Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/rCTYV3X_BEOgTjsdHPQusN_I19Q.roa
File: rCTYV3X_BEOgTjsdHPQusN_I19Q.roa (raw, json)
Hash identifier: a5xKuitGntl3oP434M4+hBVL5rks10eVKsfUiHxiEno=
Subject key identifier: AC:24:D8:57:75:FF:04:43:A0:4E:3B:1D:1C:F4:2E:B0:DF:C8:D7:D4
Certificate issuer: /CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
Certificate serial: 01920EFEBE4D103A8D784DAA31606391704E
Authority key identifier: 29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/rCTYV3X_BEOgTjsdHPQusN_I19Q.roa
Signing time: Fri 20 Sep 2024 10:33:48 +0000
ROA not before: Fri 20 Sep 2024 10:33:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48314
IP address blocks: 37.114.53.0/24 maxlen: 24
37.114.57.0/24 maxlen: 24
37.114.61.0/24 maxlen: 24
37.114.62.0/24 maxlen: 24
185.14.93.0/24 maxlen: 24
185.14.94.0/24 maxlen: 24
2a00:ccc1:5::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:0e:fe:be:4d:10:3a:8d:78:4d:aa:31:60:63:91:70:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
Validity
Not Before: Sep 20 10:33:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ac24d85775ff0443a04e3b1d1cf42eb0dfc8d7d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:84:26:51:99:23:7b:07:5a:b5:e3:38:4c:04:
92:83:7c:fc:0b:1b:64:0f:07:a1:42:5b:72:c9:04:
d1:3f:8c:78:3b:ac:7c:24:b0:24:b4:f0:0a:df:df:
5f:55:a5:60:14:60:e1:7e:87:31:4b:9d:04:fe:65:
97:bd:fd:bc:a6:24:40:db:c2:77:b0:a9:d0:02:2f:
55:6b:c2:3e:19:f0:76:b2:05:cb:82:a7:43:77:f6:
97:b6:57:50:40:5e:ea:01:6c:b5:3b:fb:f7:7c:90:
05:92:cd:92:72:f4:db:52:e1:65:80:0d:83:26:06:
f9:dd:d8:65:3a:16:3e:40:96:ec:48:c6:42:88:a9:
e4:3a:38:9c:46:03:66:79:7c:2a:f2:22:9d:df:61:
05:ba:21:97:20:2e:e4:c9:72:60:cb:41:ff:dd:d5:
70:fd:13:a9:64:09:ae:04:c3:81:3f:95:4a:47:cd:
a2:39:a3:68:db:6c:2d:07:00:38:18:0a:a9:50:30:
20:ae:0b:42:60:04:55:92:b8:8d:e8:07:24:58:b8:
de:08:60:ee:e6:4f:1d:08:8b:c7:df:10:c3:ae:e5:
db:13:36:43:25:03:84:79:ae:aa:ce:ef:1f:80:9b:
7d:5e:cf:37:9c:e2:51:63:c0:8d:18:14:b2:8d:f2:
9a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:24:D8:57:75:FF:04:43:A0:4E:3B:1D:1C:F4:2E:B0:DF:C8:D7:D4
X509v3 Authority Key Identifier:
keyid:29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/rCTYV3X_BEOgTjsdHPQusN_I19Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.114.53.0/24
37.114.57.0/24
37.114.61.0-37.114.62.255
185.14.93.0-185.14.94.255
IPv6:
2a00:ccc1:5::/48
Signature Algorithm: sha256WithRSAEncryption
40:e3:74:86:db:65:3f:0b:01:85:fb:51:94:be:70:e9:29:74:
3c:0a:68:28:3e:af:0f:0d:84:ac:84:50:ca:d0:5e:aa:61:27:
5c:a7:99:6f:a8:23:63:50:96:ed:a9:5b:ca:8d:fe:3f:b9:06:
47:d8:17:66:44:20:88:c0:26:a8:34:2e:d4:b9:ab:d9:79:92:
fd:47:8a:35:a4:a7:08:42:ee:f2:b8:e2:06:8a:a1:8b:20:87:
dd:a3:a7:82:31:63:b4:d3:4c:6b:a7:03:4b:79:42:e3:2f:89:
13:86:c4:cf:52:52:07:05:52:54:18:06:75:65:32:e6:26:d6:
99:5e:b2:da:0e:14:f4:6f:a4:68:76:46:de:c6:1a:e5:06:87:
1b:99:b8:91:ce:af:90:2e:4b:ea:c7:03:a9:8c:25:3f:07:8f:
a0:f4:2f:a2:fb:fd:6f:cc:f8:1a:d0:57:4e:b8:2a:b5:20:fa:
7b:84:a1:d0:b1:79:2e:09:ad:45:97:8e:c7:0c:b7:41:13:af:
4c:c4:64:ae:99:8a:09:6b:ad:92:40:b4:e4:f1:31:90:74:20:
46:5a:3d:8b:5b:81:7d:71:d6:e7:48:fd:9b:45:7d:13:cf:3f:
fe:3b:6a:f4:df:86:52:3d:8c:b9:4b:9e:24:99:7b:ff:74:7a:
4f:73:e9:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:52:06 2024 by rpki-client on console-fra.rpki-client.org