Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/t-dDPtsYq1SCK0Ar3zEVSA6UTdM.roa
File: t-dDPtsYq1SCK0Ar3zEVSA6UTdM.roa (raw, json)
Hash identifier: VKL8QwmOGRLKykZi8DNgIu9lE2A108TclJP9gKa2qh8=
Subject key identifier: B7:E7:43:3E:DB:18:AB:54:82:2B:40:2B:DF:31:15:48:0E:94:4D:D3
Certificate issuer: /CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
Certificate serial: 018CC94E11ADDEFE83D6D75F30A92609DECB
Authority key identifier: 29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/t-dDPtsYq1SCK0Ar3zEVSA6UTdM.roa
Signing time: Tue 02 Jan 2024 08:33:05 +0000
ROA not before: Tue 02 Jan 2024 08:33:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48314
IP address blocks: 185.14.94.0/24 maxlen: 24
37.114.53.0/24 maxlen: 24
37.114.57.0/24 maxlen: 24
37.114.62.0/24 maxlen: 24
37.114.61.0/24 maxlen: 24
2a00:ccc1:5::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 19:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:11:ad:de:fe:83:d6:d7:5f:30:a9:26:09:de:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
Validity
Not Before: Jan 2 08:33:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b7e7433edb18ab54822b402bdf3115480e944dd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:1e:4d:eb:48:e7:9f:ea:f1:45:e5:d1:6d:55:
e3:7b:f1:f5:90:c0:01:b3:c8:6a:33:b0:de:b9:81:
3c:00:39:ab:17:6e:a9:75:53:ea:f6:32:41:91:a5:
cd:12:ad:12:66:39:a1:95:c3:0c:bf:db:1d:ed:c4:
37:b0:a8:58:bc:cf:43:46:c2:0d:08:a3:25:f5:ba:
7b:ef:cf:7a:d4:e1:06:ab:fc:73:d4:e7:79:5f:82:
75:56:1b:34:53:85:35:a5:ec:cd:2f:0b:16:da:89:
ea:b3:09:8b:69:98:41:b0:9d:e1:7b:e9:34:3d:41:
49:0a:2d:38:a6:66:8d:23:f1:5c:40:e6:4d:06:68:
9d:c4:91:0f:a5:04:df:c2:f1:e0:f0:37:62:54:2f:
58:dd:f1:c4:f1:91:b4:a4:eb:46:75:fb:8d:e5:63:
4c:ba:2d:02:23:a2:e9:f2:42:1e:90:1f:56:4c:9f:
59:ac:25:12:7e:a7:6a:36:be:98:0d:de:b0:28:60:
4f:93:c3:52:e5:7f:37:56:9c:27:77:24:54:76:4f:
95:cd:91:c1:a3:50:9e:9c:8a:e7:17:70:ad:8d:42:
e9:bf:9d:a2:45:1c:17:46:22:a2:70:52:e1:fb:b1:
21:39:b1:0b:55:ea:5b:e5:0f:73:cb:a7:24:c3:03:
64:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:E7:43:3E:DB:18:AB:54:82:2B:40:2B:DF:31:15:48:0E:94:4D:D3
X509v3 Authority Key Identifier:
keyid:29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/t-dDPtsYq1SCK0Ar3zEVSA6UTdM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.114.53.0/24
37.114.57.0/24
37.114.61.0-37.114.62.255
185.14.94.0/24
IPv6:
2a00:ccc1:5::/48
Signature Algorithm: sha256WithRSAEncryption
45:b9:af:b0:83:bb:26:5e:a8:cb:14:ed:1f:c3:ae:6f:ea:ca:
3f:8e:fe:4c:36:8b:b4:c0:70:36:84:4e:d6:c2:70:17:ed:d0:
d8:2f:b6:10:76:68:98:86:45:93:4c:e2:3b:a5:2d:24:d8:97:
8f:da:4f:68:11:73:49:bd:f4:85:92:a2:c1:d1:b9:a2:22:53:
b5:f6:f4:7b:ef:08:dc:57:94:a4:a0:64:b7:2a:ae:5a:e8:1d:
26:70:0d:47:66:8e:6a:fc:02:fa:8f:f4:ea:2c:2e:01:2a:0f:
c1:80:2e:f6:05:b9:b2:b4:ad:21:12:04:1c:44:bb:fb:01:8b:
84:6d:bd:c5:29:6c:83:b6:cb:51:95:67:24:34:36:5d:6a:3f:
75:84:a8:90:e4:84:5a:89:79:a5:cb:d9:eb:91:6a:c7:a9:c7:
18:52:9e:73:fe:33:ae:bc:49:90:f9:1c:d3:f4:ea:b2:a8:59:
f9:88:0e:53:ee:f2:54:c9:36:32:37:43:62:b4:34:dd:82:97:
6f:0f:0f:e9:48:00:bf:11:8b:1c:fb:0c:73:c0:fc:58:46:5f:
91:e7:03:5d:73:0c:b4:f0:bd:91:06:84:f4:93:42:64:2d:43:
dd:88:b4:55:6d:0a:d6:9b:c9:ce:f0:5e:71:90:3e:6a:69:65:
2b:0d:90:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 23:18:29 2024 by rpki-client on console-ams.rpki-client.org