Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/v7CEyulOfWiBVGa2Zo7udyX5XqU.roa
File: v7CEyulOfWiBVGa2Zo7udyX5XqU.roa (raw, json)
Hash identifier: 6Rg6HrQTHGl2atmyyDGVykOBG0t3dIMm6MxR8AxPN84=
Subject key identifier: BF:B0:84:CA:E9:4E:7D:68:81:54:66:B6:66:8E:EE:77:25:F9:5E:A5
Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial: 018CC801D8676EB2F4480235B8DB1F28EA96
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/v7CEyulOfWiBVGa2Zo7udyX5XqU.roa
Signing time: Tue 02 Jan 2024 02:30:13 +0000
ROA not before: Tue 02 Jan 2024 02:30:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43357
IP address blocks: 92.60.40.0/24 maxlen: 24
45.130.20.0/22 maxlen: 32
45.147.51.0/24 maxlen: 32
45.147.50.0/24 maxlen: 32
194.36.25.0/24 maxlen: 24
185.248.85.0/24 maxlen: 24
185.254.75.0/24 maxlen: 32
185.194.52.0/22 maxlen: 24
2a07:fe00:1::/48 maxlen: 48
2a03:d9c0:3000::/48 maxlen: 48
2a09:7:2007::/48 maxlen: 48
2a0c:59c0:18::/48 maxlen: 48
2a0b:89c1:3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.mft
rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 May 2024 17:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:d8:67:6e:b2:f4:48:02:35:b8:db:1f:28:ea:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Validity
Not Before: Jan 2 02:30:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bfb084cae94e7d68815466b6668eee7725f95ea5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:3f:41:db:ba:14:2a:20:22:0b:e2:62:3e:27:
a2:d9:58:4e:b9:3e:cd:48:36:03:28:44:43:e9:8b:
56:4c:6b:41:73:17:92:a0:b7:51:0e:ca:67:e4:ef:
54:a0:03:fc:c1:f3:07:16:be:99:dc:b5:d9:e0:a8:
9c:db:16:c2:be:20:ed:8a:76:56:a2:b9:68:c4:73:
d7:fa:b4:0a:e1:c8:ec:02:cd:25:fb:94:b5:f6:2a:
63:9a:b0:d8:b8:f6:ed:70:fe:99:62:cb:06:26:34:
f5:12:0f:2e:fa:7e:da:d5:9d:51:0c:c4:7c:b3:f1:
c5:b9:1f:10:6a:b7:85:bd:86:ea:96:4c:a2:09:d2:
b4:dc:39:69:8d:ef:61:54:03:2d:85:cf:2f:78:17:
4c:5a:16:ea:a5:db:36:1d:4c:c9:ae:fb:11:65:6c:
38:fd:41:c5:59:e4:e6:e7:c8:2c:59:ac:4b:89:3d:
84:e3:04:d6:af:80:8e:d7:8d:70:36:7a:ce:ab:a3:
d2:b7:21:64:44:76:ac:57:cf:95:a7:b3:b8:46:73:
af:0f:fb:10:c3:5a:16:35:1f:55:45:f5:6f:93:fe:
9f:7d:91:70:c7:e4:e0:33:2d:3d:f5:a6:55:ee:c9:
b3:ad:f5:37:a7:93:62:5b:f8:fa:a6:67:1d:16:16:
11:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:B0:84:CA:E9:4E:7D:68:81:54:66:B6:66:8E:EE:77:25:F9:5E:A5
X509v3 Authority Key Identifier:
keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/v7CEyulOfWiBVGa2Zo7udyX5XqU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.20.0/22
45.147.50.0/23
92.60.40.0/24
185.194.52.0/22
185.248.85.0/24
185.254.75.0/24
194.36.25.0/24
IPv6:
2a03:d9c0:3000::/48
2a07:fe00:1::/48
2a09:7:2007::/48
2a0b:89c1:3::/48
2a0c:59c0:18::/48
Signature Algorithm: sha256WithRSAEncryption
00:59:8c:e5:ba:b8:e0:c9:9b:93:2b:13:57:c0:4a:cf:24:a5:
be:14:ff:79:be:bf:a2:90:49:25:b2:28:d8:13:1b:13:72:b3:
5b:54:d8:e9:81:ac:f0:20:33:10:7a:ad:aa:2a:ff:e7:29:12:
bd:5b:bf:f5:f8:81:ab:c6:fa:19:b4:f4:83:7d:66:38:6f:2c:
92:57:0f:11:10:af:15:34:9a:6a:b4:b4:68:83:43:07:58:bc:
e5:e5:3a:87:17:43:b2:25:2a:bd:51:d7:cd:96:31:57:ed:bc:
12:7c:36:00:48:fa:c8:54:72:ce:58:bc:75:17:b0:64:02:c1:
b6:5b:8d:12:3c:fe:3c:52:b2:b4:c2:ca:ea:c9:a0:b2:7f:9b:
43:5e:f0:fa:6b:29:8f:3b:01:d9:32:2e:4e:f6:49:38:5f:40:
ee:d2:83:c2:8c:31:77:a7:44:29:bf:5d:97:2b:37:fa:6f:31:
f8:62:9c:8e:6b:63:96:34:4c:4d:6b:ac:ca:9e:1f:29:38:80:
d3:30:12:8e:fa:75:f6:c2:79:29:b9:fe:0a:61:95:69:89:23:
30:53:b5:f9:d8:d7:bc:f1:0a:ea:9c:cc:f6:52:82:0d:e4:b4:
af:0d:28:f3:0a:19:64:87:c6:c2:e9:67:d1:a8:5f:8d:87:7a:
7b:2b:c3:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 26 20:44:30 2024 by rpki-client on console-ams.rpki-client.org