Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/da3RxjJG7o8bLGxRMBqKdfsxXvQ.roa
File: da3RxjJG7o8bLGxRMBqKdfsxXvQ.roa (raw, json)
Hash identifier: RhBipDelDlNO14rW5U9M289KVa115LPx/XwT9z0l7Xc=
Subject key identifier: 75:AD:D1:C6:32:46:EE:8F:1B:2C:6C:51:30:1A:8A:75:FB:31:5E:F4
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 01917622E4B3A17C3984E08A552F42E76809
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/da3RxjJG7o8bLGxRMBqKdfsxXvQ.roa
Signing time: Wed 21 Aug 2024 18:11:23 +0000
ROA not before: Wed 21 Aug 2024 18:11:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43201
IP address blocks: 5.42.216.0/24 maxlen: 24
37.72.131.0/24 maxlen: 24
46.175.132.0/24 maxlen: 24
91.213.155.0/24 maxlen: 24
193.8.74.0/24 maxlen: 24
194.104.139.0/24 maxlen: 24
194.104.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:76:22:e4:b3:a1:7c:39:84:e0:8a:55:2f:42:e7:68:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Aug 21 18:11:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=75add1c63246ee8f1b2c6c51301a8a75fb315ef4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:56:02:1e:7b:da:24:3a:f1:26:d5:46:fa:f9:
5e:ee:db:98:52:d0:c7:3a:64:39:58:89:70:00:41:
b1:ae:3e:f7:80:1f:a0:0c:36:0c:61:27:ec:ae:7f:
0f:bc:7c:56:7f:fc:e3:d1:fd:33:96:74:a7:9a:15:
81:a7:26:42:4a:25:23:d7:6a:2b:6f:96:0b:ae:d5:
a8:10:a6:17:3d:3e:83:20:3c:0b:2f:65:b1:3c:53:
29:49:cd:cb:39:7e:3e:f7:ec:f5:9e:33:c6:6b:0d:
78:89:99:ff:0d:6b:35:d9:4d:5f:7c:f7:ad:8b:f2:
6d:aa:64:6c:71:0b:ec:8b:b0:a7:be:20:5f:89:94:
80:32:0b:97:75:d4:61:3e:f6:1a:11:cc:3e:20:a8:
e8:e8:ac:26:bb:33:5e:70:7b:34:f9:5b:c3:b2:45:
23:c4:44:c8:75:7d:ec:7d:3e:4c:e7:40:78:01:6e:
9f:94:b6:d2:38:3f:e2:6e:bb:50:79:41:ed:9a:f0:
5e:10:53:04:da:d1:6c:8c:f2:da:ab:74:54:32:5e:
e4:27:54:33:70:61:b2:9a:b7:b6:8c:1f:6f:0b:46:
44:16:be:72:b2:fb:90:99:6b:7a:56:7b:23:39:d1:
dc:49:15:8b:8a:04:d6:4b:fe:84:1b:85:f6:e8:a5:
b2:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:AD:D1:C6:32:46:EE:8F:1B:2C:6C:51:30:1A:8A:75:FB:31:5E:F4
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/da3RxjJG7o8bLGxRMBqKdfsxXvQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.42.216.0/24
37.72.131.0/24
46.175.132.0/24
91.213.155.0/24
193.8.74.0/24
194.104.139.0-194.104.140.255
Signature Algorithm: sha256WithRSAEncryption
15:d2:db:90:2b:b4:24:23:db:9b:17:13:44:40:5e:22:bd:b4:
f1:5c:9a:54:aa:7c:e9:18:f3:6d:b2:1d:0b:90:b6:69:33:53:
d9:d7:c2:5a:e0:13:e8:d6:74:fa:3b:b2:f5:fb:b3:37:96:d9:
27:2f:28:cf:19:a5:36:1b:b5:47:38:5b:16:cb:bb:51:dd:1b:
36:b0:6d:18:8a:87:2d:d3:42:7c:4f:91:91:47:7c:bf:5f:3d:
2d:71:3b:49:de:ff:85:bf:d1:ff:3d:99:6e:59:3c:b7:bf:94:
d2:06:b2:9e:9d:1f:26:20:b7:5e:c1:98:4e:0d:06:a3:b2:ee:
6d:94:d5:6f:b0:f4:e1:10:37:a3:84:8d:ee:e0:64:4d:fe:11:
bf:2f:a3:a2:56:c3:4b:ef:b4:45:29:d1:51:64:fc:29:05:2c:
e9:f1:d4:29:d3:51:51:61:9c:12:30:37:e5:d4:6b:1e:32:30:
8b:c7:4f:f6:2c:70:e3:15:fb:f4:1c:9e:11:e5:ac:fe:a0:3c:
5f:c3:c7:e0:fe:9b:41:25:4d:5a:df:b9:9e:14:05:8e:16:29:
28:49:f1:40:8f:a8:9d:88:64:bc:cf:3b:fa:71:4e:4a:64:39:
ed:48:2c:65:1f:b5:48:53:0d:69:a2:42:ab:ed:ca:18:39:ee:
4d:44:84:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:26:03 2024 by rpki-client on console-ams.rpki-client.org