Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/c75642-172b-42c1-a1d1-d25466a1fa9f/1/RmGHJ-nK5bmnCIaxOjlj772Zy2Q.roa
File: RmGHJ-nK5bmnCIaxOjlj772Zy2Q.roa (raw, json)
Hash identifier: EETQFqzICHM+nmxKzxGSZ63b+1bsLfS6bcdD8iGJLqQ=
Subject key identifier: 46:61:87:27:E9:CA:E5:B9:A7:08:86:B1:3A:39:63:EF:BD:99:CB:64
Certificate issuer: /CN=782325321a302f0bac131bee11c9aea696e510ba
Certificate serial: 018CCA995C47235A02074E214E188718B535
Authority key identifier: 78:23:25:32:1A:30:2F:0B:AC:13:1B:EE:11:C9:AE:A6:96:E5:10:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eCMlMhowLwusExvuEcmuppblELo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/c75642-172b-42c1-a1d1-d25466a1fa9f/1/RmGHJ-nK5bmnCIaxOjlj772Zy2Q.roa
Signing time: Tue 02 Jan 2024 14:34:57 +0000
ROA not before: Tue 02 Jan 2024 14:34:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8867
IP address blocks: 147.237.4.0/24 maxlen: 24
147.237.1.0/24 maxlen: 24
147.237.2.0/24 maxlen: 24
147.237.3.0/24 maxlen: 24
147.237.0.0/24 maxlen: 24
147.237.5.0/24 maxlen: 24
147.237.6.0/24 maxlen: 24
147.237.7.0/24 maxlen: 24
147.237.0.0/16 maxlen: 16
147.237.11.0/24 maxlen: 24
147.237.8.0/24 maxlen: 24
147.237.9.0/24 maxlen: 24
147.237.10.0/24 maxlen: 24
147.237.70.0/24 maxlen: 24
147.237.71.0/24 maxlen: 24
147.237.69.0/24 maxlen: 24
147.237.74.0/24 maxlen: 24
147.237.76.0/24 maxlen: 24
147.237.72.0/24 maxlen: 24
147.237.73.0/24 maxlen: 24
147.237.77.0/24 maxlen: 24
147.237.80.0/24 maxlen: 24
147.237.14.0/24 maxlen: 24
147.237.15.0/24 maxlen: 24
147.237.12.0/24 maxlen: 24
147.237.13.0/24 maxlen: 24
147.237.248.0/24 maxlen: 24
2001:678:a3c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/c75642-172b-42c1-a1d1-d25466a1fa9f/1/eCMlMhowLwusExvuEcmuppblELo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/c75642-172b-42c1-a1d1-d25466a1fa9f/1/eCMlMhowLwusExvuEcmuppblELo.mft
rsync://rpki.ripe.net/repository/DEFAULT/eCMlMhowLwusExvuEcmuppblELo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 16:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:99:5c:47:23:5a:02:07:4e:21:4e:18:87:18:b5:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=782325321a302f0bac131bee11c9aea696e510ba
Validity
Not Before: Jan 2 14:34:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=46618727e9cae5b9a70886b13a3963efbd99cb64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:cb:cf:26:ef:7e:d2:96:b7:47:c0:6f:25:ad:
cd:7b:2b:49:db:9f:14:c9:91:7e:8c:ef:d4:25:57:
b7:fe:7b:5f:e9:a5:89:7c:d1:ee:c6:8e:e6:9a:04:
a8:98:31:e0:ac:47:5b:6d:63:3d:59:e9:b7:02:ad:
c6:67:bf:91:71:16:25:d1:48:1b:88:4b:fe:57:48:
7f:36:66:02:30:21:be:a4:ff:5b:38:3e:af:0e:f7:
85:87:33:55:21:7b:e5:79:eb:bd:c9:fa:cf:45:1a:
ad:8a:37:71:02:20:c3:2e:32:63:c0:0a:4d:20:68:
e7:d6:66:9f:a4:bb:76:05:96:a1:69:0e:b6:53:4c:
d5:81:4c:e6:20:7a:f0:40:cb:d7:1a:66:ec:91:c9:
e0:53:37:f3:3b:a1:80:0c:e0:3a:05:ba:8b:25:7c:
4d:89:cd:84:67:a3:a9:29:73:b2:bb:65:c5:84:10:
43:98:3f:c6:a7:26:f8:a1:cc:18:9e:cd:d5:fa:49:
2f:a4:29:24:b5:a8:19:1a:b0:79:b4:3b:2e:18:50:
ed:33:30:f9:fb:a2:db:5a:9f:d7:06:bd:9d:21:26:
95:c5:0a:9d:f8:a2:8c:45:c0:3e:64:dc:78:4e:86:
77:9c:3a:f7:39:97:88:06:41:5f:ab:e9:9b:61:74:
a6:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:61:87:27:E9:CA:E5:B9:A7:08:86:B1:3A:39:63:EF:BD:99:CB:64
X509v3 Authority Key Identifier:
keyid:78:23:25:32:1A:30:2F:0B:AC:13:1B:EE:11:C9:AE:A6:96:E5:10:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eCMlMhowLwusExvuEcmuppblELo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/c75642-172b-42c1-a1d1-d25466a1fa9f/1/RmGHJ-nK5bmnCIaxOjlj772Zy2Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/c75642-172b-42c1-a1d1-d25466a1fa9f/1/eCMlMhowLwusExvuEcmuppblELo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.237.0.0/16
IPv6:
2001:678:a3c::/48
Signature Algorithm: sha256WithRSAEncryption
a5:7e:5d:42:a3:35:47:35:4f:52:a9:cb:e3:5c:92:e8:50:3f:
e2:11:20:8b:3f:8a:60:44:45:d9:53:6e:c2:d2:d7:ee:34:ee:
1b:e6:de:6c:92:93:4d:c2:3f:04:7f:b6:ef:87:d9:55:0d:6e:
93:4a:40:c5:5e:4d:6c:9b:93:dc:95:92:d3:67:2a:60:ee:57:
4f:47:22:5e:de:f2:d0:98:e5:37:19:f1:cd:62:89:74:26:1b:
5e:5a:53:fa:11:ad:3e:51:3f:8f:ea:7a:f6:43:de:5b:8d:ec:
c5:9b:3c:45:d2:bd:f6:00:fe:c5:88:a6:5c:7b:d9:ab:60:5a:
13:a1:9c:73:7e:97:52:b0:b0:1d:76:6a:3e:85:9c:53:c0:9d:
5d:7d:90:0b:d9:f9:59:a6:01:90:dd:db:cc:8d:c0:c7:40:1a:
59:8f:c0:a5:58:a3:75:7f:a6:c8:bd:e3:c6:90:9f:e2:90:30:
22:10:33:e9:35:5a:87:6f:78:2b:eb:e0:c3:53:15:a1:23:a7:
8f:1a:24:73:d3:3c:b0:88:35:de:a1:09:74:70:3e:55:b4:43:
71:df:76:9d:d5:e1:6f:95:fd:54:02:ae:7f:8a:9a:7e:2a:69:
8e:cf:22:bf:e3:af:da:4b:d3:ad:9e:bf:de:fb:fb:ef:1b:16:
a1:b6:7a:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 20:38:22 2024 by rpki-client on console-fra.rpki-client.org