Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/aa7922-c2c0-47ae-9108-6030a9da3b89/1/mJ_tPpSeSVdNqb3uu8sD5fnC6l4.roa
File: mJ_tPpSeSVdNqb3uu8sD5fnC6l4.roa (raw, json)
Hash identifier: 1V0RqqqNgdnqEczmfgvXni7vMfrFT/mZyl24ZpBDCNM=
Subject key identifier: 98:9F:ED:3E:94:9E:49:57:4D:A9:BD:EE:BB:CB:03:E5:F9:C2:EA:5E
Certificate issuer: /CN=e1d7e9ff1278a14dc26ef33f9ff531d86eff5d03
Certificate serial: 018CC7270B75B0698DC4F81EDAB994999AF2
Authority key identifier: E1:D7:E9:FF:12:78:A1:4D:C2:6E:F3:3F:9F:F5:31:D8:6E:FF:5D:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4dfp_xJ4oU3CbvM_n_Ux2G7_XQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/aa7922-c2c0-47ae-9108-6030a9da3b89/1/mJ_tPpSeSVdNqb3uu8sD5fnC6l4.roa
Signing time: Mon 01 Jan 2024 22:31:13 +0000
ROA not before: Mon 01 Jan 2024 22:31:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43521
IP address blocks: 185.52.58.0/23 maxlen: 23
78.41.176.0/21 maxlen: 21
185.52.56.0/23 maxlen: 23
185.52.56.0/22 maxlen: 22
87.117.152.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/aa7922-c2c0-47ae-9108-6030a9da3b89/1/4dfp_xJ4oU3CbvM_n_Ux2G7_XQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/aa7922-c2c0-47ae-9108-6030a9da3b89/1/4dfp_xJ4oU3CbvM_n_Ux2G7_XQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/4dfp_xJ4oU3CbvM_n_Ux2G7_XQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:46:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:0b:75:b0:69:8d:c4:f8:1e:da:b9:94:99:9a:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1d7e9ff1278a14dc26ef33f9ff531d86eff5d03
Validity
Not Before: Jan 1 22:31:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=989fed3e949e49574da9bdeebbcb03e5f9c2ea5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:0d:2c:a0:fb:9b:14:e4:c2:45:99:54:e3:96:
7b:7b:56:6c:2b:46:db:2b:5a:21:75:84:32:0e:21:
3d:26:0d:a2:c5:96:9b:4c:34:82:e8:29:d4:6e:0b:
3e:fd:fe:99:b9:d4:30:6b:65:a9:7e:11:bc:e8:5d:
73:d6:20:6a:9d:f6:e2:2a:92:3b:ab:08:59:69:5c:
ce:b4:f0:52:72:c4:83:94:c1:d1:db:35:cd:0f:ca:
d4:3f:a2:2b:d1:21:5e:a3:98:c6:bc:e3:d7:78:35:
0b:5e:d8:f3:23:84:a9:bd:2f:e7:cf:b8:3a:3c:78:
74:4e:5b:fd:6d:d9:1a:fc:eb:68:b1:24:f8:20:bf:
9f:05:f9:b9:15:d6:27:49:68:2e:4e:a2:13:67:e2:
82:d0:d6:83:33:cb:55:8d:ba:48:d6:ea:12:72:2d:
bc:de:fb:12:fb:91:41:01:81:cc:11:94:46:67:6e:
04:f6:86:4d:09:9d:69:8e:3d:1b:3a:d5:02:83:56:
72:41:8a:b0:ab:12:99:1d:06:f6:9a:41:c9:d3:70:
d7:2a:ea:f2:68:92:cc:e0:12:ce:55:9c:73:b8:6b:
9e:37:2c:78:31:42:ae:d1:d6:bb:7a:4a:d5:b2:6c:
a0:c3:c4:b9:13:4e:77:ff:be:be:25:51:51:4d:2f:
b5:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:9F:ED:3E:94:9E:49:57:4D:A9:BD:EE:BB:CB:03:E5:F9:C2:EA:5E
X509v3 Authority Key Identifier:
keyid:E1:D7:E9:FF:12:78:A1:4D:C2:6E:F3:3F:9F:F5:31:D8:6E:FF:5D:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4dfp_xJ4oU3CbvM_n_Ux2G7_XQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/aa7922-c2c0-47ae-9108-6030a9da3b89/1/mJ_tPpSeSVdNqb3uu8sD5fnC6l4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/aa7922-c2c0-47ae-9108-6030a9da3b89/1/4dfp_xJ4oU3CbvM_n_Ux2G7_XQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.41.176.0/21
87.117.152.0/21
185.52.56.0/22
Signature Algorithm: sha256WithRSAEncryption
9c:bb:00:4d:c5:2e:b3:0b:73:1d:12:4a:09:22:4c:43:a6:e2:
ce:20:98:7e:3d:fe:5b:46:ff:33:36:c2:68:f2:bd:0e:5f:3a:
51:5a:b7:be:98:dd:bc:10:4b:9e:26:e7:2d:db:95:e4:24:ed:
db:a1:91:24:17:3d:ee:ec:be:1f:25:5f:60:27:d3:16:1c:6e:
a7:06:ca:b3:01:c5:25:24:88:6e:c3:92:45:15:7f:d4:21:52:
2a:f8:b8:16:8a:d0:75:c6:ae:8c:0b:c6:ba:17:9f:95:f2:eb:
25:c9:60:6f:96:e9:f8:83:32:df:38:45:0d:f5:7d:1d:a8:5a:
86:ed:16:c2:25:16:c2:e1:2d:2b:3c:00:04:ca:a1:b8:b6:c1:
0c:a4:80:5f:3c:9f:ce:ef:dc:23:50:33:01:bd:77:cf:12:df:
02:db:fa:06:08:a9:44:76:eb:39:37:58:e4:33:fc:66:50:dd:
94:54:3e:ea:83:4d:26:b9:8e:1b:01:63:21:85:7a:9d:a0:7f:
34:f1:a5:72:90:aa:4d:ba:eb:35:7b:7e:af:4c:ea:2c:c0:78:
fe:7d:f2:0b:c2:9d:88:61:ee:a9:1b:1d:0b:71:ad:44:c5:be:
6a:c1:3a:04:3a:45:5b:e1:e0:cc:1f:d0:bf:1b:bd:e4:01:28:
1c:f8:00:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:08:36 2024 by rpki-client on console-ams.rpki-client.org