Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/xEUM5_-bOrjYIJSfRbII-Ga7hok.roa
File: xEUM5_-bOrjYIJSfRbII-Ga7hok.roa (raw, json)
Hash identifier: iLuKdr2vVKNh7H3vamhLqdEU1vgQTrEk4mF7e51Rcm8=
Subject key identifier: C4:45:0C:E7:FF:9B:3A:B8:D8:20:94:9F:45:B2:08:F8:66:BB:86:89
Certificate issuer: /CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Certificate serial: 018CC795382D074F0AB4F1E25E8650C546EF
Authority key identifier: 92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/xEUM5_-bOrjYIJSfRbII-Ga7hok.roa
Signing time: Tue 02 Jan 2024 00:31:34 +0000
ROA not before: Tue 02 Jan 2024 00:31:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8283
IP address blocks: 94.142.242.0/24 maxlen: 24
94.142.240.0/21 maxlen: 21
94.142.241.0/24 maxlen: 24
94.142.245.0/24 maxlen: 24
94.142.246.0/24 maxlen: 24
94.142.244.0/24 maxlen: 24
94.142.247.0/24 maxlen: 24
185.52.225.0/24 maxlen: 24
185.52.226.0/24 maxlen: 24
185.52.224.0/24 maxlen: 24
185.52.224.0/22 maxlen: 22
185.52.227.0/24 maxlen: 24
94.142.240.0/24 maxlen: 24
2a02:898::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:38:2d:07:4f:0a:b4:f1:e2:5e:86:50:c5:46:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Validity
Not Before: Jan 2 00:31:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c4450ce7ff9b3ab8d820949f45b208f866bb8689
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:57:c6:38:74:bc:a8:c0:d3:c4:f4:30:dc:ec:
7d:06:d3:0c:29:0e:9f:63:f4:51:65:c1:7a:81:92:
3c:b0:85:3e:25:24:fc:b4:55:ac:cb:28:30:ee:6a:
fa:e0:2b:43:e8:4a:1c:70:a1:c3:7b:e2:b7:ae:18:
80:d9:51:ce:4a:8c:2d:7a:62:74:f7:45:58:c1:6f:
86:13:62:c5:36:b7:2d:aa:d1:b4:cb:89:b1:8e:78:
ea:17:1d:7d:30:d7:d0:e3:d6:ec:4a:cf:1c:22:8a:
55:92:a7:9a:0a:f1:dc:b7:6c:94:68:6b:63:7d:84:
50:dc:62:45:7c:72:74:e0:4e:69:6e:c7:76:5a:cb:
02:59:c3:24:54:68:90:f1:83:5e:ac:a3:52:d3:02:
06:d9:36:9d:9b:8e:34:57:7f:c6:a2:c7:a5:d5:a7:
6c:98:24:cf:0d:63:f8:38:d7:f2:c7:7e:8f:87:c1:
8f:3c:8a:12:aa:53:b0:b4:ff:d3:77:00:92:31:41:
92:72:56:b6:9b:ae:cc:27:1d:f8:f3:fa:bc:d7:48:
4f:01:85:07:49:45:3e:2b:53:c0:1a:a0:64:b7:50:
41:30:44:0e:81:c1:1a:5c:9e:41:ad:c0:2e:1a:1c:
d9:f4:59:e2:f9:1b:f3:e3:27:1f:24:65:7d:b0:10:
16:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:45:0C:E7:FF:9B:3A:B8:D8:20:94:9F:45:B2:08:F8:66:BB:86:89
X509v3 Authority Key Identifier:
keyid:92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/xEUM5_-bOrjYIJSfRbII-Ga7hok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.142.240.0/21
185.52.224.0/22
IPv6:
2a02:898::/32
Signature Algorithm: sha256WithRSAEncryption
bc:ab:d3:d5:18:86:9b:b0:68:10:20:33:21:36:fd:49:98:b0:
4a:1f:60:f2:87:19:5a:a1:98:5f:18:6b:21:c0:3c:0c:a5:94:
d0:4f:d6:28:da:1e:74:dd:8f:ec:e5:30:78:15:3d:da:2f:8b:
51:0a:99:0f:ff:36:b4:9f:fd:86:d4:73:fb:4a:ce:c7:40:db:
f7:17:22:e3:7e:a1:50:c3:3c:57:74:a5:f1:ab:83:26:7b:3f:
4a:d3:3c:38:77:4f:4f:b4:64:99:63:68:75:27:ea:8b:df:4b:
3b:cd:d9:e9:f1:c5:f5:e0:8a:f6:87:1e:17:38:1c:46:e5:2f:
58:8c:96:02:9f:18:af:57:60:47:40:b6:f9:93:bb:85:25:1e:
28:1d:fc:4a:8d:a2:dd:51:43:35:f4:dd:a6:41:46:41:39:7c:
55:1a:c9:aa:9f:7e:58:0b:38:e4:a6:78:6f:bf:5d:a8:da:ec:
10:de:bb:d3:d8:ca:8c:86:95:4e:d3:b0:1c:d4:ac:26:94:04:
e3:4f:2b:7f:2d:c6:64:d3:35:40:18:d3:28:59:97:28:a5:9c:
6e:e8:89:55:f9:99:b6:08:98:7a:0e:08:ec:8a:a7:a0:d2:85:
c7:71:b2:29:22:bd:9d:49:d5:3c:b1:14:74:69:df:72:27:3f:
b8:16:b9:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 09:21:29 2024 by rpki-client on console-ams.rpki-client.org