Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/O9B9RlmSBv2cV1QkncOFw8rDcxE.roa
File: O9B9RlmSBv2cV1QkncOFw8rDcxE.roa (raw, json)
Hash identifier: Xe7y2rPX2eKaji1/i3XJ5XYgWqejSlnqujGVkXagQIc=
Subject key identifier: 3B:D0:7D:46:59:92:06:FD:9C:57:54:24:9D:C3:85:C3:CA:C3:73:11
Certificate issuer: /CN=5f08dc10218ac6db79430ae7c44515590417d605
Certificate serial: 018EFF413ADA13C0F0DCF3BEA9E43246AA2A
Authority key identifier: 5F:08:DC:10:21:8A:C6:DB:79:43:0A:E7:C4:45:15:59:04:17:D6:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XwjcECGKxtt5QwrnxEUVWQQX1gU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/O9B9RlmSBv2cV1QkncOFw8rDcxE.roa
Signing time: Sun 21 Apr 2024 06:04:08 +0000
ROA not before: Sun 21 Apr 2024 06:04:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29577
IP address blocks: 176.101.32.0/24 maxlen: 24
176.101.33.0/24 maxlen: 24
176.101.34.0/24 maxlen: 24
176.101.35.0/24 maxlen: 24
176.101.36.0/24 maxlen: 24
176.101.37.0/24 maxlen: 24
176.101.38.0/24 maxlen: 24
176.101.39.0/24 maxlen: 24
176.101.40.0/24 maxlen: 24
176.101.41.0/24 maxlen: 24
176.101.42.0/24 maxlen: 24
176.101.43.0/24 maxlen: 24
176.101.44.0/24 maxlen: 24
176.101.45.0/24 maxlen: 24
176.101.46.0/24 maxlen: 24
176.101.47.0/24 maxlen: 24
176.101.48.0/24 maxlen: 24
176.101.49.0/24 maxlen: 24
176.101.50.0/24 maxlen: 24
176.101.51.0/24 maxlen: 24
176.101.52.0/24 maxlen: 24
176.101.53.0/24 maxlen: 24
176.101.54.0/24 maxlen: 24
176.101.55.0/24 maxlen: 24
194.146.148.0/24 maxlen: 24
194.146.149.0/24 maxlen: 24
194.146.150.0/24 maxlen: 24
194.146.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/XwjcECGKxtt5QwrnxEUVWQQX1gU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/XwjcECGKxtt5QwrnxEUVWQQX1gU.mft
rsync://rpki.ripe.net/repository/DEFAULT/XwjcECGKxtt5QwrnxEUVWQQX1gU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 14:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:ff:41:3a:da:13:c0:f0:dc:f3:be:a9:e4:32:46:aa:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f08dc10218ac6db79430ae7c44515590417d605
Validity
Not Before: Apr 21 06:04:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3bd07d46599206fd9c5754249dc385c3cac37311
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:fe:1f:7f:08:d9:d7:80:7d:27:57:e1:34:f9:
13:b6:28:47:59:d6:7d:ae:39:7d:67:fa:c6:83:45:
6c:6f:8f:9c:29:bf:c9:d4:64:22:c7:75:da:7b:b0:
91:0f:ff:f5:a3:b6:7e:58:60:25:b1:c7:d7:b5:5f:
30:6c:0e:72:3f:27:1f:a3:96:e0:9f:3e:92:6b:28:
ce:46:36:52:7b:79:f8:03:21:b7:b7:12:d3:8f:c1:
ed:35:f1:17:9d:4e:ab:ce:63:c5:f7:8d:81:ee:75:
c6:e0:de:eb:db:b8:d7:2a:38:fa:7b:b7:4f:4d:70:
cb:aa:e7:e3:c6:19:af:78:fd:90:bc:d3:e9:9e:c2:
4d:7c:22:c1:48:f9:31:74:44:0d:34:66:fe:9e:e8:
aa:e1:bd:f5:37:e8:3c:95:34:aa:dc:94:de:9f:47:
7f:7a:ac:4f:9a:39:c2:a0:6c:10:8d:a7:f9:16:db:
6c:dc:ea:0b:08:a2:27:53:53:6f:6a:65:a1:9f:94:
23:20:cc:85:ee:bd:fa:87:d4:1d:52:d1:86:69:2c:
92:d4:a3:f2:8d:55:d9:e5:a1:01:44:8a:9c:47:e8:
73:36:87:11:39:a7:6f:48:ad:72:f3:16:30:27:45:
ad:9a:35:b7:5d:dc:07:d0:27:1b:a6:b6:eb:3b:ed:
30:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:D0:7D:46:59:92:06:FD:9C:57:54:24:9D:C3:85:C3:CA:C3:73:11
X509v3 Authority Key Identifier:
keyid:5F:08:DC:10:21:8A:C6:DB:79:43:0A:E7:C4:45:15:59:04:17:D6:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XwjcECGKxtt5QwrnxEUVWQQX1gU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/O9B9RlmSBv2cV1QkncOFw8rDcxE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/XwjcECGKxtt5QwrnxEUVWQQX1gU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.101.32.0-176.101.55.255
194.146.148.0/22
Signature Algorithm: sha256WithRSAEncryption
59:12:76:af:28:60:4f:a6:5e:58:8b:7a:df:eb:7a:b0:17:9a:
72:21:03:b1:4b:d1:97:7c:11:fc:24:7e:a3:8d:57:4c:43:c0:
eb:3c:11:3b:c5:77:ce:e3:96:8a:4e:ca:d0:96:2e:31:4a:57:
d4:10:01:00:85:3f:0c:17:7d:56:e1:41:67:15:19:07:7a:ce:
ac:2e:b8:96:59:55:27:1c:42:fd:6e:43:97:b2:8d:39:92:77:
73:70:41:54:28:b0:16:e9:0d:d4:41:71:53:b8:ba:2e:70:76:
1f:18:3f:e5:ed:2a:3e:a5:18:3c:72:15:d2:ed:49:0e:3a:6d:
ae:17:4d:cb:38:b7:5f:b9:f7:47:ac:0b:dd:df:ba:85:51:73:
67:fc:f5:60:bc:a6:e0:90:1d:8b:df:e3:86:92:34:83:0c:d7:
99:58:62:0c:54:19:c7:7d:2e:61:26:90:6b:53:35:03:fb:bf:
96:3f:ee:ef:3f:01:2f:4d:84:79:31:e1:bc:83:66:a5:f7:2f:
49:47:47:57:a8:62:03:4b:98:4b:79:fd:48:38:e9:6b:bd:92:
24:a4:ec:58:02:47:96:6b:85:cd:6f:a6:f8:9e:82:41:54:a0:
3f:ed:67:e9:dc:5e:7f:ff:09:d7:c7:46:c7:a2:a8:01:70:86:
cd:d2:87:2e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Apr 25 23:36:51 2024 by rpki-client on console-fra.rpki-client.org