2:df:
2a:90:77:56:c2:30:7e:4a:76:c3:ef:6c:ec:8d:22:76:e0:7f:
0e:15:43:1d:c9:b4:05:f9:c2:8d:9d:50:9e:c6:d4:12:60:78:
27:a7:c1:70:d4:5c:cd:70:71:47:22:7f:cb:51:09:03:cd:9e:
8b:eb:05:86:f4:0e:ad:23:e0:65:17:a6:73:73:ab:f8:c2:6f:
28:57:46:ea:68:5b:68:0a:5e:3e:ff:cd:01:0b:64:49:17:3f:
7c:24:e7:e0:29:c4:47:31:62:f3:c1:01:83:37:0f:0c:20:35:
98:fb:de:cd:aa:cd:e5:6b:37:e1:20:24:fe:e6:8d:6d:27:bf:
e8:01:89:35:16:58:4f:5f:fd:6a:1c:2c:c1:3f:24:8c:aa:ce:
73:e9:3c:6d:98:d0:b8:45:1d:ab:89:ad:2a:00:3d:37:a0:92:
eb:78:8a:6f:af:b9:75:c1:0d:39:de:79:7f:20:da:7c:cf:96:
a4:bd:fb:6d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Nov 27 11:39:32 2024 by rpki-client on console-ams.rpki-client.org