Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/1-MEHsVh5N3S_k6QUakG3j5CktQE.roa
File: 1-MEHsVh5N3S_k6QUakG3j5CktQE.roa (raw, json)
Hash identifier: +oC9RFVLe+3AO4FP3dRNxFhOPpKjbEq/Z1DpWkqMJmI=
Subject key identifier: F8:C1:07:B1:58:79:37:74:BF:93:A4:14:6A:41:B7:8F:90:A4:B5:01
Certificate issuer: /CN=002647c801fb58fcfaac135bb48f5e61fea7e566
Certificate serial: 0191BC922F186375B51315A1EEFAB5FC63AD
Authority key identifier: 00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/1-MEHsVh5N3S_k6QUakG3j5CktQE.roa
Signing time: Wed 04 Sep 2024 10:26:22 +0000
ROA not before: Wed 04 Sep 2024 10:26:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44477
IP address blocks: 84.19.10.0/24 maxlen: 24
84.19.13.0/24 maxlen: 24
84.19.16.0/24 maxlen: 24
84.19.19.0/24 maxlen: 24
84.19.22.0/24 maxlen: 24
84.19.25.0/24 maxlen: 24
84.19.27.0/24 maxlen: 24
84.19.31.0/24 maxlen: 24
91.190.145.0/24 maxlen: 24
91.190.149.0/24 maxlen: 24
91.228.105.0/24 maxlen: 24
91.228.107.0/24 maxlen: 24
91.230.27.0/24 maxlen: 24
195.191.114.0/24 maxlen: 24
195.225.240.0/24 maxlen: 24
195.225.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:bc:92:2f:18:63:75:b5:13:15:a1:ee:fa:b5:fc:63:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=002647c801fb58fcfaac135bb48f5e61fea7e566
Validity
Not Before: Sep 4 10:26:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f8c107b158793774bf93a4146a41b78f90a4b501
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d0:fb:c7:91:9f:42:65:76:62:0e:b0:21:b0:
c8:ff:bd:6d:3e:bc:31:b8:81:e0:e4:1e:20:53:60:
22:97:7a:20:62:9c:1e:e4:62:4f:b8:6f:7d:d1:35:
9b:6c:68:e0:82:06:d3:6c:28:b5:b3:1f:2c:58:4f:
f6:72:d1:df:6b:fb:25:7f:39:e9:2b:49:58:c5:ea:
05:70:ac:95:c6:7b:97:3e:46:df:67:e3:f7:ae:5b:
d6:37:b4:4d:d4:69:8f:51:3c:64:ab:d4:f4:a5:48:
e7:43:65:cc:e8:a8:bb:06:42:b9:82:be:6a:7e:3c:
fe:74:0a:29:96:86:a3:0d:81:ee:cf:a3:37:76:60:
93:e7:89:59:c2:eb:1d:8f:aa:3c:75:fa:94:bd:14:
5d:e7:74:ff:6c:72:e1:5d:03:33:3f:e7:7f:b8:a2:
b5:2d:a0:ce:05:e0:cf:2f:b4:1e:be:6f:41:c3:df:
01:3d:ed:d8:0e:0d:ef:53:42:b3:9c:f7:32:10:76:
14:fb:54:24:7c:39:52:85:1a:5c:42:16:f4:03:bd:
58:34:03:e8:d5:ac:e6:19:54:94:3b:e1:1e:af:83:
6e:07:74:80:2a:90:c8:3c:51:d6:3a:e1:cb:5c:c0:
96:a3:a2:39:60:d0:cb:08:ef:46:2a:ac:c1:ca:ae:
84:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:C1:07:B1:58:79:37:74:BF:93:A4:14:6A:41:B7:8F:90:A4:B5:01
X509v3 Authority Key Identifier:
keyid:00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/1-MEHsVh5N3S_k6QUakG3j5CktQE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.19.10.0/24
84.19.13.0/24
84.19.16.0/24
84.19.19.0/24
84.19.22.0/24
84.19.25.0/24
84.19.27.0/24
84.19.31.0/24
91.190.145.0/24
91.190.149.0/24
91.228.105.0/24
91.228.107.0/24
91.230.27.0/24
195.191.114.0/24
195.225.240.0/24
195.225.243.0/24
Signature Algorithm: sha256WithRSAEncryption
14:11:51:d4:d7:62:17:87:b6:9e:1d:51:87:29:39:79:2b:8a:
4b:18:f0:51:45:45:4d:21:84:a3:d4:0b:03:a9:2b:ab:da:a8:
dc:9a:74:1e:9b:7a:0d:55:d8:d3:23:9e:04:18:2d:31:cc:2a:
1d:d5:35:04:28:ed:f4:44:bf:e9:23:3b:c3:76:35:80:4d:14:
2c:f7:cf:45:b4:4e:e3:24:97:6c:e7:20:3e:19:f8:79:bf:db:
a8:89:10:f0:48:30:93:d3:65:c8:26:ee:73:b4:9d:07:98:6d:
9b:c0:69:18:2b:96:aa:ba:2a:59:3f:2c:76:50:46:de:25:d4:
a2:67:cf:01:b2:e5:d2:cf:94:6f:25:ee:35:23:38:fd:d7:41:
bf:61:9c:97:f2:cb:b0:33:b4:6f:4c:7a:31:2f:e3:4f:8e:bd:
4a:a2:ac:66:cf:d7:66:6f:04:5b:50:e0:e4:09:17:c6:34:23:
50:2e:a7:34:ba:d9:36:6b:f7:78:59:ec:7c:f7:9f:4e:97:24:
a9:f9:49:fb:9a:a2:1e:c8:bd:9c:b6:0c:9a:72:7f:25:44:8d:
95:6c:72:1c:44:5d:5d:27:3a:d7:79:e5:0d:4f:43:5c:d0:69:
de:73:ed:ba:62:ad:26:03:7a:e8:af:45:9d:45:68:92:0e:1a:
09:6d:01:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:20:25 2024 by rpki-client on console-ams.rpki-client.org