Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/75kV7OfqvfOLi7KJ1zb1BXviwMI.roa
File: 75kV7OfqvfOLi7KJ1zb1BXviwMI.roa (raw, json)
Hash identifier: aogWZS44iN2g82ZsOHiUMsAV0HWt1zOqTePt1v9YTfs=
Subject key identifier: EF:99:15:EC:E7:EA:BD:F3:8B:8B:B2:89:D7:36:F5:05:7B:E2:C0:C2
Certificate issuer: /CN=9aee15c33de358938d6900a1b3c14480a389e85b
Certificate serial: 01928A79B945BD1E0DDF010A660E24AE9902
Authority key identifier: 9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/75kV7OfqvfOLi7KJ1zb1BXviwMI.roa
Signing time: Mon 14 Oct 2024 10:01:25 +0000
ROA not before: Mon 14 Oct 2024 10:01:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215540
IP address blocks: 45.93.213.0/24 maxlen: 24
45.93.214.0/24 maxlen: 24
45.151.234.0/24 maxlen: 24
45.151.235.0/24 maxlen: 24
77.83.246.0/24 maxlen: 24
160.20.156.0/24 maxlen: 24
160.20.157.0/24 maxlen: 24
185.68.186.0/24 maxlen: 24
185.68.187.0/24 maxlen: 24
185.71.214.0/24 maxlen: 24
185.71.215.0/24 maxlen: 24
185.73.180.0/24 maxlen: 24
185.73.181.0/24 maxlen: 24
185.75.132.0/24 maxlen: 24
185.77.138.0/24 maxlen: 24
185.77.139.0/24 maxlen: 24
185.79.132.0/24 maxlen: 24
185.79.133.0/24 maxlen: 24
185.88.98.0/24 maxlen: 24
185.88.99.0/24 maxlen: 24
185.95.228.0/24 maxlen: 24
185.100.156.0/24 maxlen: 24
185.102.114.0/24 maxlen: 24
185.111.24.0/24 maxlen: 24
185.182.130.0/24 maxlen: 24
185.182.131.0/24 maxlen: 24
193.38.228.0/24 maxlen: 24
193.38.229.0/24 maxlen: 24
193.38.230.0/24 maxlen: 24
193.38.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:8a:79:b9:45:bd:1e:0d:df:01:0a:66:0e:24:ae:99:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aee15c33de358938d6900a1b3c14480a389e85b
Validity
Not Before: Oct 14 10:01:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ef9915ece7eabdf38b8bb289d736f5057be2c0c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:1f:e3:ba:fa:61:6b:8c:83:80:31:43:38:72:
43:dc:f1:3c:05:7b:69:26:f0:4d:04:3e:44:76:8a:
1d:1b:c5:0d:37:9d:a1:8f:16:87:54:e6:ae:fb:23:
c6:62:17:7d:2f:ad:26:3e:d8:31:c6:d7:95:8f:94:
00:bd:7a:6c:0f:c2:22:4f:b8:9f:46:2a:b8:f3:bd:
fe:95:bd:ba:dc:65:46:38:37:e9:03:b9:6e:b2:cc:
14:2e:7f:dc:d6:66:6d:eb:22:47:82:a5:6d:d8:54:
2f:c5:7b:9b:b0:6c:eb:78:23:c1:88:40:f1:17:da:
c9:ac:a6:d8:bb:ff:71:ed:e0:14:f2:1b:1f:e7:16:
c5:d7:97:b3:6e:44:98:c3:70:07:57:c7:4f:b7:fa:
28:2b:9f:02:6d:b9:01:43:19:3f:da:54:07:e7:33:
7f:50:cc:6f:c6:23:1b:36:79:0d:c1:37:e9:1e:c3:
3c:11:11:e4:83:af:30:4c:7a:cb:be:dd:b2:a1:be:
7d:24:79:01:79:ed:30:20:7e:be:02:a6:09:ba:ee:
20:10:d6:ad:68:89:61:65:b8:62:90:16:ee:b4:0e:
30:e4:ba:bd:d9:1b:1d:06:84:1a:96:1f:78:20:9b:
ac:df:ca:5d:63:72:c0:ad:3d:a2:bb:01:8c:ad:d3:
fd:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:99:15:EC:E7:EA:BD:F3:8B:8B:B2:89:D7:36:F5:05:7B:E2:C0:C2
X509v3 Authority Key Identifier:
keyid:9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/75kV7OfqvfOLi7KJ1zb1BXviwMI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.213.0-45.93.214.255
45.151.234.0/23
77.83.246.0/24
160.20.156.0/23
185.68.186.0/23
185.71.214.0/23
185.73.180.0/23
185.75.132.0/24
185.77.138.0/23
185.79.132.0/23
185.88.98.0/23
185.95.228.0/24
185.100.156.0/24
185.102.114.0/24
185.111.24.0/24
185.182.130.0/23
193.38.228.0/22
Signature Algorithm: sha256WithRSAEncryption
97:77:c9:37:da:9a:da:82:df:79:26:3e:a4:6b:58:e2:97:d2:
7a:e8:de:25:92:9a:27:e7:a2:ea:a9:9b:bf:1e:06:1b:11:2b:
64:59:9d:2c:9a:f3:3b:2a:2f:84:63:ab:6f:da:99:6b:d1:0a:
93:06:65:75:60:aa:a3:bd:67:91:a8:a6:04:a9:47:0a:b1:15:
c9:5a:68:82:cc:93:a5:e2:e6:b0:f6:07:64:46:c0:58:3b:9c:
10:c4:72:c1:c5:ef:36:80:ba:f2:23:38:7c:d9:80:e8:8e:ec:
4f:5a:52:1d:cd:ac:07:5b:bb:6a:17:47:8b:fb:4f:9d:70:f7:
28:37:6b:08:9f:d3:54:f9:ad:70:83:f7:1f:e9:91:69:96:77:
b7:6c:47:34:0f:fe:ed:a7:72:0e:1c:6d:03:8a:01:3b:76:50:
a9:b8:2e:ae:82:5f:44:dd:85:53:1b:fd:26:7e:ac:8a:db:50:
e3:c1:c4:74:53:ce:a4:32:ab:b1:ca:c9:1e:45:45:27:e1:ae:
f8:aa:43:cd:cf:c4:ca:b4:4c:5b:09:25:6a:29:91:35:fe:47:
02:a9:9e:11:1b:54:e2:7a:10:c8:9b:e5:5d:88:bf:1b:8f:e0:
59:46:3a:36:7d:fb:26:9a:fa:1c:6f:9c:93:d4:ac:fd:78:1c:
2f:c9:d9:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:55:54 2024 by rpki-client on console-fra.rpki-client.org