Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/f891c4-19ac-437c-b782-e1487a54c1e5/1/7HQmaY0WiQ6cg0X-D3xkK-ycUKg.roa
File: 7HQmaY0WiQ6cg0X-D3xkK-ycUKg.roa (raw, json)
Hash identifier: VUKyNVgFmuK6qGHYPYX6H+JoOaHBoXGXSgxpfDGrs+k=
Subject key identifier: EC:74:26:69:8D:16:89:0E:9C:83:45:FE:0F:7C:64:2B:EC:9C:50:A8
Certificate issuer: /CN=94a32e445c24ded9b85212d479b88008165ebdba
Certificate serial: 018D64A8BC361754047C2B3ACE4E5E73E0F9
Authority key identifier: 94:A3:2E:44:5C:24:DE:D9:B8:52:12:D4:79:B8:80:08:16:5E:BD:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lKMuRFwk3tm4UhLUebiACBZevbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/f891c4-19ac-437c-b782-e1487a54c1e5/1/7HQmaY0WiQ6cg0X-D3xkK-ycUKg.roa
Signing time: Thu 01 Feb 2024 12:33:16 +0000
ROA not before: Thu 01 Feb 2024 12:33:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29608
IP address blocks: 37.60.152.0/21 maxlen: 21
79.143.240.0/20 maxlen: 20
178.20.64.0/21 maxlen: 21
185.101.208.0/22 maxlen: 22
185.152.24.0/22 maxlen: 22
185.152.24.0/23 maxlen: 23
185.152.26.0/23 maxlen: 23
185.170.80.0/22 maxlen: 22
185.226.48.0/22 maxlen: 22
193.30.224.0/22 maxlen: 22
193.46.252.0/24 maxlen: 24
193.47.70.0/24 maxlen: 24
193.47.75.0/24 maxlen: 24
193.47.86.0/24 maxlen: 24
193.239.192.0/23 maxlen: 23
2a01:678::/29 maxlen: 29
2a01:40c0::/29 maxlen: 29
2a07:81c0::/29 maxlen: 29
2a0f:8340::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/f891c4-19ac-437c-b782-e1487a54c1e5/1/lKMuRFwk3tm4UhLUebiACBZevbo.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/f891c4-19ac-437c-b782-e1487a54c1e5/1/lKMuRFwk3tm4UhLUebiACBZevbo.mft
rsync://rpki.ripe.net/repository/DEFAULT/lKMuRFwk3tm4UhLUebiACBZevbo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:02:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:64:a8:bc:36:17:54:04:7c:2b:3a:ce:4e:5e:73:e0:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94a32e445c24ded9b85212d479b88008165ebdba
Validity
Not Before: Feb 1 12:33:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ec7426698d16890e9c8345fe0f7c642bec9c50a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c5:6e:83:d7:3a:1a:18:a8:b7:96:b3:88:30:
a6:18:2a:7c:b3:eb:82:02:c2:c5:ba:17:4d:ca:42:
13:48:02:1b:6c:20:0e:8b:e6:28:06:97:f1:98:7f:
0a:52:8e:4f:e2:29:83:49:4d:31:0e:f1:e1:3e:d7:
b4:e2:9d:4c:de:5a:43:e4:95:f7:d3:b0:3c:e8:a8:
ee:a2:e5:87:a4:35:a3:36:3b:fb:b7:64:34:99:c3:
e2:cb:66:5f:61:57:ca:06:9d:c8:4a:2d:52:65:09:
9e:ee:a5:a7:6a:39:66:ed:4c:6d:70:3e:52:5b:48:
4d:e7:27:64:a7:0d:91:3f:6b:1a:94:3a:fc:48:ae:
2f:3e:f3:45:f2:6f:e7:7d:74:87:82:9d:f4:53:39:
3c:42:30:6d:9e:a9:a4:82:70:22:96:38:c1:c0:9e:
93:d8:44:4a:86:a7:8b:21:bd:bd:71:76:db:b6:1a:
0e:ef:76:5f:4b:5e:03:c6:f6:d9:c4:15:cd:61:6b:
1f:d7:d5:33:05:9d:d7:1c:63:ef:ad:60:be:66:f1:
7f:e5:99:a1:98:a4:d3:3d:11:86:8c:54:cf:51:be:
c2:94:d4:26:04:d5:9a:da:f4:55:6c:0e:89:5a:14:
2e:b3:8b:b9:4e:76:dd:e8:47:ee:69:2a:17:7a:52:
c7:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:74:26:69:8D:16:89:0E:9C:83:45:FE:0F:7C:64:2B:EC:9C:50:A8
X509v3 Authority Key Identifier:
keyid:94:A3:2E:44:5C:24:DE:D9:B8:52:12:D4:79:B8:80:08:16:5E:BD:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lKMuRFwk3tm4UhLUebiACBZevbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f891c4-19ac-437c-b782-e1487a54c1e5/1/7HQmaY0WiQ6cg0X-D3xkK-ycUKg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f891c4-19ac-437c-b782-e1487a54c1e5/1/lKMuRFwk3tm4UhLUebiACBZevbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.60.152.0/21
79.143.240.0/20
178.20.64.0/21
185.101.208.0/22
185.152.24.0/22
185.170.80.0/22
185.226.48.0/22
193.30.224.0/22
193.46.252.0/24
193.47.70.0/24
193.47.75.0/24
193.47.86.0/24
193.239.192.0/23
IPv6:
2a01:678::/29
2a01:40c0::/29
2a07:81c0::/29
2a0f:8340::/29
Signature Algorithm: sha256WithRSAEncryption
19:60:78:0d:bb:7f:43:df:39:fb:31:9d:57:15:85:07:a9:01:
86:ee:f7:fc:68:b8:d6:ea:4e:c9:a1:cb:dd:c2:40:76:ba:e6:
a3:30:4a:2d:9c:41:2a:12:55:40:5f:5e:9c:9d:14:ec:04:55:
63:24:81:d2:9b:cd:6f:5d:87:2b:e7:b9:0d:06:1f:bb:a7:1c:
2c:03:85:75:c0:5f:26:c4:3b:c3:23:3a:d1:04:bf:f3:d9:9b:
12:0b:fb:15:d7:20:8f:32:31:c6:d6:61:57:57:36:86:69:92:
64:fa:ef:69:f2:15:9f:a2:10:36:1b:9a:d6:a0:7c:f5:0b:d5:
f9:57:85:e3:ea:01:69:ed:9a:5b:92:49:be:e7:61:81:97:f7:
ab:84:16:70:23:49:21:27:70:50:1e:78:35:2f:36:4e:bb:86:
e8:51:e6:2b:a5:e1:24:d9:fd:58:2d:34:88:d1:52:d8:a2:f4:
b3:ea:98:fd:e0:9d:0a:85:96:91:7d:92:a4:00:a3:1f:74:3c:
85:78:5c:24:14:36:97:87:b9:b2:bd:36:5c:a4:61:20:fe:4f:
4c:53:53:3b:48:a9:4a:c8:18:fc:72:bf:9b:32:47:c5:68:20:
9d:11:6e:bc:06:2d:cc:8d:ec:5c:a8:54:00:46:d0:0a:9e:84:
18:30:11:44
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:38:40 2024 by rpki-client on console-ams.rpki-client.org