Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/bHrCqOXiwytpRjgnuK6AEKp_3_k.roa
File: bHrCqOXiwytpRjgnuK6AEKp_3_k.roa (raw, json)
Hash identifier: kl/DNczNK/EWanUx64+H7vV1VxpJT0oTloVPzrrtt8I=
Subject key identifier: 6C:7A:C2:A8:E5:E2:C3:2B:69:46:38:27:B8:AE:80:10:AA:7F:DF:F9
Certificate issuer: /CN=a088b0547f09fe9224050d70a523da5bedbe0738
Certificate serial: 0193408F8E36F77DEF9DF68066933009E944
Authority key identifier: A0:88:B0:54:7F:09:FE:92:24:05:0D:70:A5:23:DA:5B:ED:BE:07:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/bHrCqOXiwytpRjgnuK6AEKp_3_k.roa
Signing time: Mon 18 Nov 2024 18:36:10 +0000
ROA not before: Mon 18 Nov 2024 18:36:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212027
IP address blocks: 37.230.138.0/24 maxlen: 24
45.143.196.0/22 maxlen: 24
45.143.196.0/24 maxlen: 24
45.143.197.0/24 maxlen: 24
45.143.198.0/24 maxlen: 24
45.143.199.0/24 maxlen: 24
81.16.176.0/24 maxlen: 24
81.16.177.0/24 maxlen: 24
91.208.92.0/24 maxlen: 24
185.83.152.0/24 maxlen: 24
185.83.153.0/24 maxlen: 24
185.83.154.0/24 maxlen: 24
185.83.155.0/24 maxlen: 24
185.206.148.0/24 maxlen: 24
185.206.149.0/24 maxlen: 24
185.206.150.0/24 maxlen: 24
185.206.151.0/24 maxlen: 24
188.64.33.0/24 maxlen: 24
194.164.96.0/24 maxlen: 24
194.213.3.0/24 maxlen: 24
213.170.135.0/24 maxlen: 24
2a10:e780::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:40:8f:8e:36:f7:7d:ef:9d:f6:80:66:93:30:09:e9:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a088b0547f09fe9224050d70a523da5bedbe0738
Validity
Not Before: Nov 18 18:36:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6c7ac2a8e5e2c32b69463827b8ae8010aa7fdff9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:21:f5:52:df:5d:cd:81:9d:d2:f9:0b:2d:21:
8f:a5:71:b1:23:fd:16:e8:fc:45:f5:8e:b7:c9:97:
19:c4:77:1a:e5:c3:eb:97:0d:c6:76:a3:51:ec:76:
3d:dc:cf:8a:4b:93:54:16:82:65:6b:54:16:ce:9e:
66:93:21:a6:2e:25:27:0c:49:0b:cf:d7:19:ff:a4:
77:4c:42:46:81:9a:84:e2:37:c5:4b:c6:12:3f:7f:
4f:89:41:0a:c9:67:e2:5b:be:b9:d5:f6:dc:e8:ac:
ca:64:fe:43:3a:3c:76:d0:5d:2f:df:a4:7c:d9:a0:
08:4b:8f:8b:43:02:be:fb:7e:57:da:be:3f:db:66:
ea:7f:d5:99:8c:32:4b:5c:0f:d3:e4:87:75:61:c1:
78:4f:bd:17:0a:e2:8f:54:74:2d:d7:cb:01:be:fc:
b0:46:03:c3:81:5b:b7:b7:e9:ed:b5:4d:a7:55:03:
41:da:c1:dd:80:85:05:32:90:26:72:62:11:11:2f:
e6:3e:1e:fd:45:45:a9:32:e7:0e:b8:21:a0:11:ff:
9c:0b:d4:7f:fe:af:0b:67:03:01:06:ca:1c:b6:99:
eb:00:7d:4f:16:57:1e:02:3f:ec:0a:29:8a:bf:e7:
55:49:9d:a9:3c:9f:8d:74:cd:29:7f:e7:01:48:ca:
a2:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:7A:C2:A8:E5:E2:C3:2B:69:46:38:27:B8:AE:80:10:AA:7F:DF:F9
X509v3 Authority Key Identifier:
keyid:A0:88:B0:54:7F:09:FE:92:24:05:0D:70:A5:23:DA:5B:ED:BE:07:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/bHrCqOXiwytpRjgnuK6AEKp_3_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.230.138.0/24
45.143.196.0/22
81.16.176.0/23
91.208.92.0/24
185.83.152.0/22
185.206.148.0/22
188.64.33.0/24
194.164.96.0/24
194.213.3.0/24
213.170.135.0/24
IPv6:
2a10:e780::/40
Signature Algorithm: sha256WithRSAEncryption
b9:c1:5a:5b:01:e3:f8:1a:7b:a7:f9:61:9d:fd:ef:e0:e0:79:
95:29:1c:d7:84:c6:98:ef:e0:77:54:83:1f:d8:5d:7c:97:fc:
70:7e:2f:33:6c:8f:e9:b8:c4:33:ca:df:a2:67:7c:0f:26:7e:
54:38:18:ec:d2:16:0f:11:85:f4:21:7e:26:bb:59:89:6e:86:
fc:a6:80:ca:a9:86:81:0d:46:60:af:00:e9:83:3e:7e:42:d9:
f9:a6:49:f9:a4:76:08:98:c4:ea:71:07:87:2c:ad:a7:2b:99:
0c:dd:f5:a3:00:bb:2a:c5:f0:ed:d3:00:f9:16:8d:07:e8:eb:
d8:4a:0c:1b:07:a4:b6:8d:f3:f0:37:7a:df:32:b3:3c:2f:26:
43:15:04:97:a8:a3:5a:3b:d8:cc:89:f6:63:25:e6:a6:fc:17:
86:ff:b0:5c:58:0e:97:88:59:fc:d7:1d:2a:ca:0b:6a:9a:ba:
8d:36:e4:da:22:90:45:98:2e:44:84:c5:11:c5:c2:dd:82:5c:
ed:5f:61:a5:e9:8c:b7:f3:c0:a1:3b:13:47:f9:5e:ce:25:b5:
3b:1d:9c:53:f8:c6:8f:7d:48:43:72:36:5f:eb:0d:94:7a:5b:
3b:85:3a:b3:99:d5:ea:ed:5b:1c:23:f8:67:1e:7e:e2:14:d4:
1e:39:95:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:30:00 2024 by rpki-client on console-ams.rpki-client.org