Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/e7gzRY3Kuapt4FT0cMiKWE7S8uU.roa
File: e7gzRY3Kuapt4FT0cMiKWE7S8uU.roa (raw, json)
Hash identifier: DqNc2cm5zLT+VEsrdJ1rMB98uu/TD3DpK7NBhXYs1CQ=
Subject key identifier: 7B:B8:33:45:8D:CA:B9:AA:6D:E0:54:F4:70:C8:8A:58:4E:D2:F2:E5
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 01922D694DDD4FA7F078742CB5F76311BB4D
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/e7gzRY3Kuapt4FT0cMiKWE7S8uU.roa
Signing time: Thu 26 Sep 2024 08:18:48 +0000
ROA not before: Thu 26 Sep 2024 08:18:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209087
IP address blocks: 85.8.136.0/22 maxlen: 22
85.8.136.0/23 maxlen: 23
85.8.136.0/24 maxlen: 24
85.8.137.0/24 maxlen: 24
85.8.138.0/23 maxlen: 23
85.8.138.0/24 maxlen: 24
85.8.139.0/24 maxlen: 24
179.189.212.0/22 maxlen: 22
179.189.212.0/23 maxlen: 23
179.189.212.0/24 maxlen: 24
179.189.213.0/24 maxlen: 24
179.189.214.0/23 maxlen: 23
179.189.214.0/24 maxlen: 24
179.189.215.0/24 maxlen: 24
185.227.92.0/22 maxlen: 22
185.227.92.0/23 maxlen: 23
185.227.92.0/24 maxlen: 24
185.227.93.0/24 maxlen: 24
185.227.94.0/23 maxlen: 23
185.227.94.0/24 maxlen: 24
185.227.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 00:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:2d:69:4d:dd:4f:a7:f0:78:74:2c:b5:f7:63:11:bb:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Sep 26 08:18:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7bb833458dcab9aa6de054f470c88a584ed2f2e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:51:05:ba:81:96:1a:59:4a:a6:03:03:92:37:
09:a1:70:79:9e:60:34:ad:c6:80:53:e3:cc:8f:86:
92:c0:d2:db:88:55:5d:0a:44:17:99:53:e8:f6:6e:
c1:84:a4:ad:9e:06:5d:a5:df:41:66:fb:59:4c:84:
13:96:a2:a2:dc:8b:03:08:e3:75:0e:82:fe:00:16:
ef:18:ad:09:21:e5:37:63:5d:86:32:85:f3:47:e4:
cf:ff:f1:c1:fd:3d:10:e1:6d:c3:5d:cd:00:c4:bd:
3b:51:b1:21:b2:68:a5:bd:41:f2:ea:6b:b2:5a:b4:
25:91:fe:61:5a:cc:ed:a0:17:6d:2c:47:aa:cb:c4:
64:78:3d:37:37:7a:54:f6:18:35:58:7f:65:e8:d9:
42:fa:e4:7f:7f:42:9b:ba:55:76:86:d7:00:69:d0:
b4:24:cc:ee:0b:4c:eb:3d:14:5a:a0:61:1e:7e:e2:
ae:a2:00:95:d0:38:f1:47:65:f5:af:08:97:2a:f5:
a7:62:a9:c9:77:a4:fd:ec:7b:70:72:2c:ab:de:39:
08:8a:4b:83:e0:92:a2:14:bc:f3:11:5f:6e:c5:c6:
f1:08:ca:0e:a2:99:e0:b6:91:a5:2f:22:52:5f:2a:
f3:9f:8f:6c:04:35:70:79:b3:36:be:c6:2e:98:b7:
5c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:B8:33:45:8D:CA:B9:AA:6D:E0:54:F4:70:C8:8A:58:4E:D2:F2:E5
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/e7gzRY3Kuapt4FT0cMiKWE7S8uU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.8.136.0/22
179.189.212.0/22
185.227.92.0/22
Signature Algorithm: sha256WithRSAEncryption
4f:98:20:f4:84:d1:36:50:7b:93:da:5c:ef:dc:e3:b9:17:48:
70:17:75:f4:2c:d1:f1:e7:12:95:2f:0a:c2:ae:19:07:f3:76:
9f:f6:63:25:6e:ff:fc:d0:d1:6e:cb:9f:5b:3e:05:bc:d3:a4:
15:3c:11:3e:9b:eb:4d:f0:ad:3c:a5:5e:88:f4:9f:2f:0e:db:
a0:46:42:06:ca:04:4c:d8:08:d7:9f:52:2d:1b:b7:ef:99:30:
22:eb:9f:12:b2:d8:87:42:cd:fc:2a:44:33:2d:00:8a:42:c6:
fc:19:aa:14:d1:4c:c8:c6:12:14:b6:be:1d:8f:87:59:49:3c:
5b:d9:71:70:a1:42:3e:fe:a2:b4:ff:fe:e8:b8:41:85:c9:95:
44:bf:a9:37:6c:1b:da:b0:1b:73:45:e2:d6:49:ae:74:a2:55:
b9:a8:52:99:67:14:d6:9f:5d:69:9f:06:b7:00:d2:32:5d:df:
0d:73:8d:38:11:8a:8d:35:13:d4:a8:63:3e:85:2e:da:dc:80:
29:98:a2:fa:b2:f8:f5:c1:09:65:04:98:de:e7:59:14:9f:3c:
81:c0:1a:eb:18:0b:be:10:40:b3:d7:83:05:88:dd:0c:c2:69:
9d:6c:7a:2b:b8:3d:ed:ac:c5:dd:ab:ca:a1:33:b5:f8:06:a3:
b4:fc:0f:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:50:09 2024 by rpki-client on console-ams.rpki-client.org