Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/931f81-c409-4d3a-95df-49098897ee4a/1/RC2fCsSqgF8kI2cZV4YQKYlyojc.roa
File: RC2fCsSqgF8kI2cZV4YQKYlyojc.roa (raw, json)
Hash identifier: j0ZgGd6fOKSomTCK0LXfiFxGoqQTu5NpyIgqw4mCngI=
Subject key identifier: 44:2D:9F:0A:C4:AA:80:5F:24:23:67:19:57:86:10:29:89:72:A2:37
Certificate issuer: /CN=ebf760c05773c15d73676450344668fefb723447
Certificate serial: 018E2865489183D6680E50BA1EBA64BC8C51
Authority key identifier: EB:F7:60:C0:57:73:C1:5D:73:67:64:50:34:46:68:FE:FB:72:34:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6_dgwFdzwV1zZ2RQNEZo_vtyNEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/931f81-c409-4d3a-95df-49098897ee4a/1/RC2fCsSqgF8kI2cZV4YQKYlyojc.roa
Signing time: Sun 10 Mar 2024 12:45:10 +0000
ROA not before: Sun 10 Mar 2024 12:45:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50597
IP address blocks: 37.98.224.0/21 maxlen: 21
37.98.224.0/24 maxlen: 24
37.98.225.0/24 maxlen: 24
37.98.226.0/24 maxlen: 24
37.98.227.0/24 maxlen: 24
37.98.228.0/24 maxlen: 24
37.98.229.0/24 maxlen: 24
37.98.230.0/24 maxlen: 24
37.98.231.0/24 maxlen: 24
85.113.90.0/23 maxlen: 23
85.113.90.0/24 maxlen: 24
85.113.91.0/24 maxlen: 24
85.194.196.0/22 maxlen: 22
85.194.196.0/24 maxlen: 24
85.194.197.0/24 maxlen: 24
85.194.198.0/24 maxlen: 24
85.194.199.0/24 maxlen: 24
109.205.112.0/21 maxlen: 24
185.76.32.0/22 maxlen: 22
185.76.32.0/24 maxlen: 24
185.76.33.0/24 maxlen: 24
185.76.34.0/24 maxlen: 24
185.76.35.0/24 maxlen: 24
2a05:55c0::/29 maxlen: 29
2a05:55c1:1::/48 maxlen: 48
2a05:55c1:2::/48 maxlen: 48
2a05:55c1:3::/48 maxlen: 48
2a05:55c1:4::/48 maxlen: 48
2a05:55c1:5::/48 maxlen: 48
2a05:55c1:6::/48 maxlen: 48
2a05:55c1:7::/48 maxlen: 48
2a05:55c1:e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/931f81-c409-4d3a-95df-49098897ee4a/1/6_dgwFdzwV1zZ2RQNEZo_vtyNEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/931f81-c409-4d3a-95df-49098897ee4a/1/6_dgwFdzwV1zZ2RQNEZo_vtyNEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/6_dgwFdzwV1zZ2RQNEZo_vtyNEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 13:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:28:65:48:91:83:d6:68:0e:50:ba:1e:ba:64:bc:8c:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebf760c05773c15d73676450344668fefb723447
Validity
Not Before: Mar 10 12:45:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=442d9f0ac4aa805f24236719578610298972a237
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:f3:c7:07:e5:99:f8:f6:70:42:a9:af:f9:05:
64:64:d5:01:a8:e0:d7:89:62:65:5f:03:e7:fc:85:
94:7b:c9:9b:62:c8:84:d8:5c:21:27:73:45:08:f8:
b3:92:31:ec:ad:a9:83:0e:90:9c:78:58:15:1a:96:
5f:74:68:24:81:f4:72:f9:81:fa:9e:41:22:2c:53:
6f:30:e0:7d:d0:b8:24:04:c5:41:a0:f7:cb:90:87:
8f:3a:ac:f3:b5:04:16:86:fe:29:59:63:85:0d:d8:
fa:28:9d:ba:ec:33:82:77:10:e7:0a:ce:22:24:95:
33:9e:4f:60:7b:fa:5e:84:7a:59:42:d4:ec:46:73:
8a:fa:0c:7e:84:19:99:1e:95:d5:f3:a8:9e:0c:bb:
4d:32:ac:9c:e3:f1:0a:a8:b3:22:d0:6a:4c:72:a7:
9d:c8:d8:1b:80:8e:e9:1f:cf:57:70:d0:20:fa:25:
57:d9:e6:29:54:bb:c7:0f:b0:71:75:95:28:29:13:
12:76:37:fe:c3:c6:13:26:8a:14:87:12:15:62:ee:
70:58:bb:22:13:22:1a:03:8e:82:b2:a5:94:9d:4a:
11:10:8c:2f:df:cf:e7:12:2b:2f:89:f4:7e:8c:fa:
26:f9:66:95:7b:0d:87:7d:e5:f0:f2:b0:c0:20:e5:
dd:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:2D:9F:0A:C4:AA:80:5F:24:23:67:19:57:86:10:29:89:72:A2:37
X509v3 Authority Key Identifier:
keyid:EB:F7:60:C0:57:73:C1:5D:73:67:64:50:34:46:68:FE:FB:72:34:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6_dgwFdzwV1zZ2RQNEZo_vtyNEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/931f81-c409-4d3a-95df-49098897ee4a/1/RC2fCsSqgF8kI2cZV4YQKYlyojc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/931f81-c409-4d3a-95df-49098897ee4a/1/6_dgwFdzwV1zZ2RQNEZo_vtyNEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.98.224.0/21
85.113.90.0/23
85.194.196.0/22
109.205.112.0/21
185.76.32.0/22
IPv6:
2a05:55c0::/29
Signature Algorithm: sha256WithRSAEncryption
a6:44:a9:ec:ac:a0:4b:bf:06:34:f3:44:db:22:13:b2:5b:4f:
0c:73:4f:b5:c3:f7:21:c7:0a:fb:23:90:7e:69:17:15:e3:79:
bc:9b:5e:53:6f:78:4e:b0:6f:12:b4:a6:dd:11:b8:66:41:3e:
a1:bc:47:3d:0e:4e:0a:c3:74:6f:e4:b9:37:e6:20:58:4f:93:
6c:42:42:9c:a3:1c:78:cf:af:ca:3b:d6:97:a5:b6:1c:2b:ce:
7e:cd:e0:60:f9:0c:f2:71:6b:eb:9e:b1:cd:d4:48:9e:9c:a6:
21:e8:fb:79:8e:0c:88:96:fe:6c:84:9e:56:f8:f3:80:3f:19:
cc:fd:25:5a:de:24:73:de:4c:ea:e8:35:03:a2:14:2d:5f:97:
eb:2e:8b:0d:9a:22:b7:f3:5b:a2:b4:e5:e7:47:4a:a5:3f:84:
49:58:ad:04:6d:ba:e1:99:02:8e:b6:fc:04:c8:b7:d2:96:dc:
9c:ce:fa:57:aa:c9:37:0a:4a:51:4e:d2:9f:af:6f:55:e8:d1:
a2:3a:96:59:1d:bc:53:18:05:f5:57:79:48:63:94:e4:95:cb:
c5:6e:d9:3d:ee:ba:7e:a7:4e:2c:5c:3e:14:95:9a:8e:8f:6d:
4f:fc:5d:2e:93:a1:58:13:e4:88:ad:7e:8d:09:29:b1:fb:a8:
29:66:e2:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 17:34:13 2024 by rpki-client on console-ams.rpki-client.org