Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/E0FgsjNb_ZJCw5UCvdSSnZ0ljiw.roa
File: E0FgsjNb_ZJCw5UCvdSSnZ0ljiw.roa (raw, json)
Hash identifier: 3L9S4iBumfuFGoEDNj7u5ap4TrtRItPGXpBEtSnp9/M=
Subject key identifier: 13:41:60:B2:33:5B:FD:92:42:C3:95:02:BD:D4:92:9D:9D:25:8E:2C
Certificate issuer: /CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
Certificate serial: 019290CF840D432D704854D365947D356395
Authority key identifier: 29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/E0FgsjNb_ZJCw5UCvdSSnZ0ljiw.roa
Signing time: Tue 15 Oct 2024 15:32:51 +0000
ROA not before: Tue 15 Oct 2024 15:32:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58087
IP address blocks: 37.114.37.0/24 maxlen: 24
37.114.46.0/24 maxlen: 24
37.114.50.0/24 maxlen: 24
37.114.63.0/24 maxlen: 24
176.100.39.0/24 maxlen: 24
185.14.92.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 12:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:90:cf:84:0d:43:2d:70:48:54:d3:65:94:7d:35:63:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
Validity
Not Before: Oct 15 15:32:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=134160b2335bfd9242c39502bdd4929d9d258e2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c2:52:53:87:c5:2c:b6:b3:af:1b:bc:42:76:
99:83:a8:84:43:10:bb:db:f4:fb:58:23:b0:be:15:
7c:a3:3a:65:fb:69:63:00:8e:fc:ca:dd:aa:17:68:
be:d8:a3:77:87:3e:bc:9e:0c:30:6a:d9:42:4a:0a:
a7:23:bc:bd:07:ce:bd:43:38:63:6f:e8:9f:e0:25:
97:25:dd:44:64:36:82:a6:b1:2c:3a:79:46:90:48:
06:cd:ad:b0:ac:02:97:c0:d9:88:c7:3e:56:aa:eb:
0c:3f:63:4d:6c:96:10:a5:e0:78:b7:f8:a7:99:a0:
a2:5c:dd:bb:1e:09:1a:2b:f6:65:2c:19:a8:54:3b:
76:71:f1:21:e4:3c:31:2a:4a:bc:93:4c:41:93:c1:
3e:2e:2b:06:7a:74:6a:83:a2:bc:d5:ff:3f:ec:82:
d3:b9:2d:5c:7d:b2:c3:a3:5d:de:a1:bc:30:b7:9d:
d5:11:1e:ee:2e:00:e6:f1:70:f2:e4:01:ed:44:94:
7c:7a:65:05:51:23:49:25:47:ad:4e:e9:a9:4c:81:
21:74:06:b0:b2:75:53:5f:62:57:f0:1a:86:b3:6b:
05:16:8f:6c:f9:8d:88:23:bf:02:47:07:31:ac:ad:
e6:c9:7a:d7:7c:2e:35:96:8e:61:0c:a3:76:98:c0:
2a:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:41:60:B2:33:5B:FD:92:42:C3:95:02:BD:D4:92:9D:9D:25:8E:2C
X509v3 Authority Key Identifier:
keyid:29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/E0FgsjNb_ZJCw5UCvdSSnZ0ljiw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.114.37.0/24
37.114.46.0/24
37.114.50.0/24
37.114.63.0/24
176.100.39.0/24
185.14.92.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:70:0e:5f:b0:4a:2b:f9:34:db:32:c3:d8:21:72:30:b5:51:
0a:07:60:25:3c:7b:65:78:5e:fb:c2:59:dc:f2:de:ac:1d:ef:
e6:45:b1:b0:5c:a0:db:15:b6:00:c8:2b:f6:48:2d:55:cc:31:
32:cc:5a:d3:5f:b0:81:af:ef:02:20:0b:98:e2:7c:cb:a0:4f:
ed:14:aa:4e:d1:b2:d1:d2:d2:1e:39:73:53:26:06:0d:78:82:
75:81:83:a1:2b:6f:d1:18:af:60:d4:6b:a8:1f:e7:1c:c3:b6:
af:87:fb:89:e6:9b:1e:7b:71:24:fc:aa:00:f0:35:cd:8e:00:
9e:c5:d6:bc:5f:7b:87:11:70:d9:cb:1a:40:55:b8:ec:93:40:
fe:96:25:64:2d:d4:52:f7:08:88:8a:06:23:8f:d1:1e:2e:e1:
d2:1f:25:fa:59:8e:f7:f5:be:34:b2:b0:45:3f:32:77:a5:16:
5e:bf:3a:c2:cf:3d:d7:68:ac:9d:ed:e5:0f:c7:b3:1c:e2:dd:
ef:44:b0:54:96:af:40:45:d1:80:50:c8:0d:5c:04:55:60:7a:
1c:94:95:5b:93:44:18:c9:de:83:ff:46:fc:75:4f:f5:9d:2c:
79:c0:80:d2:51:6d:24:db:a3:f1:3a:3b:54:b2:2b:44:9f:fb:
50:6a:6c:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 16:16:21 2024 by rpki-client on console-fra.rpki-client.org