Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/c30csS6JK4s9MoQXsamjG5S5mQY.roa
File: c30csS6JK4s9MoQXsamjG5S5mQY.roa (raw, json)
Hash identifier: lVQXJ67RyqpidXoEAZ7j7+rNp3Q3lOFHrXyCzDWq548=
Subject key identifier: 73:7D:1C:B1:2E:89:2B:8B:3D:32:84:17:B1:A9:A3:1B:94:B9:99:06
Certificate issuer: /CN=22f2c2e7bc1da54d919ca5b5941d378892b2ccb2
Certificate serial: 018CC795337113635D5D1A566627BB06B5A2
Authority key identifier: 22:F2:C2:E7:BC:1D:A5:4D:91:9C:A5:B5:94:1D:37:88:92:B2:CC:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/c30csS6JK4s9MoQXsamjG5S5mQY.roa
Signing time: Tue 02 Jan 2024 00:31:33 +0000
ROA not before: Tue 02 Jan 2024 00:31:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51474
IP address blocks: 176.108.228.0/22 maxlen: 22
31.131.160.0/22 maxlen: 22
91.233.193.0/24 maxlen: 24
91.233.194.0/23 maxlen: 23
176.113.96.0/23 maxlen: 23
178.212.201.0/24 maxlen: 24
178.212.206.0/24 maxlen: 24
178.212.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 May 2024 14:51:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:33:71:13:63:5d:5d:1a:56:66:27:bb:06:b5:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22f2c2e7bc1da54d919ca5b5941d378892b2ccb2
Validity
Not Before: Jan 2 00:31:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=737d1cb12e892b8b3d328417b1a9a31b94b99906
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:3c:f0:37:e4:77:06:65:6e:a6:25:2f:84:69:
80:88:c8:be:04:46:26:d4:ad:85:c7:c0:b4:2c:b9:
ae:78:db:f5:91:66:8e:85:58:3e:69:a6:0e:a4:0f:
e1:c1:8a:1a:b1:17:34:6e:ac:2e:96:71:55:b4:65:
36:19:2c:47:d1:a1:a5:3b:2e:29:ed:90:bd:9c:8d:
52:45:f1:6a:41:68:0a:13:21:18:8f:a2:c5:63:d4:
cf:aa:c3:13:ef:db:30:e7:ad:63:9b:5e:f7:b8:5b:
0e:d8:40:79:ff:50:56:67:32:4e:46:70:70:0c:c8:
54:98:71:65:d0:46:d7:5e:0f:08:48:50:42:de:48:
27:f6:0c:40:dd:9f:31:11:cb:1d:99:31:5d:eb:89:
11:43:54:a2:a1:6b:84:0a:fe:a1:a4:ac:11:a2:f6:
4a:0a:8f:7d:c8:2f:37:91:3c:82:ff:f3:70:5c:0f:
9f:3b:c8:ee:6a:1a:2c:f9:f1:33:c3:9a:b7:e5:62:
4f:73:98:ed:56:bf:44:9a:d6:5e:bb:ed:ad:61:f7:
1c:9e:ea:66:1e:5d:48:44:6b:a0:56:0c:96:0a:dc:
c8:81:80:b7:1a:f0:53:14:ef:48:46:0c:86:db:99:
76:42:d5:f5:e0:83:4e:04:dd:a1:08:36:40:4e:3c:
3a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:7D:1C:B1:2E:89:2B:8B:3D:32:84:17:B1:A9:A3:1B:94:B9:99:06
X509v3 Authority Key Identifier:
keyid:22:F2:C2:E7:BC:1D:A5:4D:91:9C:A5:B5:94:1D:37:88:92:B2:CC:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/c30csS6JK4s9MoQXsamjG5S5mQY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.131.160.0/22
91.233.193.0-91.233.195.255
176.108.228.0/22
176.113.96.0/23
178.212.200.0/23
178.212.206.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:b2:62:31:94:c8:0f:90:56:13:bd:c5:d5:97:23:92:c3:cb:
86:5b:06:25:91:50:ca:bd:93:3a:16:2c:49:49:03:99:36:35:
82:91:fd:be:ca:f7:73:43:e8:0b:46:09:76:49:84:8d:ce:22:
ac:9f:02:27:2c:cc:dc:5c:44:e7:92:bf:58:02:c6:e2:1a:f9:
d9:3e:6c:9f:ba:8a:d8:d4:28:f1:b1:16:03:2a:a2:e4:cb:bc:
07:4b:a6:7e:73:9e:d7:77:cc:a7:8d:7b:47:fc:b9:08:cd:bc:
10:37:a6:9b:80:84:d7:d1:3e:4d:7c:28:aa:99:69:26:93:11:
1e:4f:86:cd:ee:4e:39:5e:ee:87:ca:19:28:2d:af:9a:e7:a0:
68:a3:1b:f4:30:7a:6f:6e:16:64:02:02:57:1d:f9:b6:d1:a2:
f7:bc:42:91:ce:da:31:fb:62:11:4a:4b:33:08:bc:b2:20:32:
33:2d:99:35:cd:09:65:f1:fa:ee:61:31:eb:40:17:8a:4a:5a:
c2:05:50:6a:9a:61:5c:23:24:3a:b7:0a:ee:d5:7b:3a:0a:0c:
6d:74:7a:e9:25:bc:37:33:9e:38:2d:b7:b5:2e:05:35:3d:29:
2f:77:fb:7a:38:6d:2b:47:a4:2b:f1:7c:b3:8c:64:63:be:aa:
ae:56:90:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 19:53:23 2024 by rpki-client on console-ams.rpki-client.org