Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/iH8zgtHJbALfAc7SRgoNWLqIw4E.roa
File: iH8zgtHJbALfAc7SRgoNWLqIw4E.roa (raw, json)
Hash identifier: mN7T+JoHYIpeUEsILbHyu1ym91A2xIvjLcaEAlZvQNw=
Subject key identifier: 88:7F:33:82:D1:C9:6C:02:DF:01:CE:D2:46:0A:0D:58:BA:88:C3:81
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018CCA29EB55B063730E2366CC8C46B8F56A
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/iH8zgtHJbALfAc7SRgoNWLqIw4E.roa
Signing time: Tue 02 Jan 2024 12:33:13 +0000
ROA not before: Tue 02 Jan 2024 12:33:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41575
IP address blocks: 95.46.144.0/24 maxlen: 24
146.158.32.0/20 maxlen: 24
95.46.34.0/23 maxlen: 24
31.148.224.0/20 maxlen: 24
93.171.48.0/20 maxlen: 24
31.148.32.0/21 maxlen: 24
93.171.80.0/20 maxlen: 24
92.253.240.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 11 Jun 2024 21:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:eb:55:b0:63:73:0e:23:66:cc:8c:46:b8:f5:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 12:33:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=887f3382d1c96c02df01ced2460a0d58ba88c381
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:93:7b:80:03:3c:00:89:73:0f:a9:42:97:aa:
bf:57:43:60:68:32:85:cb:7d:be:70:69:f2:8f:b7:
82:78:b6:45:c2:12:e1:39:5c:1c:c4:7d:9d:4d:f6:
ea:f3:2c:e6:8b:fd:a6:ce:8c:46:2c:18:a4:cf:85:
e3:11:3b:a5:04:87:f8:bb:01:af:6a:61:dd:f7:71:
67:f2:e6:d8:f8:db:b4:d0:c2:ec:5e:45:bd:6f:0c:
8b:50:a9:6c:2c:a4:b3:89:36:bd:a9:21:c8:2b:16:
e4:d3:ee:10:d2:54:11:1a:89:18:6d:cf:c6:11:d0:
e5:ea:85:83:31:e6:bd:73:bb:4e:3c:9b:d9:33:f2:
75:3f:dc:71:60:1d:a3:e2:39:60:8e:c3:f8:72:14:
bf:45:34:33:c6:00:a9:ca:73:65:8e:11:be:7d:ee:
e8:0c:9e:bf:86:67:d2:78:56:cd:ca:e0:06:2a:c4:
6e:7d:ce:53:7f:d8:fc:71:4a:74:66:5b:f1:a1:19:
d5:77:66:e9:f1:c2:79:e7:52:27:ac:04:89:6d:6a:
b4:20:31:6d:b5:46:86:06:06:b2:a8:c0:4b:01:8a:
ce:aa:9c:a4:fb:36:2e:1d:aa:3e:ed:2c:05:f8:1f:
d0:97:c5:1e:63:bb:bf:79:c8:e0:8e:a0:bb:10:57:
d3:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:7F:33:82:D1:C9:6C:02:DF:01:CE:D2:46:0A:0D:58:BA:88:C3:81
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/iH8zgtHJbALfAc7SRgoNWLqIw4E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.148.32.0/21
31.148.224.0/20
92.253.240.0/20
93.171.48.0/20
93.171.80.0/20
95.46.34.0/23
95.46.144.0/24
146.158.32.0/20
Signature Algorithm: sha256WithRSAEncryption
39:04:17:f1:25:70:bd:51:72:1a:02:62:d3:60:b8:1d:58:d6:
31:49:ea:7e:88:9d:ea:fd:94:9f:18:db:80:ee:92:99:4e:10:
18:e4:66:57:e7:f9:6c:51:d0:a8:22:8a:ff:c0:c6:04:50:ed:
29:bd:2c:07:b6:ba:2a:99:45:3f:4d:87:8b:1e:73:95:18:04:
05:c5:8e:4e:1b:0c:be:c2:74:f5:f5:6c:53:8d:be:54:06:c4:
f5:c5:8a:79:64:2d:af:ff:b3:19:7a:0c:6c:03:f6:34:7a:72:
d0:67:ab:1a:c9:f0:8f:6d:d7:99:7f:9d:5e:69:70:2d:f6:67:
a6:eb:a1:f3:69:42:86:09:9f:ca:56:7d:0c:99:12:fa:a6:63:
30:eb:b5:5a:33:21:95:81:e0:2b:9c:99:17:24:5d:5b:77:61:
e7:90:90:3d:36:20:2b:62:30:c7:12:47:63:fa:af:da:d8:f7:
76:b3:53:fa:2e:1d:01:79:d1:c2:3d:e3:9d:d1:4e:f2:9e:a5:
ff:53:5d:1c:91:48:12:f5:52:d2:fd:6a:ad:8c:bc:d6:f5:13:
4e:87:80:bd:62:54:ce:0d:b3:d4:64:58:2b:f4:6c:e4:85:aa:
21:6a:b4:88:45:cd:80:6d:d4:d1:49:32:29:1f:40:a6:9f:80:
c7:98:f0:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 11 04:53:28 2024 by rpki-client on console-ams.rpki-client.org