Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/549e4d-8dee-459b-9283-46bb3fa28b00/1/K7quGkwfQrGhKzMgBp7zWP1rT0M.roa
File: K7quGkwfQrGhKzMgBp7zWP1rT0M.roa (raw, json)
Hash identifier: eIhs7Pg5TwyDLukY+jJpzon82gHd1a00Pk9TZ97ks2U=
Subject key identifier: 2B:BA:AE:1A:4C:1F:42:B1:A1:2B:33:20:06:9E:F3:58:FD:6B:4F:43
Certificate issuer: /CN=e041c85b474e8b6c00891d954124ff0c81200d8c
Certificate serial: 018FA0909B1F6B87FECC8A559DF45C78FDA9
Authority key identifier: E0:41:C8:5B:47:4E:8B:6C:00:89:1D:95:41:24:FF:0C:81:20:0D:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4EHIW0dOi2wAiR2VQST_DIEgDYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/549e4d-8dee-459b-9283-46bb3fa28b00/1/K7quGkwfQrGhKzMgBp7zWP1rT0M.roa
Signing time: Wed 22 May 2024 13:49:42 +0000
ROA not before: Wed 22 May 2024 13:49:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 36184
IP address blocks: 194.126.150.0/23 maxlen: 24
217.10.225.0/24 maxlen: 24
217.10.232.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/549e4d-8dee-459b-9283-46bb3fa28b00/1/4EHIW0dOi2wAiR2VQST_DIEgDYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/549e4d-8dee-459b-9283-46bb3fa28b00/1/4EHIW0dOi2wAiR2VQST_DIEgDYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4EHIW0dOi2wAiR2VQST_DIEgDYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 30 Jun 2024 01:02:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:a0:90:9b:1f:6b:87:fe:cc:8a:55:9d:f4:5c:78:fd:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e041c85b474e8b6c00891d954124ff0c81200d8c
Validity
Not Before: May 22 13:49:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2bbaae1a4c1f42b1a12b3320069ef358fd6b4f43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:60:c8:bc:03:74:d0:40:bf:d0:c9:ba:83:60:
da:a1:f2:74:72:d7:cf:e2:59:0f:fb:6b:73:12:2f:
fe:8d:b7:41:1f:2c:07:be:9c:c9:d9:37:fa:67:ba:
13:80:b6:74:a5:3b:94:43:d3:ca:e8:f1:34:57:29:
8c:b8:2b:14:f6:df:f7:98:47:d7:6d:e3:e7:a1:76:
08:7f:dd:1b:f5:0c:d0:1e:aa:b8:de:29:82:25:44:
ef:7a:81:00:3d:e1:be:49:da:3b:0d:c2:77:12:39:
6c:90:a4:f3:86:ea:2c:86:d2:98:b2:19:86:10:be:
e7:50:6d:df:9f:8c:94:9f:3e:fb:ec:b8:f2:71:b6:
5c:af:98:da:42:93:c6:ca:52:ec:30:cd:37:95:26:
cb:1b:88:58:91:b7:0b:56:7b:63:28:3b:56:f2:c7:
c8:6c:bb:e8:fb:61:4c:5e:ee:2d:95:47:32:89:68:
64:f9:6b:a6:ee:92:61:b5:1d:02:e7:72:b0:36:78:
15:08:46:2c:91:4b:72:6d:13:58:f1:da:1a:94:3e:
cc:10:fe:e6:4c:c9:fe:b9:ec:57:bd:9f:41:29:ca:
60:8b:5c:67:4d:4f:e1:54:d5:c6:6b:39:ab:d8:a0:
95:1c:e8:c6:4a:17:74:a7:91:2e:0a:6e:ca:75:f3:
7c:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:BA:AE:1A:4C:1F:42:B1:A1:2B:33:20:06:9E:F3:58:FD:6B:4F:43
X509v3 Authority Key Identifier:
keyid:E0:41:C8:5B:47:4E:8B:6C:00:89:1D:95:41:24:FF:0C:81:20:0D:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4EHIW0dOi2wAiR2VQST_DIEgDYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/549e4d-8dee-459b-9283-46bb3fa28b00/1/K7quGkwfQrGhKzMgBp7zWP1rT0M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/549e4d-8dee-459b-9283-46bb3fa28b00/1/4EHIW0dOi2wAiR2VQST_DIEgDYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.126.150.0/23
217.10.225.0/24
217.10.232.0/21
Signature Algorithm: sha256WithRSAEncryption
77:b7:de:6a:b7:8e:dc:31:ba:65:46:a9:13:5a:09:d9:8d:a8:
33:5e:d0:7e:cf:51:44:1e:5f:45:3d:46:c9:17:9f:6b:60:92:
35:07:09:90:e8:45:cc:34:f6:27:83:28:8f:d0:80:4a:40:4a:
72:57:69:f7:63:80:23:c1:e7:c0:b5:32:4c:b3:13:b6:c5:e9:
23:5e:35:86:e3:28:f1:62:1b:6d:ae:a7:db:68:b9:51:1e:0c:
1f:98:5a:82:d4:e1:13:64:8a:88:ff:d8:ee:da:4a:81:67:17:
70:2f:4e:ac:23:13:06:39:71:98:f9:3f:2e:57:3b:d9:40:cc:
86:a7:1f:25:a3:6f:b4:65:b7:e2:b4:e4:e7:9c:36:45:47:9b:
3a:7a:47:14:64:43:c2:15:a9:9e:7b:82:56:c1:0c:59:4d:28:
3a:a3:f6:79:e1:f9:37:a2:ce:07:47:b8:68:c6:40:d5:81:ea:
b7:ee:a3:8f:0e:49:ed:09:7e:62:b5:d7:d1:09:dc:de:a3:3a:
c8:66:c7:2b:f2:2a:e3:1d:bc:4f:19:78:65:d5:1e:e3:8f:31:
50:ee:24:b3:37:fb:f8:75:0c:46:32:cb:67:00:1b:8e:d2:c5:
46:04:60:87:bb:69:28:79:1a:ec:18:94:c9:d2:6a:e7:92:27:
bb:7d:2c:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 07:05:02 2024 by rpki-client on console-fra.rpki-client.org