Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/zRRVUcaOM2cODvqJEHiaoDwTJ7Y.roa
File: zRRVUcaOM2cODvqJEHiaoDwTJ7Y.roa (raw, json)
Hash identifier: UQv6IWXQ6qSsqMplXQgt2/GqqUfJr6Z2VvNDpDx71nU=
Subject key identifier: CD:14:55:51:C6:8E:33:67:0E:0E:FA:89:10:78:9A:A0:3C:13:27:B6
Certificate issuer: /CN=00642b607b94a143ff41c554c913bd5a651f8c05
Certificate serial: 018CC7276CDAAF4A8E5DD3C0C0F68611B962
Authority key identifier: 00:64:2B:60:7B:94:A1:43:FF:41:C5:54:C9:13:BD:5A:65:1F:8C:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AGQrYHuUoUP_QcVUyRO9WmUfjAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/zRRVUcaOM2cODvqJEHiaoDwTJ7Y.roa
Signing time: Mon 01 Jan 2024 22:31:38 +0000
ROA not before: Mon 01 Jan 2024 22:31:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50563
IP address blocks: 37.98.204.0/22 maxlen: 22
37.98.205.0/24 maxlen: 24
37.98.206.0/23 maxlen: 23
37.98.206.0/24 maxlen: 24
37.98.204.0/24 maxlen: 24
37.98.204.0/23 maxlen: 23
37.98.207.0/24 maxlen: 24
93.119.16.0/23 maxlen: 23
93.119.16.0/24 maxlen: 24
93.119.17.0/24 maxlen: 24
93.119.19.0/24 maxlen: 24
195.189.208.0/23 maxlen: 23
195.189.208.0/24 maxlen: 24
195.189.209.0/24 maxlen: 24
188.240.192.0/24 maxlen: 24
188.240.193.0/24 maxlen: 24
185.72.112.0/22 maxlen: 22
185.72.112.0/23 maxlen: 23
185.72.112.0/24 maxlen: 24
185.72.115.0/24 maxlen: 24
185.72.113.0/24 maxlen: 24
185.72.114.0/23 maxlen: 23
185.72.114.0/24 maxlen: 24
185.125.28.0/22 maxlen: 22
185.66.44.0/24 maxlen: 24
185.66.44.0/23 maxlen: 23
185.66.44.0/22 maxlen: 22
185.66.45.0/24 maxlen: 24
185.66.46.0/23 maxlen: 23
185.66.46.0/24 maxlen: 24
185.66.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.mft
rsync://rpki.ripe.net/repository/DEFAULT/AGQrYHuUoUP_QcVUyRO9WmUfjAU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:6c:da:af:4a:8e:5d:d3:c0:c0:f6:86:11:b9:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00642b607b94a143ff41c554c913bd5a651f8c05
Validity
Not Before: Jan 1 22:31:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cd145551c68e33670e0efa8910789aa03c1327b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:ec:71:89:78:0f:81:3c:eb:c7:21:71:dc:99:
64:50:e1:e3:b8:a5:10:8c:6a:ae:ef:90:53:b5:75:
cf:76:26:88:8e:bc:42:44:90:26:92:ad:f5:75:32:
41:77:28:4e:7b:95:72:34:1e:e2:9a:36:29:2e:1f:
72:29:1c:e1:f2:0a:7d:00:44:f4:e2:d0:97:54:2e:
0f:6d:1a:39:88:86:cf:aa:fd:d1:da:64:52:ee:a2:
9e:9c:cd:35:f8:89:3a:7f:94:a8:a6:0f:f4:9b:0e:
c3:d8:60:44:e4:ee:ff:0e:24:2b:6c:dd:8a:31:77:
2d:e0:be:c7:0e:d6:d5:d4:50:74:c9:5b:74:7a:ad:
1f:d0:b0:35:ef:80:97:04:d9:49:7e:9c:1d:88:af:
73:ac:24:42:3f:17:8c:a3:19:26:3b:82:c6:7e:d2:
38:cd:78:fb:e2:95:5f:2c:05:ea:f4:f7:7a:1f:f3:
eb:20:9d:68:ed:a4:47:78:35:0b:8e:c3:b1:d4:5c:
11:df:6d:6b:77:d4:ff:ed:b6:f7:52:14:57:dc:93:
8b:66:86:1d:78:b6:ec:f9:29:fd:34:4d:ae:0f:63:
55:4d:68:ef:44:7a:00:19:bb:a5:46:36:08:57:fc:
c0:4c:01:ac:cd:29:4e:0a:aa:98:05:c2:e9:00:dc:
45:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:14:55:51:C6:8E:33:67:0E:0E:FA:89:10:78:9A:A0:3C:13:27:B6
X509v3 Authority Key Identifier:
keyid:00:64:2B:60:7B:94:A1:43:FF:41:C5:54:C9:13:BD:5A:65:1F:8C:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AGQrYHuUoUP_QcVUyRO9WmUfjAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/zRRVUcaOM2cODvqJEHiaoDwTJ7Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.98.204.0/22
93.119.16.0/23
93.119.19.0/24
185.66.44.0/22
185.72.112.0/22
185.125.28.0/22
188.240.192.0/23
195.189.208.0/23
Signature Algorithm: sha256WithRSAEncryption
12:46:33:c1:92:f1:fb:5c:a4:97:88:43:f7:31:18:3c:0c:d5:
e3:c9:4f:cb:5a:2b:0e:4f:04:c1:47:c6:c3:7c:db:6e:1c:fa:
5c:32:49:4e:08:89:7e:c5:a1:6a:ab:86:b1:73:68:a7:cc:e3:
85:b1:5c:99:09:cb:45:da:89:42:0e:6d:29:70:df:de:16:17:
33:6a:b9:54:c4:9f:77:46:56:fd:5f:ab:94:f5:60:d3:d0:55:
cd:68:e6:6d:41:eb:ea:23:eb:14:90:72:55:8d:50:d1:c5:9b:
18:e9:6a:94:3a:48:25:9a:98:1a:28:59:88:c2:49:40:96:40:
7a:26:72:fc:3f:ca:4a:f0:aa:fb:a8:02:c8:a4:2d:9b:9c:aa:
0f:9d:01:04:9d:dd:39:45:6e:ee:5b:6f:18:3d:17:f7:78:6b:
ca:8f:00:11:80:cc:b5:ea:92:86:45:10:5b:61:95:7e:8e:9c:
73:e6:86:b3:5c:32:95:3a:f1:8d:30:43:cd:6b:69:58:80:de:
e1:71:bd:fb:b6:0e:93:2f:17:5b:87:22:aa:4e:00:6c:2a:6d:
91:cb:c7:10:00:48:18:07:82:da:e4:8f:8f:7c:74:b5:18:49:
c9:b6:be:40:b9:9f:29:97:68:70:57:dc:ce:47:9c:10:48:f7:
9f:11:39:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:53:20 2024 by rpki-client on console-fra.rpki-client.org