Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/33chNy5hhwNsCQJnpFdzIQ8dLjs.roa
File: 33chNy5hhwNsCQJnpFdzIQ8dLjs.roa (raw, json)
Hash identifier: 1hwW4QrMA2HdoYixttcZFbZCqr8LyzoIKqyTly5rL8k=
Subject key identifier: DF:77:21:37:2E:61:87:03:6C:09:02:67:A4:57:73:21:0F:1D:2E:3B
Certificate issuer: /CN=8db34774b01979284fd9e754fea68fa3c61783d0
Certificate serial: 0190CAE059A052BCA888796DC6E5B0DD00FB
Authority key identifier: 8D:B3:47:74:B0:19:79:28:4F:D9:E7:54:FE:A6:8F:A3:C6:17:83:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jbNHdLAZeShP2edU_qaPo8YXg9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/33chNy5hhwNsCQJnpFdzIQ8dLjs.roa
Signing time: Fri 19 Jul 2024 12:03:38 +0000
ROA not before: Fri 19 Jul 2024 12:03:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61220
IP address blocks: 84.54.14.0/24 maxlen: 24
86.104.14.0/24 maxlen: 24
89.43.78.0/24 maxlen: 24
176.98.42.0/24 maxlen: 24
176.98.43.0/24 maxlen: 24
185.81.152.0/24 maxlen: 24
185.81.153.0/24 maxlen: 24
185.81.154.0/24 maxlen: 24
185.81.155.0/24 maxlen: 24
193.31.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.mft
rsync://rpki.ripe.net/repository/DEFAULT/jbNHdLAZeShP2edU_qaPo8YXg9A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:ca:e0:59:a0:52:bc:a8:88:79:6d:c6:e5:b0:dd:00:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8db34774b01979284fd9e754fea68fa3c61783d0
Validity
Not Before: Jul 19 12:03:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=df7721372e6187036c090267a45773210f1d2e3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:00:b8:01:2e:f6:ea:a6:d0:cb:7d:75:96:00:
d9:49:38:ad:c6:89:55:66:8e:16:d8:7e:4b:6c:d9:
1f:7b:16:a5:24:83:65:99:ee:38:90:67:72:af:a9:
bc:b6:10:07:b6:5c:4a:5c:8b:71:26:6d:8d:f8:73:
fb:70:90:43:6f:e1:56:f4:26:1e:78:4a:e7:84:ae:
08:2f:be:77:0d:82:5f:d3:12:f7:9a:1c:4b:d6:8b:
c4:54:3c:d0:80:58:82:24:89:8b:f4:73:ac:6c:0d:
f1:90:5b:c5:fb:63:da:f6:3d:e1:dd:aa:c8:a5:63:
25:5f:ed:0e:4e:af:58:c7:69:46:03:5a:f6:10:86:
15:37:41:42:1d:41:41:0b:07:88:b7:4a:e3:77:31:
07:3d:f2:3b:1b:21:54:a7:45:73:50:9f:f2:6c:30:
3b:d0:ad:a9:4e:59:b9:d3:7f:ae:9b:fc:cd:5e:3c:
ab:39:4f:3a:2d:9f:48:a1:0d:1c:8b:ba:6b:80:d4:
02:e3:57:33:b3:66:69:58:50:12:72:f9:1e:00:15:
04:33:18:42:70:6a:1a:40:62:d2:6d:5f:12:f9:c1:
4d:55:05:8a:67:7a:1d:da:a2:46:a3:9f:57:d7:dd:
29:72:b1:59:27:94:38:88:81:26:1e:da:80:3b:46:
a4:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:77:21:37:2E:61:87:03:6C:09:02:67:A4:57:73:21:0F:1D:2E:3B
X509v3 Authority Key Identifier:
keyid:8D:B3:47:74:B0:19:79:28:4F:D9:E7:54:FE:A6:8F:A3:C6:17:83:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jbNHdLAZeShP2edU_qaPo8YXg9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/33chNy5hhwNsCQJnpFdzIQ8dLjs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.54.14.0/24
86.104.14.0/24
89.43.78.0/24
176.98.42.0/23
185.81.152.0/22
193.31.119.0/24
Signature Algorithm: sha256WithRSAEncryption
e5:74:7f:42:be:08:0b:88:b9:1e:45:79:10:b1:03:be:6c:f0:
06:3c:15:7c:39:f1:60:d5:29:b5:be:57:ae:fe:25:e6:20:d7:
16:f4:be:7c:0a:f8:08:cf:c7:ff:b7:c8:14:f7:cc:2f:64:f7:
50:86:e2:5c:50:fc:c0:7e:bf:23:ab:2d:b8:d5:7d:b8:63:e3:
cf:55:4b:09:29:89:da:16:11:ec:ad:3b:4d:5c:da:a3:a3:ab:
3a:d5:0c:80:41:5e:8a:f5:c0:40:16:54:67:bb:55:4d:cc:a7:
39:cf:4e:ef:5c:b2:19:ef:5a:5e:a5:06:df:db:ae:1e:81:5c:
9b:ef:7b:61:12:11:7a:48:78:61:be:8f:d6:90:74:ae:d5:18:
f5:b5:ff:26:00:8e:d5:aa:e5:43:64:18:c3:0c:33:12:fe:08:
93:31:20:ed:43:11:3b:c0:c2:39:c5:86:03:6d:3e:90:b7:78:
1e:93:7f:e7:fa:da:3d:5c:b0:f2:39:7b:17:db:56:a4:b9:f0:
95:38:25:1d:6a:ab:3e:e3:17:71:2d:0f:f2:26:3a:7c:f2:af:
d0:cc:1f:00:33:db:31:34:19:12:4e:c3:c2:07:0b:c3:ce:b1:
98:6d:9b:80:07:d9:34:23:af:dc:99:20:6a:a1:45:f3:aa:38:
6a:76:fb:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:16:35 2024 by rpki-client on console-ams.rpki-client.org