Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/787no0U6EG2sMe8WyGfIrV-dAgE.roa
File: 787no0U6EG2sMe8WyGfIrV-dAgE.roa (raw, json)
Hash identifier: JMOgO+hfeHEKdeTVaTQ4HZ0wAwhyh7QeIKoS19MGWDs=
Subject key identifier: EF:CE:E7:A3:45:3A:10:6D:AC:31:EF:16:C8:67:C8:AD:5F:9D:02:01
Certificate issuer: /CN=74e3c336972094b1a8c13d41816857d197a3aae9
Certificate serial: 019081CEE652FEF4B6134CC0285F7887677C
Authority key identifier: 74:E3:C3:36:97:20:94:B1:A8:C1:3D:41:81:68:57:D1:97:A3:AA:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/787no0U6EG2sMe8WyGfIrV-dAgE.roa
Signing time: Fri 05 Jul 2024 07:32:18 +0000
ROA not before: Fri 05 Jul 2024 07:32:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12963
IP address blocks: 91.218.72.0/24 maxlen: 24
91.218.73.0/24 maxlen: 24
91.218.74.0/24 maxlen: 24
91.218.75.0/24 maxlen: 24
94.247.224.0/21 maxlen: 21
94.247.224.0/23 maxlen: 23
176.97.0.0/23 maxlen: 23
176.97.2.0/24 maxlen: 24
176.97.3.0/24 maxlen: 24
176.97.4.0/22 maxlen: 22
185.192.216.0/22 maxlen: 22
194.183.160.0/19 maxlen: 19
194.183.160.0/24 maxlen: 24
213.160.128.0/19 maxlen: 19
2a00:9880::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:81:ce:e6:52:fe:f4:b6:13:4c:c0:28:5f:78:87:67:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74e3c336972094b1a8c13d41816857d197a3aae9
Validity
Not Before: Jul 5 07:32:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=efcee7a3453a106dac31ef16c867c8ad5f9d0201
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:b8:c7:d3:c4:88:81:bc:40:5b:df:f9:0d:3b:
27:bc:46:2e:23:33:c1:a1:54:73:fe:5a:d8:12:d5:
4a:72:4d:76:c7:75:37:45:c7:4c:06:31:60:57:59:
e2:0d:05:63:f5:5c:7a:e0:0d:85:d6:cd:52:3f:ae:
91:59:ca:39:eb:a8:bc:fd:72:cc:a9:fb:e8:67:5b:
6a:90:74:8d:4e:62:b9:05:e5:8a:03:37:c9:1b:24:
4d:e9:96:21:64:f9:ed:59:67:d5:7a:56:40:75:54:
a4:43:53:91:8c:7d:81:34:5e:87:92:0d:ff:ed:bf:
ef:5b:83:b9:d5:2c:ae:1d:84:fc:05:0b:50:05:a0:
ba:71:f2:78:b0:5e:41:eb:53:8c:ca:73:c1:50:84:
fa:14:4e:24:b3:53:a3:e3:a7:2b:80:9b:57:52:11:
65:d8:68:52:a0:21:c1:a6:4e:a9:50:b6:6e:cf:e1:
cc:9d:37:6e:42:43:a7:06:f5:9b:7a:da:58:7a:ea:
ae:ef:da:3b:eb:5a:a9:4e:67:c9:c8:78:ef:de:c6:
11:d5:42:d8:da:76:33:eb:7b:97:44:f5:ff:79:77:
2c:be:85:17:e6:d8:d6:40:a0:1a:18:47:74:fb:2c:
bd:97:ab:38:b9:fc:73:8d:db:dc:95:82:02:28:ad:
e3:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:CE:E7:A3:45:3A:10:6D:AC:31:EF:16:C8:67:C8:AD:5F:9D:02:01
X509v3 Authority Key Identifier:
keyid:74:E3:C3:36:97:20:94:B1:A8:C1:3D:41:81:68:57:D1:97:A3:AA:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/787no0U6EG2sMe8WyGfIrV-dAgE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.218.72.0/22
94.247.224.0/21
176.97.0.0/21
185.192.216.0/22
194.183.160.0/19
213.160.128.0/19
IPv6:
2a00:9880::/32
Signature Algorithm: sha256WithRSAEncryption
65:ef:89:3a:61:e6:12:a7:8b:b3:da:2e:28:4b:79:c7:69:f0:
50:84:67:06:53:b8:92:36:1b:11:5e:06:a6:1e:0a:8c:42:3f:
68:6f:74:84:cb:21:46:9f:bf:fc:e2:f3:09:6f:b5:a3:a1:1d:
6b:5e:31:76:d3:06:c6:9c:a7:12:dc:66:5d:c3:b5:f9:07:71:
3f:b5:74:4c:64:3b:89:5f:ec:9e:ab:82:a3:e2:1f:c8:6a:51:
f5:ea:57:08:c6:75:d4:09:48:92:65:fc:1f:fb:00:4a:8a:ef:
33:cd:f3:d2:11:61:0a:c7:14:87:ad:a0:75:6e:fd:5c:21:82:
4f:54:1a:58:40:53:05:0f:67:c4:cf:79:be:36:32:f6:6c:fe:
d9:2c:4b:fb:9f:f3:71:17:5e:c5:a4:6a:fa:a7:ad:2d:8b:34:
5f:7d:50:76:6e:4a:2b:d1:2a:a0:df:41:49:b8:85:1c:ea:67:
28:8d:14:c2:5a:6c:95:3b:b5:39:e1:fb:bf:02:0e:eb:ff:13:
29:92:75:65:5e:19:e7:56:1e:9c:13:4c:98:e1:4f:5f:e3:de:
69:42:41:ae:7c:8c:3a:df:e2:41:8a:6b:69:4a:f2:92:b2:f0:
35:f7:de:f6:e8:f7:6b:be:14:22:c2:fb:41:92:d0:d1:de:0f:
52:73:d8:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:38:28 2024 by rpki-client on console-ams.rpki-client.org