Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/0e7ed3-48cb-4afe-8d15-dffe17f3db54/1/oBngTd4Bmc8M1pekGGRBcpiK0OE.roa
File: oBngTd4Bmc8M1pekGGRBcpiK0OE.roa (raw, json)
Hash identifier: ImSr/tXexsgrPlbybXyP5iynyWlMzL82BBA3ZMjSB0U=
Subject key identifier: A0:19:E0:4D:DE:01:99:CF:0C:D6:97:A4:18:64:41:72:98:8A:D0:E1
Certificate issuer: /CN=9812e491aaa655b6324dbcc0cff00a8d63191076
Certificate serial: 018CC349002BA34B5365989977D819B4DBF3
Authority key identifier: 98:12:E4:91:AA:A6:55:B6:32:4D:BC:C0:CF:F0:0A:8D:63:19:10:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mBLkkaqmVbYyTbzAz_AKjWMZEHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/0e7ed3-48cb-4afe-8d15-dffe17f3db54/1/oBngTd4Bmc8M1pekGGRBcpiK0OE.roa
Signing time: Mon 01 Jan 2024 04:29:50 +0000
ROA not before: Mon 01 Jan 2024 04:29:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29286
IP address blocks: 37.72.192.0/19 maxlen: 19
213.151.176.0/21 maxlen: 21
213.151.184.0/22 maxlen: 22
37.72.225.0/24 maxlen: 24
37.72.226.0/24 maxlen: 24
37.72.224.0/24 maxlen: 24
37.72.229.0/24 maxlen: 24
37.72.228.0/24 maxlen: 24
37.72.227.0/24 maxlen: 24
37.72.240.0/24 maxlen: 24
37.72.243.0/24 maxlen: 24
37.72.242.0/24 maxlen: 24
37.72.244.0/22 maxlen: 22
37.72.248.0/24 maxlen: 24
37.72.252.0/22 maxlen: 22
37.72.250.0/23 maxlen: 23
37.72.249.0/24 maxlen: 24
81.20.208.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/0e7ed3-48cb-4afe-8d15-dffe17f3db54/1/mBLkkaqmVbYyTbzAz_AKjWMZEHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/0e7ed3-48cb-4afe-8d15-dffe17f3db54/1/mBLkkaqmVbYyTbzAz_AKjWMZEHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/mBLkkaqmVbYyTbzAz_AKjWMZEHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:00:2b:a3:4b:53:65:98:99:77:d8:19:b4:db:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9812e491aaa655b6324dbcc0cff00a8d63191076
Validity
Not Before: Jan 1 04:29:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a019e04dde0199cf0cd697a418644172988ad0e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:c2:82:24:b5:6b:ba:80:9f:b9:f5:8f:57:63:
14:9d:ab:38:8e:84:02:b2:82:79:5d:59:7c:51:d4:
a3:ba:95:b6:f3:a0:63:81:b8:d2:9e:a2:1b:80:e7:
1b:f1:07:58:75:0c:85:13:26:6a:b7:55:79:cd:d0:
f9:6c:b3:f4:98:6c:b7:be:c0:db:a3:25:89:46:89:
68:d1:9f:09:ed:3c:8a:94:ca:b6:5a:f3:a5:86:b2:
1a:8f:36:48:2c:b5:d4:04:dc:cf:2b:fd:0a:74:8b:
2e:9d:de:01:db:5c:76:e0:fe:70:53:ea:60:9b:62:
bd:ea:5f:44:22:02:b2:30:b6:fe:d3:b6:ab:e1:9b:
66:e7:d2:d0:27:70:f6:7f:af:bb:ae:1a:5b:dd:5c:
9f:7a:38:57:68:b7:85:f4:8d:0e:20:a8:b5:17:58:
ed:6c:16:29:18:fb:83:cc:9f:20:00:c1:d8:9e:71:
85:c4:09:d1:5d:e8:d7:e8:8c:12:cd:ce:d5:1d:e0:
f4:c5:56:30:ed:ea:b0:56:93:6b:f3:e3:c6:0c:ef:
5b:fc:f4:1a:dc:b4:47:b5:3f:87:e8:c8:02:d1:97:
82:7b:bb:b7:2a:c8:4c:55:04:3d:55:26:c2:b6:e7:
1c:8a:e7:2a:81:cb:a8:f3:c9:7a:66:13:45:d0:23:
26:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:19:E0:4D:DE:01:99:CF:0C:D6:97:A4:18:64:41:72:98:8A:D0:E1
X509v3 Authority Key Identifier:
keyid:98:12:E4:91:AA:A6:55:B6:32:4D:BC:C0:CF:F0:0A:8D:63:19:10:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mBLkkaqmVbYyTbzAz_AKjWMZEHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/0e7ed3-48cb-4afe-8d15-dffe17f3db54/1/oBngTd4Bmc8M1pekGGRBcpiK0OE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/0e7ed3-48cb-4afe-8d15-dffe17f3db54/1/mBLkkaqmVbYyTbzAz_AKjWMZEHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.72.192.0-37.72.229.255
37.72.240.0/24
37.72.242.0-37.72.255.255
81.20.208.0/20
213.151.176.0-213.151.187.255
Signature Algorithm: sha256WithRSAEncryption
10:e2:7a:63:1f:4d:f4:2d:29:8c:6a:fc:84:cc:59:3a:9e:78:
87:ce:cc:3c:17:4e:84:22:fd:ca:9b:15:74:7c:89:6c:25:49:
b4:9c:61:ad:33:a6:1b:34:3c:95:d6:d1:88:9b:15:8f:6d:38:
d2:26:60:1f:25:5d:78:23:f9:df:7e:16:a4:b0:82:49:53:de:
67:90:34:b9:2e:9b:ee:86:56:68:64:a9:fe:fb:51:10:f6:55:
6b:b9:fa:12:0c:73:da:26:1f:f8:0b:9a:3c:7c:2c:a3:e3:2c:
a6:1b:63:15:75:95:2d:c0:78:60:fc:f1:d7:d7:b3:4e:73:7f:
08:bb:1a:7e:be:ef:76:4f:82:e7:d8:9f:ca:9f:31:26:80:fc:
0d:13:6f:72:98:81:76:04:fb:7b:7e:86:ff:8d:03:40:64:72:
7a:d4:61:88:8b:74:37:0c:2b:ae:4f:27:c4:58:44:db:b2:0c:
94:b8:56:9f:55:5f:04:37:81:33:72:22:84:1c:d8:1c:c6:80:
b4:29:56:05:b3:41:ba:3b:51:a0:73:f4:74:24:49:3f:50:c3:
94:f8:2a:67:0d:bc:71:dc:97:b3:b8:7e:47:c2:af:54:96:a4:
b5:bc:1c:c1:37:7f:30:e1:7d:d3:27:3d:27:ab:17:51:42:78:
9d:8f:18:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 22:26:52 2024 by rpki-client on console-ams.rpki-client.org