Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/k4M0dGZyHdoT71N-yHJqXXFNQ5U.roa
File: k4M0dGZyHdoT71N-yHJqXXFNQ5U.roa (raw, json)
Hash identifier: PkfRxQK4+dwCBK6Nyd1wYWF10XWrfaNr9g0LWH0FIKY=
Subject key identifier: 93:83:34:74:66:72:1D:DA:13:EF:53:7E:C8:72:6A:5D:71:4D:43:95
Certificate issuer: /CN=7651762de3d3f19cedd438b03cf23986ce91727f
Certificate serial: 018E137C0E6359CFA4029C0C5117FAED93A2
Authority key identifier: 76:51:76:2D:E3:D3:F1:9C:ED:D4:38:B0:3C:F2:39:86:CE:91:72:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/k4M0dGZyHdoT71N-yHJqXXFNQ5U.roa
Signing time: Wed 06 Mar 2024 11:18:01 +0000
ROA not before: Wed 06 Mar 2024 11:18:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34756
IP address blocks: 45.15.12.0/22 maxlen: 22
77.95.96.0/21 maxlen: 21
91.194.136.0/23 maxlen: 23
176.58.24.0/21 maxlen: 21
176.58.30.0/24 maxlen: 24
176.58.31.0/24 maxlen: 24
185.47.236.0/22 maxlen: 22
193.138.109.0/24 maxlen: 24
195.114.12.0/24 maxlen: 24
195.230.110.0/24 maxlen: 24
2a03:fc00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:13:7c:0e:63:59:cf:a4:02:9c:0c:51:17:fa:ed:93:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7651762de3d3f19cedd438b03cf23986ce91727f
Validity
Not Before: Mar 6 11:18:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9383347466721dda13ef537ec8726a5d714d4395
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:2f:c1:87:34:cb:c5:2b:f3:56:23:1a:b1:13:
61:17:1a:93:37:e7:65:61:b9:89:a2:b7:eb:22:42:
16:a2:bc:04:b1:04:8e:c9:6f:20:a5:03:8e:cf:ba:
1b:29:d8:85:b3:1d:f7:a6:ee:b4:b3:5b:4f:e8:00:
8f:2b:c2:ed:61:ce:c2:cc:39:fe:93:ca:cf:73:e9:
ec:04:d2:9f:a2:12:ad:71:29:24:75:d4:03:66:89:
ae:15:d3:28:4d:3c:40:0c:da:27:61:17:e3:3a:4b:
44:f8:82:62:95:31:4f:76:a7:7f:69:97:f2:c2:56:
0d:7e:2d:25:2d:77:24:07:7f:84:fa:9a:0e:8b:33:
3b:ce:26:e9:1f:2e:e2:9e:2f:12:a2:60:f6:14:c7:
4f:8f:c7:aa:9f:58:80:f3:b7:f1:74:8c:d9:ec:db:
a4:9e:28:18:ff:a8:c3:08:43:55:10:02:dd:1b:fa:
68:00:b7:86:26:a5:85:ee:b2:82:db:58:e1:ac:6a:
27:21:5c:9d:d2:2f:28:d8:71:ae:78:2f:a1:1d:7b:
e3:12:ff:cc:4c:32:8c:79:89:15:f3:e8:77:4b:25:
fa:1c:a7:e8:92:ab:35:0f:18:72:ed:c7:67:43:e5:
5e:8f:7b:2d:da:e1:54:c6:24:b7:53:46:10:ac:b3:
af:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:83:34:74:66:72:1D:DA:13:EF:53:7E:C8:72:6A:5D:71:4D:43:95
X509v3 Authority Key Identifier:
keyid:76:51:76:2D:E3:D3:F1:9C:ED:D4:38:B0:3C:F2:39:86:CE:91:72:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/k4M0dGZyHdoT71N-yHJqXXFNQ5U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.12.0/22
77.95.96.0/21
91.194.136.0/23
176.58.24.0/21
185.47.236.0/22
193.138.109.0/24
195.114.12.0/24
195.230.110.0/24
IPv6:
2a03:fc00::/29
Signature Algorithm: sha256WithRSAEncryption
92:11:9a:6d:71:af:f3:f1:39:4b:f0:3b:90:91:a8:b7:52:7d:
35:54:09:23:76:8b:6a:ca:86:f3:b1:57:82:c2:12:e3:99:70:
77:2b:66:d7:1a:68:4a:60:13:77:45:e1:f4:51:80:07:88:e9:
c5:f1:9f:cc:c6:da:6e:7d:e3:43:ea:e7:49:9d:62:db:9e:43:
40:67:45:fd:2d:85:84:24:98:09:1a:6f:9d:51:33:90:b2:18:
51:29:b3:7b:29:98:44:bc:52:f5:c9:11:a4:d7:83:df:46:80:
97:bd:d8:5c:57:91:3b:ba:88:f1:cc:a3:c3:f1:b8:aa:83:85:
6c:75:d7:6d:98:ce:4d:ec:0f:da:a5:19:8c:f1:0f:16:13:fa:
58:fc:bf:6b:a8:b5:0c:dd:fc:86:12:63:c3:99:3d:6f:d8:4d:
51:dc:a8:87:d1:54:f3:10:04:06:82:d7:ec:12:b9:d8:a5:e6:
60:ba:7b:d0:0b:ce:46:b6:62:29:9a:07:f5:31:e9:f7:02:65:
d3:f5:0e:91:c8:11:24:cb:56:f8:af:af:0a:c8:66:7d:69:84:
04:e9:68:d9:19:40:2c:51:55:8d:c9:17:51:83:eb:91:2c:1e:
db:f0:57:9d:33:e3:8b:91:fa:87:cf:c9:94:8f:e1:53:fa:1b:
3b:19:fa:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:56:06 2024 by rpki-client on console-fra.rpki-client.org