Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/czaGubBfyfz5nobZOvSWlIMpTDw.roa
File: czaGubBfyfz5nobZOvSWlIMpTDw.roa (raw, json)
Hash identifier: vNTXsAdzCTrQwwCQmJW5EjhL4sHfzCIakOPQKa2mlTo=
Subject key identifier: 73:36:86:B9:B0:5F:C9:FC:F9:9E:86:D9:3A:F4:96:94:83:29:4C:3C
Certificate issuer: /CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Certificate serial: 0192F9018DFBAA6183BA6C4FA9787A0EE10B
Authority key identifier: 8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/czaGubBfyfz5nobZOvSWlIMpTDw.roa
Signing time: Mon 04 Nov 2024 21:08:01 +0000
ROA not before: Mon 04 Nov 2024 21:08:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44477
IP address blocks: 46.151.176.0/24 maxlen: 24
46.151.177.0/24 maxlen: 24
46.151.178.0/24 maxlen: 24
46.151.179.0/24 maxlen: 24
46.151.180.0/24 maxlen: 24
46.151.183.0/24 maxlen: 24
83.142.208.0/24 maxlen: 24
83.142.209.0/24 maxlen: 24
83.142.210.0/24 maxlen: 24
83.142.211.0/24 maxlen: 24
83.142.212.0/24 maxlen: 24
83.142.214.0/24 maxlen: 24
83.142.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 08:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:f9:01:8d:fb:aa:61:83:ba:6c:4f:a9:78:7a:0e:e1:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Validity
Not Before: Nov 4 21:08:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=733686b9b05fc9fcf99e86d93af4969483294c3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a7:4d:5a:30:50:93:62:b6:05:b3:7f:8a:67:
99:a2:65:b7:0d:69:41:1a:ae:9f:de:bb:5c:dc:76:
f3:94:71:70:4d:b3:18:22:09:f1:c4:3a:70:bf:68:
f6:e0:fb:ee:89:45:68:bf:91:f5:aa:d4:3f:ea:b9:
34:83:b1:67:74:ea:46:7c:40:f9:de:05:32:c1:f3:
e9:25:2a:22:26:b7:f6:47:5f:04:0c:bf:3d:89:65:
b5:42:ed:a4:f5:50:71:e2:11:35:6f:67:58:5d:ad:
33:f9:c5:f6:04:81:c8:ce:d8:e7:4f:1d:e0:c3:0b:
71:33:d9:f6:e8:2e:c0:3e:54:df:f6:c1:ce:5d:a6:
2f:5d:1b:62:b8:b9:30:e8:bd:44:30:1d:c5:43:54:
d4:3a:f5:3e:de:ab:64:11:a6:3f:4a:ef:92:1a:e0:
13:13:1d:d1:d2:1d:4f:1b:64:e6:0b:db:41:7d:b3:
2e:10:ad:de:70:16:9e:be:df:cd:d7:f4:0a:0f:b0:
a7:0f:45:05:dd:0c:e9:67:7a:b5:83:c2:da:b5:02:
99:af:8c:84:d5:d9:07:99:02:9d:ca:43:7c:d3:ea:
b4:5a:c4:d1:b9:f2:55:34:2a:bd:4b:83:27:3a:23:
e4:81:94:84:f9:1f:2a:36:23:82:95:a1:de:d3:d6:
0b:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:36:86:B9:B0:5F:C9:FC:F9:9E:86:D9:3A:F4:96:94:83:29:4C:3C
X509v3 Authority Key Identifier:
keyid:8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/czaGubBfyfz5nobZOvSWlIMpTDw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.151.176.0-46.151.180.255
46.151.183.0/24
83.142.208.0-83.142.212.255
83.142.214.0/23
Signature Algorithm: sha256WithRSAEncryption
46:67:32:d8:ff:e3:33:14:7e:89:cb:17:c7:20:0c:1e:98:cf:
79:02:eb:69:46:03:3d:a1:7b:36:71:09:fa:db:fc:f7:3e:05:
a3:9e:1d:42:46:69:3d:f3:ea:12:a6:ba:f3:f1:2f:14:e4:c3:
be:84:52:90:36:c2:3b:16:60:b1:dc:a0:d0:9e:c2:5d:ad:1b:
81:d2:c3:3a:91:54:5b:84:1e:ea:43:63:05:76:95:73:b6:1d:
37:33:01:01:09:94:b1:b1:12:f4:98:9d:dd:24:63:b8:9d:4e:
8e:43:d8:2f:3f:4d:38:be:7b:da:a2:a4:a8:84:b6:5d:b0:08:
40:11:c0:1a:fd:26:6d:ea:61:ce:c9:33:92:52:0b:d1:55:50:
3d:5b:5f:c0:5e:be:8a:12:2e:7a:65:39:89:9c:99:4f:c4:7a:
c7:d2:f6:84:bc:12:fa:b2:3a:2b:b3:1d:64:ae:e1:37:e4:1e:
89:94:a4:65:67:e9:f2:38:4d:76:44:7e:e7:55:22:a8:bc:27:
86:6c:9e:69:ca:da:08:cc:7d:84:29:0d:d4:62:ae:db:12:3c:
8b:e4:44:37:79:9d:42:c1:43:08:1b:b1:4c:41:33:71:4f:62:
bc:6e:8a:0a:5e:33:7a:16:3b:d7:c0:f4:6c:d7:0f:e4:15:01:
ef:fa:0d:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:48:50 2024 by rpki-client on console-fra.rpki-client.org