Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4DwJNj9nI0bhp4wVCBCwLQzEUlc.roa
File: 4DwJNj9nI0bhp4wVCBCwLQzEUlc.roa (raw, json)
Hash identifier: HbriYNNYO/fgUcvRHn+pHyOG7hUInQb8o6QcTsLJ1TI=
Subject key identifier: E0:3C:09:36:3F:67:23:46:E1:A7:8C:15:08:10:B0:2D:0C:C4:52:57
Certificate issuer: /CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257
Certificate serial: 019229F053A2A7C2003657F040B88B57BF6F
Authority key identifier: E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4DwJNj9nI0bhp4wVCBCwLQzEUlc.roa
Signing time: Wed 25 Sep 2024 16:07:48 +0000
ROA not before: Wed 25 Sep 2024 16:07:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 17025
IP address blocks: 79.141.45.0/24 maxlen: 24
94.31.10.0/23 maxlen: 24
94.31.12.0/24 maxlen: 24
213.152.239.0/24 maxlen: 24
2a00:16f8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:29:f0:53:a2:a7:c2:00:36:57:f0:40:b8:8b:57:bf:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257
Validity
Not Before: Sep 25 16:07:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e03c09363f672346e1a78c150810b02d0cc45257
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:02:bc:3d:67:cd:60:ca:13:ea:bf:f7:0f:6b:
ef:fd:27:30:df:13:4f:44:20:88:47:78:92:3e:71:
01:af:fb:2c:9c:6c:b6:b0:0b:a7:43:42:36:b0:a6:
be:57:ef:22:8f:1c:b4:26:e2:ba:99:32:47:54:80:
80:94:2a:05:f5:6f:0b:86:fc:28:ca:c2:5d:7b:e7:
ba:22:b8:ef:92:c1:7f:1b:32:ca:f5:18:d1:b7:06:
cc:d5:a9:9c:5b:e4:61:cb:42:df:d8:61:c7:1d:0d:
dc:b9:e2:7c:f2:46:b7:56:7d:a9:80:34:2a:4e:1b:
aa:8b:2e:5c:4f:75:78:a8:8c:c7:58:6a:bc:6a:92:
09:bc:4e:56:3c:37:5b:50:eb:b7:ad:d5:c0:ef:2a:
69:42:5c:6a:bb:c8:61:7b:ca:d9:95:0e:31:fe:41:
a6:41:2a:bc:16:77:94:81:40:9f:39:55:ba:5b:51:
09:ff:6b:85:14:1c:a4:2b:67:3b:94:32:8e:fe:4d:
ff:2c:7f:a4:ea:09:3d:51:77:79:3b:63:4b:2a:95:
f9:62:19:3a:2e:5a:67:f4:70:0d:61:47:ae:2f:03:
70:7e:cc:56:07:e9:a5:89:7e:a5:e8:37:91:7d:1b:
35:de:c1:71:94:b9:0f:b3:5b:aa:f2:23:37:2d:3d:
b1:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:3C:09:36:3F:67:23:46:E1:A7:8C:15:08:10:B0:2D:0C:C4:52:57
X509v3 Authority Key Identifier:
keyid:E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4DwJNj9nI0bhp4wVCBCwLQzEUlc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.141.45.0/24
94.31.10.0-94.31.12.255
213.152.239.0/24
IPv6:
2a00:16f8::/48
Signature Algorithm: sha256WithRSAEncryption
4c:9d:43:3d:bd:77:52:00:74:65:13:43:d6:8e:f6:10:f5:00:
72:49:de:da:de:42:2b:37:5c:96:e8:34:ca:0f:85:13:87:3e:
ad:ac:2c:b5:ac:e2:d5:35:49:1c:af:9a:04:35:4b:d2:8c:dd:
38:8c:8e:65:c8:f9:d8:df:8c:b6:3c:3c:03:d8:af:72:06:b8:
0a:54:84:d8:64:bd:63:a1:56:53:36:1a:f1:3e:7b:d0:cb:5d:
55:73:18:6d:13:87:0a:88:c9:01:c3:d3:19:97:5d:dd:86:65:
c1:8b:d5:37:3a:b2:9a:84:e8:d9:9f:f4:c5:e6:d8:87:16:78:
26:6c:83:98:76:45:9d:4e:f9:a2:2f:73:ef:fb:6a:f0:ff:0c:
30:78:e2:a5:c8:8f:e8:79:fd:8c:9f:2a:2e:06:ce:17:50:e0:
dc:3b:cc:b6:97:06:47:d6:72:98:83:c2:45:e3:a8:6c:c1:ce:
a7:23:6e:1c:73:bf:88:89:bc:77:23:5e:1d:8a:65:17:c8:25:
e5:f5:f4:6f:c8:d7:eb:6d:49:dd:eb:56:0e:64:5f:12:bb:a9:
e7:90:ee:c9:f2:0e:23:a6:9c:6a:3b:9a:c8:eb:6f:b6:b7:ac:
94:6c:f0:a3:53:2d:60:4b:89:d7:aa:8a:5c:63:eb:73:0b:3e:
1c:7f:fe:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:24:38 2024 by rpki-client on console-ams.rpki-client.org