Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/e80231-53b8-4225-8523-947de3868cd5/1/1-r4yYJDyLvf8qPnv4dxu1DQHu3k.roa
File: 1-r4yYJDyLvf8qPnv4dxu1DQHu3k.roa (raw, json)
Hash identifier: cErzck9sxESdTkX+lbAuDvgqQuOm9azJ0hrlXIGkzN8=
Subject key identifier: FA:BE:32:60:90:F2:2E:F7:FC:A8:F9:EF:E1:DC:6E:D4:34:07:BB:79
Certificate issuer: /CN=d78ac174e852b71c31163ec1d8649fff6b07ba79
Certificate serial: 018CC8017D7DB003FB17B65B0C4BEB7BBF77
Authority key identifier: D7:8A:C1:74:E8:52:B7:1C:31:16:3E:C1:D8:64:9F:FF:6B:07:BA:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/14rBdOhStxwxFj7B2GSf_2sHunk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/e80231-53b8-4225-8523-947de3868cd5/1/1-r4yYJDyLvf8qPnv4dxu1DQHu3k.roa
Signing time: Tue 02 Jan 2024 02:29:49 +0000
ROA not before: Tue 02 Jan 2024 02:29:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31263
IP address blocks: 195.182.242.0/23 maxlen: 23
195.182.241.0/24 maxlen: 24
195.182.240.0/20 maxlen: 20
195.182.244.0/22 maxlen: 22
195.182.248.0/21 maxlen: 21
88.214.44.0/22 maxlen: 22
195.182.226.0/24 maxlen: 24
195.182.225.0/24 maxlen: 24
195.182.229.0/24 maxlen: 24
195.182.228.0/24 maxlen: 24
195.182.227.0/24 maxlen: 24
195.182.232.0/21 maxlen: 21
195.182.231.0/24 maxlen: 24
195.182.230.0/24 maxlen: 24
195.182.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/e80231-53b8-4225-8523-947de3868cd5/1/14rBdOhStxwxFj7B2GSf_2sHunk.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/e80231-53b8-4225-8523-947de3868cd5/1/14rBdOhStxwxFj7B2GSf_2sHunk.mft
rsync://rpki.ripe.net/repository/DEFAULT/14rBdOhStxwxFj7B2GSf_2sHunk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:7d:7d:b0:03:fb:17:b6:5b:0c:4b:eb:7b:bf:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d78ac174e852b71c31163ec1d8649fff6b07ba79
Validity
Not Before: Jan 2 02:29:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fabe326090f22ef7fca8f9efe1dc6ed43407bb79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:80:73:6a:f9:b3:8f:aa:ef:20:b1:28:ab:24:
6a:04:5e:29:ea:30:67:bb:5c:df:f4:1b:9c:38:81:
14:44:2c:83:1b:af:0e:8e:63:32:ab:59:c7:a1:7e:
79:7f:1b:8d:84:aa:b3:2d:10:64:e9:01:d3:3c:8d:
bc:9e:15:1c:bb:bb:c5:da:68:30:a7:19:5f:a0:76:
32:a7:c5:bc:30:d5:93:08:51:88:66:d4:03:96:76:
dd:98:0c:9f:82:21:d5:14:eb:c9:9d:46:b5:34:1d:
e5:7c:77:24:63:3d:4e:f9:da:27:a7:28:2d:31:1f:
71:da:c4:ed:03:5a:9a:6c:f1:a5:19:b9:72:40:81:
ed:72:00:56:a6:08:79:67:fa:5b:b9:59:ac:c7:73:
cb:e8:26:b7:eb:80:ec:da:e9:00:c3:bd:af:bc:f8:
31:11:3a:e8:c2:fd:e7:bb:f9:e8:fc:ec:e4:3d:1f:
eb:78:cd:33:bc:f3:71:93:88:a9:3c:4c:76:fd:5c:
ee:7a:47:eb:51:a6:be:af:18:e2:8e:32:f1:da:42:
38:70:a0:04:ee:5b:32:47:58:27:ed:e6:7a:19:32:
10:80:2a:ae:14:ab:d7:46:7d:c5:4a:b9:9c:f4:ee:
d7:68:92:05:9f:c7:da:68:72:74:73:10:ec:3e:b1:
8a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:BE:32:60:90:F2:2E:F7:FC:A8:F9:EF:E1:DC:6E:D4:34:07:BB:79
X509v3 Authority Key Identifier:
keyid:D7:8A:C1:74:E8:52:B7:1C:31:16:3E:C1:D8:64:9F:FF:6B:07:BA:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/14rBdOhStxwxFj7B2GSf_2sHunk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e80231-53b8-4225-8523-947de3868cd5/1/1-r4yYJDyLvf8qPnv4dxu1DQHu3k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e80231-53b8-4225-8523-947de3868cd5/1/14rBdOhStxwxFj7B2GSf_2sHunk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.214.44.0/22
195.182.225.0-195.182.255.255
Signature Algorithm: sha256WithRSAEncryption
a7:2d:4c:1c:36:d6:43:90:a2:5d:89:46:44:ad:fb:ee:bf:d4:
e0:89:ea:3c:13:4f:10:dc:5f:8a:50:3f:db:4a:c3:d3:48:10:
c9:a7:d3:c0:47:54:c8:01:ff:5a:2f:06:6f:8b:f3:ea:a2:fe:
d8:42:2d:0d:23:e5:ef:f6:3d:ca:4c:7b:81:2e:bd:e1:88:68:
4b:64:14:1c:44:e3:b4:60:eb:a5:f5:d1:b7:2d:a3:d0:4a:da:
d4:4a:62:8b:fc:62:21:b3:f2:0d:b3:19:25:8e:44:25:e8:6f:
eb:27:a4:76:84:a6:51:98:49:a5:38:c5:94:b8:20:1e:0c:3a:
77:93:b0:a4:93:1c:a3:1b:0a:72:7b:73:d2:83:12:57:20:17:
2d:b7:f3:a4:83:a0:a7:12:8d:d1:3d:35:57:9c:86:9f:5f:c6:
b4:d3:e1:1c:43:c5:9f:bc:56:d1:56:e4:d4:2d:63:20:6a:52:
fd:dc:8d:87:c6:62:71:0b:e2:7b:db:61:bf:ee:bf:f5:7e:34:
54:f2:2f:3c:5f:00:68:d3:7a:25:ac:a8:40:30:ac:8e:9d:d3:
6a:7c:45:78:dc:51:27:f6:2f:8d:27:98:20:44:e1:ef:f7:4f:
59:ed:21:ee:b0:20:cd:53:9f:c0:10:93:14:ac:ca:7e:98:2d:
31:fc:e0:00
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat May 18 02:21:20 2024 by rpki-client on console-ams.rpki-client.org