Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/9HEyvehVezZKRXUYqCyvmmVZcKY.roa
File: 9HEyvehVezZKRXUYqCyvmmVZcKY.roa (raw, json)
Hash identifier: K/pJ8TavMIC4dJFJygfbaNdS6jC8IzggDFEQwxNByRI=
Subject key identifier: F4:71:32:BD:E8:55:7B:36:4A:45:75:18:A8:2C:AF:9A:65:59:70:A6
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 01936261B211E3D0C7897616F9C2E17B83A8
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/9HEyvehVezZKRXUYqCyvmmVZcKY.roa
Signing time: Mon 25 Nov 2024 08:13:09 +0000
ROA not before: Mon 25 Nov 2024 08:13:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48678
IP address blocks: 31.210.48.0/24 maxlen: 24
31.210.50.0/24 maxlen: 24
77.92.143.0/24 maxlen: 24
77.92.145.0/24 maxlen: 24
77.92.146.0/24 maxlen: 24
78.135.66.0/24 maxlen: 24
78.135.92.0/24 maxlen: 24
78.135.93.0/24 maxlen: 24
185.17.139.0/24 maxlen: 24
188.132.129.0/24 maxlen: 24
188.132.130.0/24 maxlen: 24
188.132.153.0/24 maxlen: 24
188.132.165.0/24 maxlen: 24
188.132.168.0/24 maxlen: 24
188.132.183.0/24 maxlen: 24
188.132.184.0/24 maxlen: 24
188.132.185.0/24 maxlen: 24
188.132.186.0/24 maxlen: 24
188.132.199.0/24 maxlen: 24
188.132.201.0/24 maxlen: 24
188.132.202.0/24 maxlen: 24
188.132.234.0/24 maxlen: 24
188.132.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 17:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:62:61:b2:11:e3:d0:c7:89:76:16:f9:c2:e1:7b:83:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Nov 25 08:13:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f47132bde8557b364a457518a82caf9a655970a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:2f:f0:0c:be:6c:13:34:35:65:ff:55:83:07:
a6:22:e6:8e:51:c9:10:11:91:29:13:cb:77:83:2f:
65:b8:04:c6:6f:97:0d:e0:7f:b2:24:b1:9b:9f:4b:
70:09:6b:7f:4d:1d:80:70:34:92:c7:e0:32:d8:02:
8c:b1:4d:16:07:25:e4:2f:b7:52:09:05:b9:ab:bf:
bf:e0:df:4d:43:1e:e7:1e:5a:7c:e8:ed:d1:3d:9b:
ad:43:d8:c5:e7:93:de:e1:f4:77:b5:06:35:da:4c:
f6:4b:f2:42:2d:09:b6:cc:dc:ca:d9:70:7d:eb:51:
0b:3d:6f:fe:20:ca:47:f4:8e:80:fd:ae:02:90:70:
76:96:dc:d1:ce:65:51:8f:ad:8e:d8:de:63:f6:45:
01:99:fa:02:be:1e:e2:eb:67:17:cf:e3:a3:44:95:
3b:b6:f9:65:20:d8:9b:0a:b9:03:94:61:e4:82:13:
9a:dd:90:c1:62:05:f4:76:15:3d:e3:64:e0:df:55:
b3:06:2d:f6:c4:f2:63:47:c0:85:1c:e0:20:f4:45:
8f:a7:d1:31:26:fa:4f:22:52:e7:a9:9d:e1:84:f2:
e2:14:21:2f:3e:fc:e1:21:65:9b:39:76:1a:51:79:
38:50:c1:e5:63:de:97:e6:3a:06:93:27:75:3e:5b:
d9:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:71:32:BD:E8:55:7B:36:4A:45:75:18:A8:2C:AF:9A:65:59:70:A6
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/9HEyvehVezZKRXUYqCyvmmVZcKY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.48.0/24
31.210.50.0/24
77.92.143.0/24
77.92.145.0-77.92.146.255
78.135.66.0/24
78.135.92.0/23
185.17.139.0/24
188.132.129.0-188.132.130.255
188.132.153.0/24
188.132.165.0/24
188.132.168.0/24
188.132.183.0-188.132.186.255
188.132.199.0/24
188.132.201.0-188.132.202.255
188.132.234.0/23
Signature Algorithm: sha256WithRSAEncryption
a3:28:7e:c6:62:e5:94:af:9c:50:fc:85:de:d6:ad:d9:8c:43:
79:08:25:41:12:22:c4:3e:76:cc:80:99:a0:b0:e3:d9:e9:23:
0b:1a:12:31:af:25:5c:db:40:75:bb:79:ff:6b:86:1d:3f:0e:
92:8c:43:62:8f:24:d3:ad:dc:0b:76:05:b6:83:65:a0:29:4b:
55:96:16:92:82:a9:0a:e2:fc:1e:c2:cd:b5:3e:43:97:54:8f:
05:a0:95:38:f1:76:a5:47:63:88:2d:c3:c4:6d:b4:7d:9d:1f:
ec:4b:28:e8:d7:dd:7b:3d:30:98:3e:7a:27:50:f4:78:85:db:
e8:05:e0:ac:40:03:97:da:a1:89:e3:1b:72:de:d9:37:1d:71:
18:8b:55:ab:9c:d8:05:94:f5:76:5b:f7:40:44:43:8a:b6:1a:
56:ee:76:c7:ab:06:d8:e5:5c:2b:49:bf:a4:d0:6f:57:4b:10:
62:fc:f5:30:93:b0:71:80:6a:34:3b:29:78:65:98:db:ba:57:
42:b5:54:b2:36:77:2a:76:9b:09:a2:0b:9c:a5:b3:16:91:98:
f0:56:53:98:5d:21:97:98:31:07:ab:ad:9b:28:98:26:e4:9f:
d7:22:be:4e:1d:6e:56:28:10:ef:aa:b3:79:52:b3:0a:a4:4e:
3d:eb:3d:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 03:10:07 2024 by rpki-client on console-ams.rpki-client.org