Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/7_-8mZI-03rey2bp_KLRADnZIRg.roa
File: 7_-8mZI-03rey2bp_KLRADnZIRg.roa (raw, json)
Hash identifier: Pu8Lr6Gcc3P9lxYTmklnd+ZBASlu0xA++PAy+CdRyoQ=
Subject key identifier: EF:FF:BC:99:92:3E:D3:7A:DE:CB:66:E9:FC:A2:D1:00:39:D9:21:18
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018CCA29F8F1022B8BE608AB969DA4D30645
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/7_-8mZI-03rey2bp_KLRADnZIRg.roa
Signing time: Tue 02 Jan 2024 12:33:17 +0000
ROA not before: Tue 02 Jan 2024 12:33:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44546
IP address blocks: 151.249.128.0/17 maxlen: 24
31.148.0.0/16 maxlen: 24
91.201.20.0/22 maxlen: 24
195.178.4.0/23 maxlen: 24
93.170.0.0/15 maxlen: 24
92.253.128.0/17 maxlen: 24
146.120.0.0/16 maxlen: 24
92.38.0.0/17 maxlen: 24
146.158.0.0/17 maxlen: 24
95.46.0.0/15 maxlen: 24
185.67.252.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 05:12:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:f8:f1:02:2b:8b:e6:08:ab:96:9d:a4:d3:06:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 12:33:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=efffbc99923ed37adecb66e9fca2d10039d92118
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:00:7d:a1:91:4a:a5:01:be:4c:89:f3:ab:4d:
a6:25:11:99:7f:ec:9a:76:3b:48:36:ee:4e:2e:ce:
6d:9c:6e:46:25:b3:28:a4:0d:cb:3c:a4:65:b7:7a:
82:ef:3d:bc:93:b5:87:e5:6c:cd:37:a9:98:5f:04:
33:21:5d:c2:c7:0a:8f:85:bb:1d:80:3a:92:c5:c0:
09:54:1e:4e:b9:e1:f9:53:4f:da:3c:d1:38:40:f5:
88:2d:27:93:22:b7:f4:56:db:41:ce:d1:43:a3:db:
0d:f4:6c:a8:84:a1:12:05:ac:39:9a:46:4d:15:54:
04:33:63:3c:83:0a:d4:41:71:a1:2d:65:fe:75:10:
81:9b:f3:fd:6d:72:54:2f:6f:2a:ea:9c:f0:49:13:
e2:74:5b:43:17:30:c6:15:2f:6d:e1:83:ee:59:cf:
39:4e:2c:41:89:50:f6:5b:f6:41:df:27:fe:1d:f7:
df:0c:e7:d5:96:93:e9:30:d0:8c:39:38:36:d3:28:
50:72:85:1e:8a:27:79:3b:5a:b5:70:cb:8d:55:f3:
0f:1d:03:16:2a:4d:e3:e1:b4:5d:a9:94:c6:b6:e3:
49:05:3c:0d:2a:14:0b:ca:74:94:90:82:13:39:8a:
6a:98:db:5a:4d:24:fb:cc:f4:f6:43:1d:76:ba:86:
8e:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:FF:BC:99:92:3E:D3:7A:DE:CB:66:E9:FC:A2:D1:00:39:D9:21:18
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/7_-8mZI-03rey2bp_KLRADnZIRg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.148.0.0/16
91.201.20.0/22
92.38.0.0/17
92.253.128.0/17
93.170.0.0/15
95.46.0.0/15
146.120.0.0/16
146.158.0.0/17
151.249.128.0/17
185.67.252.0/22
195.178.4.0/23
Signature Algorithm: sha256WithRSAEncryption
70:5e:2b:e4:a0:aa:05:c1:6f:e7:14:f6:16:67:2f:82:75:54:
b5:7e:56:a5:e6:07:3e:81:1f:73:b5:e8:77:2c:55:cf:43:2a:
0e:94:aa:51:59:bf:a1:ef:29:b3:49:b1:87:23:ee:d1:96:07:
05:b6:82:39:7e:df:9c:16:5a:e0:84:1f:0e:cf:23:03:a3:3f:
40:36:b8:73:2a:14:3f:8c:d0:e7:12:16:9d:4c:8e:f1:8d:31:
e7:d3:fb:3b:3e:02:9c:30:3c:fa:ba:34:c8:3d:c1:db:4f:3f:
14:b2:ea:3c:f8:55:f1:95:aa:df:03:c4:c1:eb:0b:3e:6e:db:
79:e3:e3:b4:a6:47:aa:ab:21:32:22:b7:1b:b3:25:be:8e:24:
97:4a:e4:59:f7:a1:c2:03:66:f5:30:91:e5:9e:8f:ff:d8:ef:
75:1b:b1:a2:f0:79:21:f9:65:00:aa:63:2b:50:03:c1:f1:71:
0d:45:50:d7:b7:b3:f5:6b:b2:ce:d9:16:ae:b6:fa:9b:d6:cb:
82:87:73:b5:a5:30:9c:d2:54:67:3c:83:ae:2a:f4:99:6e:cc:
10:6b:7f:fc:c2:7d:e3:17:dd:80:58:e5:80:85:bc:65:e7:26:
0e:a9:45:4e:07:1a:79:2b:c8:6b:88:ae:4c:86:28:3b:f1:9b:
fc:3b:2a:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:46:11 2024 by rpki-client on console-fra.rpki-client.org