Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/eeb26f-6790-42ce-8ccc-54a25e2cdaa9/1/V_ojMuo48vWmsgYROIQ9e8zOEZg.roa
File: V_ojMuo48vWmsgYROIQ9e8zOEZg.roa (raw, json)
Hash identifier: 1p2moC7jaynmoAKYYSQwGGo/N8kN4DxSCkBYZHFM6rM=
Subject key identifier: 57:FA:23:32:EA:38:F2:F5:A6:B2:06:11:38:84:3D:7B:CC:CE:11:98
Certificate issuer: /CN=13f8496b79d1c04d082af83f1be6a5eab0c66089
Certificate serial: 018CC8715954D35CF6C16A4827DE21CF227C
Authority key identifier: 13:F8:49:6B:79:D1:C0:4D:08:2A:F8:3F:1B:E6:A5:EA:B0:C6:60:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E_hJa3nRwE0IKvg_G-al6rDGYIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/eeb26f-6790-42ce-8ccc-54a25e2cdaa9/1/V_ojMuo48vWmsgYROIQ9e8zOEZg.roa
Signing time: Tue 02 Jan 2024 04:32:00 +0000
ROA not before: Tue 02 Jan 2024 04:32:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34625
IP address blocks: 195.242.236.0/24 maxlen: 24
212.119.57.0/24 maxlen: 24
212.119.58.0/24 maxlen: 24
212.119.56.0/24 maxlen: 24
212.119.59.0/24 maxlen: 24
37.75.232.0/24 maxlen: 24
37.75.233.0/24 maxlen: 24
37.75.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/eeb26f-6790-42ce-8ccc-54a25e2cdaa9/1/E_hJa3nRwE0IKvg_G-al6rDGYIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/eeb26f-6790-42ce-8ccc-54a25e2cdaa9/1/E_hJa3nRwE0IKvg_G-al6rDGYIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/E_hJa3nRwE0IKvg_G-al6rDGYIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:71:59:54:d3:5c:f6:c1:6a:48:27:de:21:cf:22:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13f8496b79d1c04d082af83f1be6a5eab0c66089
Validity
Not Before: Jan 2 04:32:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=57fa2332ea38f2f5a6b2061138843d7bccce1198
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:a0:1a:74:01:23:8f:85:6e:26:6c:f9:a3:13:
cb:4b:ed:62:65:b9:e3:0b:b7:83:59:22:b6:13:1b:
ec:27:ee:42:2e:b2:7c:52:24:98:7e:c6:67:60:96:
4e:f4:37:51:6d:08:28:ba:85:b3:08:14:81:5c:56:
56:76:28:71:7a:f3:a8:f8:2d:a2:ba:ec:7f:f0:fe:
44:49:2e:86:a4:a2:7f:ff:7d:bc:99:92:15:4f:0f:
50:f5:68:5b:6d:01:f8:95:62:c8:77:f1:ff:02:e2:
25:cb:5a:ca:97:33:74:36:24:fd:4f:ee:89:b7:d7:
ce:26:57:fe:e1:73:07:54:29:6e:b5:9d:2e:26:ce:
f9:9f:9d:50:4f:b6:99:28:de:84:e3:79:72:36:f8:
86:75:4f:81:30:e3:a9:ae:58:44:a2:ac:fa:38:cd:
5a:18:ca:44:86:5b:d2:a2:6e:94:43:87:25:e6:6c:
cf:f3:e9:88:46:e3:ae:e5:2a:d5:4b:18:50:68:6f:
89:14:7f:81:48:96:ea:2e:9e:29:4c:72:61:e9:ed:
00:e4:44:8a:77:67:31:c3:71:4b:6a:8b:25:61:87:
51:7b:4e:1c:ec:96:fc:ee:ef:76:8f:ce:a9:0c:5e:
81:1c:bd:73:73:21:21:7f:b0:17:8e:4b:5a:19:59:
42:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:FA:23:32:EA:38:F2:F5:A6:B2:06:11:38:84:3D:7B:CC:CE:11:98
X509v3 Authority Key Identifier:
keyid:13:F8:49:6B:79:D1:C0:4D:08:2A:F8:3F:1B:E6:A5:EA:B0:C6:60:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E_hJa3nRwE0IKvg_G-al6rDGYIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/eeb26f-6790-42ce-8ccc-54a25e2cdaa9/1/V_ojMuo48vWmsgYROIQ9e8zOEZg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/eeb26f-6790-42ce-8ccc-54a25e2cdaa9/1/E_hJa3nRwE0IKvg_G-al6rDGYIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.75.232.0/23
37.75.236.0/24
195.242.236.0/24
212.119.56.0/22
Signature Algorithm: sha256WithRSAEncryption
4f:a5:79:3a:22:76:6d:d5:32:e5:c1:22:ea:ce:69:14:c2:8a:
4b:89:32:fb:fc:8a:71:aa:86:2f:e8:92:73:ab:2c:27:9c:41:
6c:b3:ad:87:4b:fd:76:24:9b:06:1f:85:e2:05:1c:13:27:81:
39:fc:7c:38:81:25:ed:88:47:d5:fe:2b:af:6b:3f:40:56:6c:
a1:e0:2d:01:99:8f:5b:99:92:a9:e7:3a:aa:76:91:b5:5c:e5:
f6:e0:50:72:e5:46:59:3b:11:20:55:a6:ec:29:c3:71:06:c0:
24:bd:1f:36:95:30:4f:70:16:e9:60:f9:9d:00:d1:bc:cc:82:
f1:76:10:ad:5f:bc:8e:c3:01:da:67:16:40:b3:11:ff:3b:b1:
8e:31:82:11:9c:01:7e:67:f0:03:24:4a:fc:81:e7:68:db:56:
d1:b3:99:11:9b:43:43:9e:55:d8:d6:f1:71:af:15:5b:b4:ad:
5d:8f:d2:ec:c4:e1:dc:c8:81:67:17:0b:38:5a:d8:ec:ad:3b:
aa:4e:55:69:50:85:a5:06:fa:9b:64:41:c0:24:19:68:90:c2:
13:51:43:25:79:8e:72:4a:9c:52:25:30:9b:e2:23:e1:21:20:
df:12:97:26:9c:d7:1a:e7:91:f4:a1:ab:cd:c7:bd:3d:33:49:
b2:95:a5:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 19:25:07 2024 by rpki-client on console-ams.rpki-client.org