Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/zhwqWaOe_xsyv2EvMb848WZXIos.roa
File: zhwqWaOe_xsyv2EvMb848WZXIos.roa (raw, json)
Hash identifier: 3QRSYPX4Owb4GOR/4NIUBkUeugP7SpSKH0ov8V2bEe8=
Subject key identifier: CE:1C:2A:59:A3:9E:FF:1B:32:BF:61:2F:31:BF:38:F1:66:57:22:8B
Certificate issuer: /CN=abc8dbe52083ad335c9f1fde6016ec8b49293140
Certificate serial: 018CC50105FF9B9EB95614E1B39873E13CF2
Authority key identifier: AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/zhwqWaOe_xsyv2EvMb848WZXIos.roa
Signing time: Mon 01 Jan 2024 12:30:27 +0000
ROA not before: Mon 01 Jan 2024 12:30:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7155
IP address blocks: 77.222.136.0/24 maxlen: 24
188.0.64.0/23 maxlen: 23
194.146.197.0/24 maxlen: 24
93.183.215.0/24 maxlen: 24
188.0.66.0/24 maxlen: 24
93.183.228.0/24 maxlen: 24
93.183.229.0/24 maxlen: 24
46.164.152.0/23 maxlen: 23
193.108.50.0/24 maxlen: 24
193.108.51.0/24 maxlen: 24
93.183.197.0/24 maxlen: 24
195.69.176.0/24 maxlen: 24
46.164.160.0/22 maxlen: 22
91.204.95.0/24 maxlen: 24
185.8.41.0/24 maxlen: 24
185.8.40.0/24 maxlen: 24
185.8.42.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 14 May 2024 14:21:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:05:ff:9b:9e:b9:56:14:e1:b3:98:73:e1:3c:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abc8dbe52083ad335c9f1fde6016ec8b49293140
Validity
Not Before: Jan 1 12:30:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ce1c2a59a39eff1b32bf612f31bf38f16657228b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:05:52:1a:3d:ee:83:d3:8c:61:78:c5:dc:1f:
f1:09:d0:ad:85:91:b9:80:d6:e1:a0:d3:c9:3a:c7:
63:a4:2d:65:bb:b8:b5:87:66:a8:9c:a3:b7:e5:79:
1e:e0:55:d6:d2:a6:0f:fa:61:34:28:f0:c1:d1:24:
9d:1d:fc:f9:0d:94:02:aa:84:d8:2c:8e:7d:ad:3d:
0b:84:03:8e:53:c7:5f:22:69:55:98:55:97:70:ce:
48:9f:ca:4c:d6:db:05:bd:34:89:4f:11:75:a6:ad:
ca:1f:86:82:5e:93:f4:6f:ff:91:15:8a:3c:ea:13:
7a:0c:c2:45:b0:29:7d:b3:43:b7:8b:dc:c9:bb:de:
e8:2a:43:42:ed:bc:d0:a8:02:d0:05:3d:09:46:80:
c6:c4:e8:77:92:83:8d:9f:a0:0b:c7:3d:b3:80:f8:
f1:5d:b3:cb:7b:38:d2:a4:16:70:c7:15:09:81:80:
a2:78:7b:bf:53:f1:d3:ed:b1:d0:1a:81:21:12:41:
08:a2:d1:7b:e8:a2:dc:05:c5:2e:be:23:18:aa:dd:
b0:69:29:f5:77:63:56:71:0c:91:f6:ac:18:e9:fe:
27:e4:fc:17:54:24:03:7a:b6:a0:43:3b:1a:e9:17:
13:a2:95:ea:89:67:ca:9b:fc:82:db:84:68:d3:e0:
39:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:1C:2A:59:A3:9E:FF:1B:32:BF:61:2F:31:BF:38:F1:66:57:22:8B
X509v3 Authority Key Identifier:
keyid:AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/zhwqWaOe_xsyv2EvMb848WZXIos.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.164.152.0/23
46.164.160.0/22
77.222.136.0/24
91.204.95.0/24
93.183.197.0/24
93.183.215.0/24
93.183.228.0/23
185.8.40.0/22
188.0.64.0-188.0.66.255
193.108.50.0/23
194.146.197.0/24
195.69.176.0/24
Signature Algorithm: sha256WithRSAEncryption
99:3f:43:53:6d:8d:79:26:38:aa:23:d5:14:8e:f8:75:3e:ae:
fa:32:43:e5:cc:a2:6b:0e:bc:8c:ee:0d:4d:cc:9a:a8:07:a1:
01:60:d1:f3:a1:a2:a5:0d:ae:96:78:64:03:89:ee:c3:f4:57:
a8:a2:34:d9:c5:f4:5f:7c:dc:64:b1:36:3f:b7:09:ee:51:4f:
22:25:13:7c:54:2d:e0:df:96:81:79:45:c7:d4:cd:26:80:da:
7e:d6:d9:79:fb:73:c6:d6:f3:e4:87:92:2b:fd:cd:ab:f2:57:
c7:0e:34:61:f1:15:42:80:b4:61:66:a0:42:ab:68:4b:82:99:
14:7b:f5:cb:72:5d:b3:30:27:4a:08:da:69:89:2b:a9:4b:8e:
8a:63:d5:d1:f7:9a:76:f3:fd:3c:cc:68:cc:26:1d:10:56:67:
39:95:a9:8d:0d:87:49:b7:b6:4d:52:64:19:28:08:2c:53:ca:
c0:bc:94:b0:c6:63:02:90:25:93:86:a0:26:ef:29:60:ff:66:
5c:50:9e:2f:99:0e:fd:4f:15:03:51:d6:4e:46:02:0c:5d:7a:
3a:47:f8:73:27:7a:d6:22:60:df:b6:08:64:58:b1:f2:5e:0c:
26:da:92:be:0f:09:78:62:0c:74:bc:61:cb:14:7d:fa:ec:58:
ec:82:e7:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 13 17:39:53 2024 by rpki-client on console-ams.rpki-client.org