Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/4h7T9z8nQ2q_xnbgbHlgOKU00T8.roa
File: 4h7T9z8nQ2q_xnbgbHlgOKU00T8.roa (raw, json)
Hash identifier: sX+VMpDH5UdZU3T6Rd0jVSCSIZn2BGph6zi1HHG0wfI=
Subject key identifier: E2:1E:D3:F7:3F:27:43:6A:BF:C6:76:E0:6C:79:60:38:A5:34:D1:3F
Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Certificate serial: 0190EF062128459B52524A4C878066BDC6CB
Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/4h7T9z8nQ2q_xnbgbHlgOKU00T8.roa
Signing time: Fri 26 Jul 2024 12:31:14 +0000
ROA not before: Fri 26 Jul 2024 12:31:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 185.197.135.0/24 maxlen: 24
2a06:e881:650f::/48 maxlen: 48
2a06:e881:7340::/42 maxlen: 48
2a06:e881:73ff::/48 maxlen: 48
2a06:e881:9200::/45 maxlen: 48
2a06:e881:9600::/48 maxlen: 48
2a06:e881:9700::/44 maxlen: 44
2a06:e881:9700::/48 maxlen: 48
2a06:e881:9701::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Oct 2024 14:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:ef:06:21:28:45:9b:52:52:4a:4c:87:80:66:bd:c6:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Validity
Not Before: Jul 26 12:31:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e21ed3f73f27436abfc676e06c796038a534d13f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ce:40:83:31:b6:9f:17:01:0b:95:fc:f7:86:
6e:5e:57:37:ba:1f:9f:da:5c:ce:e4:0a:44:58:4a:
54:42:1f:d3:29:5f:4d:95:af:62:e0:10:1c:ef:d8:
8d:61:bd:ee:87:f2:c9:aa:7f:46:61:ff:0f:c9:a7:
e8:ec:93:80:e3:c2:aa:c1:78:ed:cc:ff:4e:ed:9f:
4a:bb:08:60:f9:69:2d:43:d5:37:2e:14:96:a5:b6:
cf:46:ff:55:06:fa:fa:0f:c1:f9:d7:fc:80:6c:3f:
05:94:77:09:00:d6:5f:43:26:49:4a:46:2a:99:d1:
c6:6b:46:d1:9a:70:c8:17:14:e5:54:b7:cb:d1:57:
54:a5:47:3d:b6:8b:75:23:9c:04:c8:ed:de:e7:f7:
6e:5d:c0:75:35:8b:e7:e6:0b:4b:de:f5:1d:93:49:
98:5f:a3:e3:15:76:d3:f6:8d:38:72:88:b5:bc:b0:
e6:73:2f:aa:ee:d7:2c:de:99:f2:f3:3f:e5:e2:42:
2d:43:d4:87:e6:2c:d6:31:b9:93:a5:98:d2:8e:1a:
5e:3d:fd:6b:d3:15:d8:65:10:44:80:e5:71:4e:f5:
10:5f:e3:37:ab:6c:b4:b7:08:52:78:5f:dc:db:c4:
85:31:1c:98:57:b0:d7:7d:e3:46:52:a3:33:c7:b7:
9c:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:1E:D3:F7:3F:27:43:6A:BF:C6:76:E0:6C:79:60:38:A5:34:D1:3F
X509v3 Authority Key Identifier:
keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/4h7T9z8nQ2q_xnbgbHlgOKU00T8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.197.135.0/24
IPv6:
2a06:e881:650f::/48
2a06:e881:7340::/42
2a06:e881:73ff::/48
2a06:e881:9200::/45
2a06:e881:9600::/48
2a06:e881:9700::/44
Signature Algorithm: sha256WithRSAEncryption
3f:33:71:4b:6d:a3:81:f7:6e:76:b1:bb:06:1d:7e:b1:18:0f:
4a:eb:77:e9:68:bd:9b:20:c6:25:96:33:22:2b:8d:f2:f8:3a:
49:cb:c7:51:15:1c:5c:83:08:2a:7f:66:4a:8d:42:e5:8e:ef:
44:e3:52:6f:f8:6a:df:79:4e:e2:33:a4:95:56:bf:20:6b:6b:
4c:75:59:32:28:11:83:f3:c4:df:db:df:f8:c0:94:fe:a1:b9:
75:30:c3:b1:13:53:d9:66:38:43:96:87:a6:5e:bd:ee:7e:08:
23:6a:ea:84:96:69:63:45:78:cf:bb:fa:cc:02:3e:2d:8d:dc:
0a:18:ff:cc:b6:4f:00:85:f0:27:52:18:ca:98:7f:38:c1:ca:
e4:51:84:c0:58:5e:e2:3e:5c:85:3a:b5:2e:0a:dd:fd:3b:e4:
c7:47:b9:85:e9:21:b8:41:33:f2:94:75:bb:6f:9f:f5:0e:4a:
fa:3c:8b:40:b9:0c:a4:e3:b2:5a:fd:d5:78:ee:0a:40:8e:a1:
46:0f:51:cb:e9:00:64:3b:de:00:d7:b4:c4:f7:9d:11:b0:21:
ba:f9:ed:e5:26:83:3c:a5:a1:ec:00:38:04:51:71:00:b1:45:
27:6d:62:c3:d5:13:8e:13:1d:64:c0:93:ff:29:4d:ce:ca:ac:
1f:4b:57:2e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Oct 22 19:12:07 2024 by rpki-client on console-ams.rpki-client.org