Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/90v0nQ7L-k1A_w98RHS4hv5mJoE.roa
File: 90v0nQ7L-k1A_w98RHS4hv5mJoE.roa (raw, json)
Hash identifier: Hiv14erj7b8LFY4jjmzRPQjqHcx1ga6R5Sk/lpO9/9k=
Subject key identifier: F7:4B:F4:9D:0E:CB:FA:4D:40:FF:0F:7C:44:74:B8:86:FE:66:26:81
Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Certificate serial: 018CC794EA7488D3F78FAD7713DCB42A1053
Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/90v0nQ7L-k1A_w98RHS4hv5mJoE.roa
Signing time: Tue 02 Jan 2024 00:31:14 +0000
ROA not before: Tue 02 Jan 2024 00:31:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 22773
IP address blocks: 193.142.36.0/22 maxlen: 24
91.132.124.0/23 maxlen: 24
212.87.216.0/24 maxlen: 24
194.180.232.0/23 maxlen: 24
212.87.218.0/23 maxlen: 24
194.180.236.0/23 maxlen: 24
45.133.112.0/22 maxlen: 24
45.147.8.0/22 maxlen: 24
45.136.24.0/22 maxlen: 24
45.147.232.0/22 maxlen: 24
93.177.94.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:ea:74:88:d3:f7:8f:ad:77:13:dc:b4:2a:10:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Validity
Not Before: Jan 2 00:31:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f74bf49d0ecbfa4d40ff0f7c4474b886fe662681
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:33:63:27:60:8d:b5:67:a4:49:52:49:d9:f7:
79:7b:71:80:61:6a:44:32:b7:98:f1:9d:cc:b5:69:
5f:a7:48:38:2a:f5:b1:f2:c4:e6:12:6a:3c:9b:eb:
08:51:e0:3c:79:b7:39:d8:c6:97:aa:1d:50:e5:de:
aa:9d:0d:6a:d1:9d:26:45:e1:e6:29:b1:4d:5b:96:
71:4a:4a:62:6f:9a:b6:d2:0f:f8:b7:02:e6:14:b1:
94:4e:d4:73:c7:69:95:ea:d1:99:a1:f9:c1:c2:65:
26:1e:54:df:5d:b7:db:4a:e2:aa:a8:a4:92:0e:45:
71:75:6e:15:01:ff:c2:98:b7:8b:92:a1:03:99:8a:
21:c0:34:a4:aa:5b:5c:82:44:2c:e1:ae:2c:fa:5a:
ac:de:4e:24:a4:07:e0:c5:f1:c8:bf:ad:cb:42:72:
11:e2:e5:00:e7:ef:1e:f7:b5:bd:0d:23:f5:71:96:
74:31:c5:6d:0e:af:8c:8c:8e:2b:4f:01:9a:36:eb:
ea:81:51:96:3d:cf:9e:55:96:0c:83:f5:2c:96:65:
e6:0c:50:f9:c8:95:7b:20:5e:f3:0d:83:3d:7a:6a:
02:2c:fa:90:c7:a0:39:2f:5a:0d:eb:d6:e0:2d:49:
40:4e:8c:2f:b3:f3:77:22:11:00:d5:72:53:83:25:
04:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:4B:F4:9D:0E:CB:FA:4D:40:FF:0F:7C:44:74:B8:86:FE:66:26:81
X509v3 Authority Key Identifier:
keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/90v0nQ7L-k1A_w98RHS4hv5mJoE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.112.0/22
45.136.24.0/22
45.147.8.0/22
45.147.232.0/22
91.132.124.0/23
93.177.94.0/23
193.142.36.0/22
194.180.232.0/23
194.180.236.0/23
212.87.216.0/24
212.87.218.0/23
Signature Algorithm: sha256WithRSAEncryption
6f:f1:d9:b3:c7:d9:7b:ef:64:49:b6:94:ef:a3:15:3b:81:ed:
89:e9:b2:de:18:eb:79:a9:b1:15:52:5a:af:ae:bc:c7:77:99:
61:f9:0c:af:6c:34:2d:cd:59:64:b8:aa:45:1f:8a:23:23:b2:
09:e8:93:ac:66:23:ea:1f:35:8a:ce:1f:7a:db:bd:7e:4d:65:
31:d1:2d:27:9c:33:10:c4:a0:2e:a4:ba:58:27:9c:ed:2a:31:
ec:50:ad:e9:e0:58:e3:d0:11:b9:48:a8:82:64:90:59:c2:6f:
da:16:13:19:43:af:ef:c0:23:e6:13:c5:86:64:25:78:1d:95:
6a:16:d5:fa:cf:4f:95:51:7e:57:4b:b8:3b:7d:08:d9:47:65:
72:96:ac:0b:91:02:c5:12:85:0c:b3:e6:67:fe:28:e9:74:f6:
21:2b:b8:e8:24:8b:3a:d6:6f:de:58:d7:e4:ad:5f:de:bc:dc:
ff:4a:15:54:fb:5d:db:f5:da:40:b5:b7:8c:ab:2e:a8:4f:f5:
46:e5:be:d2:43:0c:97:d9:0e:75:16:a2:7e:67:da:92:5d:ef:
c6:3c:ef:da:13:ce:ee:8e:ed:3d:ee:bb:16:58:d3:18:6a:0e:
a0:af:eb:62:16:43:10:af:8f:af:10:6f:f0:24:b3:38:85:f0:
bb:89:1b:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 22:21:14 2024 by rpki-client on console-ams.rpki-client.org