Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/ofGenAdCoPV2f0LJwQIt1rgMR7c.roa
File: ofGenAdCoPV2f0LJwQIt1rgMR7c.roa (raw, json)
Hash identifier: 3GCKpMpxuHzswT1m+/jkcHfULy5jUBQ9cQhA4PwM2+s=
Subject key identifier: A1:F1:9E:9C:07:42:A0:F5:76:7F:42:C9:C1:02:2D:D6:B8:0C:47:B7
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 018DA2C034DF637FDB43E47BB4C8961FB84E
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/ofGenAdCoPV2f0LJwQIt1rgMR7c.roa
Signing time: Tue 13 Feb 2024 13:55:21 +0000
ROA not before: Tue 13 Feb 2024 13:55:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47169
IP address blocks: 84.21.4.0/24 maxlen: 24
87.229.16.0/22 maxlen: 22
87.229.38.0/24 maxlen: 24
87.229.39.0/24 maxlen: 24
87.229.42.0/23 maxlen: 24
87.229.52.0/24 maxlen: 24
87.229.106.0/24 maxlen: 24
87.229.107.0/24 maxlen: 24
213.181.196.0/24 maxlen: 24
213.181.197.0/24 maxlen: 24
213.181.198.0/24 maxlen: 24
213.181.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 11:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:a2:c0:34:df:63:7f:db:43:e4:7b:b4:c8:96:1f:b8:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Feb 13 13:55:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a1f19e9c0742a0f5767f42c9c1022dd6b80c47b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:08:23:8f:0f:98:99:f4:63:90:4c:12:dc:06:
7f:4b:63:25:aa:4b:95:a1:71:ca:22:df:c8:3a:cc:
74:86:ed:87:9f:c7:d9:04:90:d9:e7:57:1f:24:56:
55:36:26:eb:ab:44:ac:ce:ad:e7:b4:1b:c3:4b:b4:
9f:a5:6a:00:7b:d7:a0:ac:c3:09:c6:9b:ee:1e:b7:
77:d1:c9:08:39:28:a7:f0:06:50:8b:78:3e:9d:f3:
90:0a:b9:e7:17:b4:a0:c3:4b:2f:ff:18:7e:d4:67:
74:06:b4:bc:8d:e5:7b:49:a1:62:a7:0a:44:fe:bb:
19:2e:14:01:8e:dd:57:6f:d6:1f:4c:80:d0:f5:30:
75:88:1e:13:b1:d8:58:3d:4e:55:aa:25:75:dd:57:
06:da:87:a3:0b:bf:cc:37:52:d2:3c:4b:aa:ce:e0:
0c:03:9a:3f:21:4a:09:cf:d6:f3:02:a6:47:de:25:
dd:71:3e:ab:ac:76:8f:b8:fd:42:5a:cb:3b:15:78:
c0:c6:2d:7d:36:f9:e0:f3:e8:13:12:1c:97:2a:16:
6a:72:c5:44:f2:eb:29:69:ab:66:bf:e4:fc:6e:14:
31:53:57:7a:8d:23:5b:66:d9:9a:73:ac:58:40:27:
7b:d7:2d:84:73:b3:0f:7f:13:06:eb:f6:e3:ef:05:
d1:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:F1:9E:9C:07:42:A0:F5:76:7F:42:C9:C1:02:2D:D6:B8:0C:47:B7
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/ofGenAdCoPV2f0LJwQIt1rgMR7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.21.4.0/24
87.229.16.0/22
87.229.38.0/23
87.229.42.0/23
87.229.52.0/24
87.229.106.0/23
213.181.196.0-213.181.198.255
213.181.212.0/24
Signature Algorithm: sha256WithRSAEncryption
69:f3:43:c0:94:6a:5b:70:13:f8:34:13:b3:98:0e:ee:db:52:
27:35:dc:a7:cd:c9:bc:f5:28:5d:f5:ae:a3:0e:42:a8:28:c6:
b5:92:d6:91:90:c5:88:5b:1d:99:6e:b3:f4:8a:ac:0c:5a:4a:
48:9c:ed:35:e0:14:6e:19:a2:d1:b6:f7:57:f3:10:20:d3:ae:
52:4b:d4:62:51:7d:bb:53:53:c7:7e:ac:89:2a:0e:1f:58:01:
85:74:ad:4b:5d:d1:c3:50:5f:3a:3d:7e:d8:f4:f1:80:99:f9:
0d:da:75:cd:0f:7f:d7:20:84:a3:cf:1a:e6:47:80:ea:b4:cb:
0e:29:5a:4d:6e:73:0c:91:07:ba:51:b1:65:f6:12:b7:18:58:
11:cf:07:70:e8:6b:20:d1:da:a5:78:8b:da:db:db:05:d6:75:
53:f9:8e:95:c4:b5:88:05:84:85:2f:05:be:99:dc:d8:89:06:
71:41:81:12:c6:2f:81:4c:f5:51:86:28:f4:09:1b:1e:b7:89:
59:a9:50:35:b3:82:a5:cb:31:c9:0d:c6:71:b0:84:7c:e4:d2:
80:ff:b8:ab:09:30:a5:fe:f2:9b:22:a9:6b:c8:0b:57:c8:56:
1e:79:cd:bc:1f:18:b1:fb:ee:a8:c9:28:59:96:bb:8c:61:d6:
7d:4a:42:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 14:04:11 2024 by rpki-client on console-ams.rpki-client.org