Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/SRwNPkQ3m9gWuYofoZk7Iz07Arc.roa
File: SRwNPkQ3m9gWuYofoZk7Iz07Arc.roa (raw, json)
Hash identifier: eDFYPu1ynjybAg6RPjJgVOSxB2X5pJBsXhfzYgqCVsg=
Subject key identifier: 49:1C:0D:3E:44:37:9B:D8:16:B9:8A:1F:A1:99:3B:23:3D:3B:02:B7
Certificate issuer: /CN=76a75826e991225a429ff8a1e7ffdc80466420df
Certificate serial: 018CC801374CAA4AD2016E03124476FA065C
Authority key identifier: 76:A7:58:26:E9:91:22:5A:42:9F:F8:A1:E7:FF:DC:80:46:64:20:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dqdYJumRIlpCn_ih5__cgEZkIN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/SRwNPkQ3m9gWuYofoZk7Iz07Arc.roa
Signing time: Tue 02 Jan 2024 02:29:32 +0000
ROA not before: Tue 02 Jan 2024 02:29:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60824
IP address blocks: 129.233.192.0/24 maxlen: 24
129.233.194.0/23 maxlen: 23
129.233.193.0/24 maxlen: 24
129.233.196.0/24 maxlen: 24
192.44.7.0/24 maxlen: 24
153.96.60.0/24 maxlen: 24
192.44.14.0/24 maxlen: 24
192.44.16.0/24 maxlen: 24
153.96.70.0/23 maxlen: 23
192.44.22.0/24 maxlen: 24
192.44.19.0/24 maxlen: 24
153.96.72.0/22 maxlen: 22
192.44.27.0/24 maxlen: 24
153.96.88.0/22 maxlen: 22
153.96.28.0/22 maxlen: 22
192.107.236.0/24 maxlen: 24
192.107.235.0/24 maxlen: 24
153.96.32.0/21 maxlen: 21
153.96.204.0/23 maxlen: 23
153.96.206.0/24 maxlen: 24
153.96.114.0/23 maxlen: 23
153.96.128.0/22 maxlen: 22
194.113.96.0/22 maxlen: 22
2a03:db80:4810::/48 maxlen: 48
2a03:db80:4814::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dqdYJumRIlpCn_ih5__cgEZkIN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:37:4c:aa:4a:d2:01:6e:03:12:44:76:fa:06:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76a75826e991225a429ff8a1e7ffdc80466420df
Validity
Not Before: Jan 2 02:29:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=491c0d3e44379bd816b98a1fa1993b233d3b02b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:da:50:a7:51:3a:60:47:19:35:aa:7e:c6:2f:
c3:11:bd:ff:9a:d9:e6:9f:ae:71:9a:9e:39:ec:05:
2f:ca:8f:eb:0b:6a:50:71:78:ae:8b:75:97:a3:c8:
60:07:99:b9:48:ee:10:e1:88:af:b5:16:e6:c8:c3:
18:3d:c5:70:fd:8f:b2:41:79:06:38:ab:fd:d1:3b:
90:e3:8e:1b:e1:7a:cb:a5:0d:ff:04:d8:d2:d5:ad:
42:26:0c:f6:99:e9:90:d6:4c:b5:3f:62:36:44:25:
2d:a4:0d:6d:41:b4:ae:8d:58:f6:f7:b6:ba:b8:8b:
bf:88:4f:30:ff:5f:65:0f:48:dd:ab:84:5b:10:4b:
8f:d7:49:51:57:84:b6:b6:fc:55:a4:47:5b:24:70:
8b:72:e2:89:bf:c3:75:18:a8:89:98:9c:22:7b:03:
84:a8:a5:a8:20:33:aa:dd:ca:6d:f2:01:f5:9f:1b:
83:ca:18:c0:5d:85:3b:e0:b6:ff:54:ce:3c:74:e7:
9d:04:b8:37:05:1d:58:4b:df:50:5e:c8:e7:b2:d1:
48:45:82:dc:f9:44:0a:25:e3:29:d7:ce:c7:8f:2b:
28:cf:b8:d0:4c:98:66:22:fa:95:cb:a5:d2:de:e1:
c7:a9:1b:04:da:a6:3e:dc:66:5b:c1:e9:60:41:46:
0b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:1C:0D:3E:44:37:9B:D8:16:B9:8A:1F:A1:99:3B:23:3D:3B:02:B7
X509v3 Authority Key Identifier:
keyid:76:A7:58:26:E9:91:22:5A:42:9F:F8:A1:E7:FF:DC:80:46:64:20:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dqdYJumRIlpCn_ih5__cgEZkIN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/SRwNPkQ3m9gWuYofoZk7Iz07Arc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
129.233.192.0-129.233.196.255
153.96.28.0-153.96.39.255
153.96.60.0/24
153.96.70.0-153.96.75.255
153.96.88.0/22
153.96.114.0/23
153.96.128.0/22
153.96.204.0-153.96.206.255
192.44.7.0/24
192.44.14.0/24
192.44.16.0/24
192.44.19.0/24
192.44.22.0/24
192.44.27.0/24
192.107.235.0-192.107.236.255
194.113.96.0/22
IPv6:
2a03:db80:4810::/48
2a03:db80:4814::/48
Signature Algorithm: sha256WithRSAEncryption
27:6b:23:9d:7f:85:b4:fb:c6:24:67:5d:3b:3e:40:2e:11:81:
43:04:03:07:2d:58:ab:6a:21:f5:0b:d8:e7:b5:f7:61:ff:68:
aa:1a:c9:8b:90:dd:06:0a:26:ab:f2:33:5e:f0:ac:83:58:dc:
f1:47:1c:35:58:56:b9:e2:40:3b:df:39:eb:10:b9:d9:a7:11:
88:92:06:ee:fe:2f:36:4e:9e:ae:00:1a:ef:c4:52:97:7c:b4:
b9:0d:bb:6e:20:38:af:07:62:d3:40:34:3e:1e:48:56:90:08:
1f:4c:b4:af:76:af:dd:76:21:fb:db:08:41:06:8f:43:6d:d3:
68:d2:bb:82:63:97:29:8e:19:82:3c:d6:50:e6:f3:77:cc:95:
3f:7d:7f:cf:97:0c:42:a4:5e:9c:0a:8c:75:de:41:b3:e0:5e:
9e:6b:b4:9c:26:92:f4:5c:7d:22:62:60:9f:7f:76:13:16:bf:
48:69:e9:04:43:79:19:38:ef:0a:51:03:06:49:be:6f:b0:87:
bd:f0:8b:91:7c:8b:f9:7a:47:2e:91:f0:72:a0:0d:b3:fe:43:
db:13:1d:0b:4a:90:38:08:31:9e:ec:96:25:52:5e:96:a0:fd:
6c:c3:9f:44:a7:1c:5b:8a:d3:1d:07:e2:fc:71:68:3c:df:91:
14:5a:66:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 18:19:35 2024 by rpki-client on console-ams.rpki-client.org