Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/6pbRX-fX7eF6-KvBcwpCC-xB4-4.roa
File: 6pbRX-fX7eF6-KvBcwpCC-xB4-4.roa (raw, json)
Hash identifier: N09+YD1RTndu2E0+Uu1GwBHZeP9Q9jRXnal/cDLzs04=
Subject key identifier: EA:96:D1:5F:E7:D7:ED:E1:7A:F8:AB:C1:73:0A:42:0B:EC:41:E3:EE
Certificate issuer: /CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
Certificate serial: 018FBE3CBCC574D7B5FC2A868AF7D0509FD4
Authority key identifier: 29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/6pbRX-fX7eF6-KvBcwpCC-xB4-4.roa
Signing time: Tue 28 May 2024 08:06:42 +0000
ROA not before: Tue 28 May 2024 08:06:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47637
IP address blocks: 37.114.37.0/24 maxlen: 24
37.114.41.0/24 maxlen: 24
94.154.49.0/24 maxlen: 24
176.100.32.0/21 maxlen: 32
176.100.33.0/24 maxlen: 24
176.100.36.0/24 maxlen: 24
176.100.37.0/24 maxlen: 24
2a00:ccc4::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 12:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:be:3c:bc:c5:74:d7:b5:fc:2a:86:8a:f7:d0:50:9f:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
Validity
Not Before: May 28 08:06:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ea96d15fe7d7ede17af8abc1730a420bec41e3ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:82:48:1e:f7:7e:fc:1a:f4:e7:91:83:2c:9e:
30:f4:0e:c1:07:d5:8c:a5:3c:53:3e:c5:0d:d6:f0:
27:ca:b9:a7:8a:03:bb:93:4c:d9:b1:a8:5e:d5:78:
d5:e5:33:f3:a5:6b:cc:fb:0f:99:e5:e2:87:e0:55:
7b:c5:63:62:5a:78:f8:fa:e6:e9:79:ad:d8:b5:91:
d0:5c:ab:dd:29:f9:76:ef:f5:a5:8c:96:ce:ce:72:
23:85:82:a0:13:b3:e0:13:68:df:db:87:a1:56:9b:
0b:4f:3b:d6:59:76:0e:d7:f1:3b:6f:21:35:ea:2a:
11:a5:64:1a:54:80:6c:2d:7e:68:9a:4d:0c:d1:06:
58:60:25:1c:9d:1c:e7:7a:47:43:b2:ae:fc:57:f9:
70:74:46:14:e5:4a:c6:94:12:71:78:9c:2e:48:fd:
ed:9b:b9:26:5f:82:1a:ef:da:f5:84:4f:6b:0d:fd:
70:0c:38:e4:d6:4e:75:73:91:fd:a3:c5:b4:cf:7a:
4a:bb:19:d7:b0:74:ba:25:c7:e8:30:cb:51:66:50:
01:c9:d1:86:83:4f:49:43:16:da:36:a4:d6:ef:25:
1a:9a:4f:51:92:f2:39:24:18:de:79:72:fe:1e:e3:
c1:2e:ba:6b:cc:06:b1:31:a8:d8:8b:61:2d:02:91:
97:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:96:D1:5F:E7:D7:ED:E1:7A:F8:AB:C1:73:0A:42:0B:EC:41:E3:EE
X509v3 Authority Key Identifier:
keyid:29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/6pbRX-fX7eF6-KvBcwpCC-xB4-4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.114.37.0/24
37.114.41.0/24
94.154.49.0/24
176.100.32.0/21
IPv6:
2a00:ccc4::/32
Signature Algorithm: sha256WithRSAEncryption
02:ae:7e:2f:e1:b7:8d:c4:72:36:70:a0:7b:09:1b:5a:c4:1b:
23:54:94:88:3c:ec:34:b5:71:d6:ce:5d:6c:f1:95:2d:67:bb:
58:3e:d0:89:f5:c8:cc:ad:89:e5:1d:b7:06:c8:5e:66:12:f1:
7d:cd:c1:11:23:e3:e7:a2:f2:21:30:e3:ca:50:61:1e:d7:ea:
04:4a:15:53:15:fa:09:c0:73:9a:f4:e2:e7:24:d7:14:ae:cc:
fc:67:19:ea:6e:d6:db:b0:69:59:1a:19:76:cc:ac:97:8e:91:
62:fa:85:63:31:b7:14:6f:cd:f4:53:be:b4:0c:17:9d:27:b3:
45:2b:d8:7a:d5:ee:a1:f1:a1:de:f6:d1:2d:fc:6a:d3:c0:97:
44:1e:33:25:00:7d:f8:66:d4:f3:10:4f:80:29:5b:f7:09:c7:
db:db:9a:6f:c7:ac:e6:df:8e:88:13:cd:6e:8e:ad:95:d2:db:
2b:ab:22:96:56:9f:95:ba:69:f4:df:94:ff:be:75:84:8c:10:
4c:0e:8a:c7:22:a4:7f:2d:9e:a0:de:41:c4:10:19:1d:1b:45:
6a:c9:d6:3f:e2:26:34:10:f3:24:0c:dc:04:c1:bb:67:5b:4c:
85:41:f5:9a:ee:91:2d:53:5f:a3:3e:9b:70:80:e4:a7:44:33:
3a:35:79:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 16:16:21 2024 by rpki-client on console-fra.rpki-client.org