Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/nn24U-36zWzmMuMrPA_gEok3SnQ.roa
File: nn24U-36zWzmMuMrPA_gEok3SnQ.roa (raw, json)
Hash identifier: feaOAAW4M7ue00f7CmVWKDdnTfh9RCSmiFvRG44UPww=
Subject key identifier: 9E:7D:B8:53:ED:FA:CD:6C:E6:32:E3:2B:3C:0F:E0:12:89:37:4A:74
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 018E6943A75B9129E5E02A2355F47557E86C
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/nn24U-36zWzmMuMrPA_gEok3SnQ.roa
Signing time: Sat 23 Mar 2024 03:03:45 +0000
ROA not before: Sat 23 Mar 2024 03:03:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212552
IP address blocks: 46.249.98.0/23 maxlen: 24
46.249.100.0/22 maxlen: 24
82.115.13.0/24 maxlen: 24
82.115.16.0/24 maxlen: 24
82.115.17.0/24 maxlen: 24
82.115.18.0/24 maxlen: 24
82.115.19.0/24 maxlen: 24
82.115.20.0/23 maxlen: 24
82.115.24.0/22 maxlen: 24
89.251.8.0/23 maxlen: 24
103.75.196.0/22 maxlen: 24
185.80.196.0/24 maxlen: 24
185.215.244.0/23 maxlen: 24
193.36.84.0/23 maxlen: 24
202.133.88.0/24 maxlen: 24
202.133.89.0/24 maxlen: 24
212.90.102.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Apr 2024 20:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:69:43:a7:5b:91:29:e5:e0:2a:23:55:f4:75:57:e8:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Mar 23 03:03:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9e7db853edfacd6ce632e32b3c0fe01289374a74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:15:93:3f:e2:3a:dc:d8:0f:85:05:80:6f:2d:
e9:8c:92:95:1b:bb:1a:ad:ef:c8:41:a2:3f:03:04:
1d:73:0a:0b:6b:cc:81:44:60:17:cc:16:c4:99:ef:
c4:b3:6d:9c:0c:44:70:e5:93:f0:b1:f9:7e:3f:dc:
94:14:67:e5:f3:ca:00:8b:8b:01:f3:8d:73:e1:aa:
cd:d4:9a:10:90:42:d2:3a:d4:4d:40:87:7c:8e:13:
17:35:fc:ec:85:92:0c:58:84:1c:41:36:d9:35:1b:
3e:99:ee:c3:7d:e3:fc:f3:1a:c0:cf:54:a8:38:ae:
b9:72:a5:12:44:ce:9f:8c:df:93:4f:7a:7d:7f:7a:
60:64:bc:c7:82:e3:9f:eb:b4:8f:61:b1:ac:85:b6:
2f:3f:cb:e2:28:17:ac:0f:87:36:4c:5f:e9:0d:06:
25:f6:57:e7:6d:0a:72:31:99:02:7a:be:b1:04:90:
5c:d7:af:81:ef:89:4a:dd:31:1e:59:98:ea:84:10:
9e:8a:00:35:a1:da:57:a9:51:d7:ec:d2:61:44:1c:
44:cd:0c:7d:52:5b:3a:fa:40:79:08:1a:fd:18:ce:
7b:d8:b8:6f:95:ff:fd:ca:93:c5:b9:dc:14:f0:e3:
14:92:47:5b:63:e8:52:7d:de:45:17:db:9f:d9:25:
e7:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:7D:B8:53:ED:FA:CD:6C:E6:32:E3:2B:3C:0F:E0:12:89:37:4A:74
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/nn24U-36zWzmMuMrPA_gEok3SnQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.249.98.0-46.249.103.255
82.115.13.0/24
82.115.16.0-82.115.21.255
82.115.24.0/22
89.251.8.0/23
103.75.196.0/22
185.80.196.0/24
185.215.244.0/23
193.36.84.0/23
202.133.88.0/23
212.90.102.0/23
Signature Algorithm: sha256WithRSAEncryption
3c:89:a4:fe:c5:d9:c8:76:55:88:9a:d0:77:5e:80:de:b3:19:
c7:77:ad:48:42:9f:ba:20:a7:62:5e:e2:4e:14:61:e5:4a:12:
0c:ef:f4:cd:57:b6:e5:3e:89:ac:66:dd:78:00:23:2f:9b:e9:
f8:4e:64:0b:c9:6e:a1:6a:50:ee:6c:9b:05:3a:a9:71:34:fc:
54:aa:92:de:8b:13:e4:43:e9:01:56:52:ab:74:9f:7b:eb:80:
3f:63:e0:7e:0d:26:ab:2e:52:69:78:da:d9:a1:80:f8:bb:0b:
35:a0:db:10:af:fb:95:41:b9:0c:b3:06:61:45:cb:9d:f3:e8:
e5:42:26:a7:dc:2f:90:d0:48:3f:47:20:0c:eb:a9:77:bb:42:
28:7e:43:ad:32:41:18:76:c2:3c:69:af:b9:0b:10:96:4f:1d:
64:02:31:0f:3d:8b:e5:8a:d1:64:c8:07:7e:92:41:fa:ac:51:
9b:fb:f5:74:ff:c5:26:88:70:36:58:39:15:25:36:14:5e:ae:
19:56:05:03:b9:00:44:16:d5:a0:88:1b:e1:f7:53:18:00:44:
a4:c6:d4:5a:fb:5e:6a:a6:2c:de:37:1a:42:fb:27:0b:e5:dd:
f8:48:e8:e0:d4:e4:0a:b8:b7:b8:05:14:ed:34:73:f0:91:fa:
1b:bc:e5:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 21 04:04:26 2024 by rpki-client on console-fra.rpki-client.org