Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/41b40c-f3b6-40b8-840c-19a3c5649b57/1/e49OvnnDUKGbdt7y4ZXtZ54Yb8k.roa
File: e49OvnnDUKGbdt7y4ZXtZ54Yb8k.roa (raw, json)
Hash identifier: n0mVMHVzkMYNB7zuN82d1sZdOHAY9oy96afDNA4vjpk=
Subject key identifier: 7B:8F:4E:BE:79:C3:50:A1:9B:76:DE:F2:E1:95:ED:67:9E:18:6F:C9
Certificate issuer: /CN=a9ec57bc8464fec2e9a1b098ffce34c21aaf9ca6
Certificate serial: 01907D375D1AA7CB8E28A50D958E99B54C07
Authority key identifier: A9:EC:57:BC:84:64:FE:C2:E9:A1:B0:98:FF:CE:34:C2:1A:AF:9C:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qexXvIRk_sLpobCY_840whqvnKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/41b40c-f3b6-40b8-840c-19a3c5649b57/1/e49OvnnDUKGbdt7y4ZXtZ54Yb8k.roa
Signing time: Thu 04 Jul 2024 10:08:18 +0000
ROA not before: Thu 04 Jul 2024 10:08:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57814
IP address blocks: 185.139.56.0/22 maxlen: 32
185.229.108.0/22 maxlen: 32
185.229.108.0/24 maxlen: 32
185.229.109.0/24 maxlen: 32
185.229.110.0/24 maxlen: 32
185.229.111.0/24 maxlen: 32
188.93.88.0/24 maxlen: 32
188.93.89.0/24 maxlen: 32
188.93.90.0/24 maxlen: 32
188.93.91.0/24 maxlen: 32
188.93.92.0/24 maxlen: 32
188.93.94.0/24 maxlen: 32
188.93.95.0/24 maxlen: 32
2a0a:5000::/29 maxlen: 128
2a0d:8a00::/32 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/41b40c-f3b6-40b8-840c-19a3c5649b57/1/qexXvIRk_sLpobCY_840whqvnKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/41b40c-f3b6-40b8-840c-19a3c5649b57/1/qexXvIRk_sLpobCY_840whqvnKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/qexXvIRk_sLpobCY_840whqvnKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:7d:37:5d:1a:a7:cb:8e:28:a5:0d:95:8e:99:b5:4c:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9ec57bc8464fec2e9a1b098ffce34c21aaf9ca6
Validity
Not Before: Jul 4 10:08:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7b8f4ebe79c350a19b76def2e195ed679e186fc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:68:45:8d:41:c8:b7:ab:af:6f:e9:17:a9:3e:
76:b1:98:fe:46:de:55:b9:22:da:e6:ab:39:de:ab:
fb:52:97:7e:c9:35:45:32:84:ab:50:eb:6b:8c:6c:
dd:57:5d:b6:b2:80:ec:c6:5e:f5:35:16:c6:2a:2b:
f8:a1:f9:3a:2b:09:8d:dc:6e:ff:cd:43:e7:80:92:
9f:a7:42:74:9d:e2:89:f1:f4:28:43:31:ff:c3:4c:
10:28:b3:bd:51:f3:0b:9d:d1:21:eb:00:e1:1f:c3:
8b:bc:4f:a6:a5:b6:f7:4f:e9:79:b2:23:59:52:7c:
9e:10:1f:39:bc:d6:5f:fa:b3:ac:49:bd:92:2f:5a:
2f:6b:72:59:98:4c:28:4b:c6:e9:9b:52:a8:42:77:
f1:f2:d9:1c:bb:b8:bb:c5:3f:1f:59:e7:62:b8:0c:
65:12:4e:7c:9e:b8:49:ba:95:8d:c5:1b:ed:83:bd:
7f:29:02:13:41:a8:ba:31:04:46:13:57:48:fb:83:
f2:9d:56:ce:a3:0b:e1:71:de:11:fe:8d:05:93:ca:
2e:b0:2b:9f:ee:33:d4:a5:a0:72:56:19:11:fb:c6:
6f:f4:c0:83:a2:29:14:74:04:fd:60:ae:5d:a4:ab:
c6:be:ef:59:09:9f:6d:d0:2f:db:63:76:91:d3:64:
1a:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:8F:4E:BE:79:C3:50:A1:9B:76:DE:F2:E1:95:ED:67:9E:18:6F:C9
X509v3 Authority Key Identifier:
keyid:A9:EC:57:BC:84:64:FE:C2:E9:A1:B0:98:FF:CE:34:C2:1A:AF:9C:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qexXvIRk_sLpobCY_840whqvnKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/41b40c-f3b6-40b8-840c-19a3c5649b57/1/e49OvnnDUKGbdt7y4ZXtZ54Yb8k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/41b40c-f3b6-40b8-840c-19a3c5649b57/1/qexXvIRk_sLpobCY_840whqvnKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.139.56.0/22
185.229.108.0/22
188.93.88.0-188.93.92.255
188.93.94.0/23
IPv6:
2a0a:5000::/29
2a0d:8a00::/32
Signature Algorithm: sha256WithRSAEncryption
5a:7f:cd:4c:d8:2c:34:45:4d:1c:b9:90:5b:67:73:11:89:fa:
3d:82:fb:10:32:df:b9:a8:0a:2f:a9:d8:b7:be:39:a9:a5:55:
da:ab:a2:2e:84:65:21:9d:b4:bd:4f:d2:19:e1:b4:3b:f3:6d:
e0:f9:be:cf:1d:e0:04:12:ea:59:9a:5a:f0:24:83:a7:7e:4f:
ae:2c:a1:df:6c:aa:26:d2:ac:20:72:e3:83:c9:80:75:15:28:
54:3c:e7:c6:ec:0a:9b:67:4e:7c:ed:31:43:36:44:1f:16:f7:
f8:ae:32:a8:11:81:4f:f9:cc:df:38:cb:34:27:ab:34:b6:85:
43:f6:f2:41:f9:46:fd:34:f7:3c:99:66:55:4e:50:df:c8:d7:
c0:43:3d:be:c2:08:d8:74:98:eb:90:4f:9f:39:f4:ed:f3:9b:
a5:a7:06:44:be:9b:42:0e:32:76:02:ad:e6:78:2a:08:96:e8:
54:e6:8b:10:4f:e5:11:bd:a7:01:2a:11:a0:06:f8:c7:b5:cc:
e9:d2:f7:65:a2:d6:f0:be:a6:1c:11:dc:4f:e0:a1:21:56:0e:
ae:02:f3:85:b9:b3:cd:22:4d:c4:c8:29:df:a7:49:35:3f:49:
95:bb:03:24:02:e9:da:a3:cc:f7:62:e9:5b:24:03:e4:51:30:
62:4e:a7:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:19:41 2024 by rpki-client on console-fra.rpki-client.org