Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/uG7wRm1aGqhffKRDAdUE78H8Ero.roa
File: uG7wRm1aGqhffKRDAdUE78H8Ero.roa (raw, json)
Hash identifier: P0lupswySQWleP6U7DAkVYJZ1Tt6KHhvX9K8kt1nIVc=
Subject key identifier: B8:6E:F0:46:6D:5A:1A:A8:5F:7C:A4:43:01:D5:04:EF:C1:FC:12:BA
Certificate issuer: /CN=7df132df13e4be53d8250c8c48420264eef6c14c
Certificate serial: 018CC802C7E5413F10C0B08A6CC11EED92DC
Authority key identifier: 7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/uG7wRm1aGqhffKRDAdUE78H8Ero.roa
Signing time: Tue 02 Jan 2024 02:31:14 +0000
ROA not before: Tue 02 Jan 2024 02:31:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41749
IP address blocks: 89.43.54.0/24 maxlen: 24
89.44.125.0/24 maxlen: 24
89.47.42.0/24 maxlen: 24
86.106.134.0/24 maxlen: 24
188.241.188.0/23 maxlen: 23
89.47.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:c7:e5:41:3f:10:c0:b0:8a:6c:c1:1e:ed:92:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df132df13e4be53d8250c8c48420264eef6c14c
Validity
Not Before: Jan 2 02:31:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b86ef0466d5a1aa85f7ca44301d504efc1fc12ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:73:7c:20:33:cf:bb:a0:e9:3f:f6:5c:ad:e6:
05:6b:66:2d:98:3f:da:fb:c0:ab:39:46:d5:ce:15:
85:f9:13:57:24:98:04:35:0e:79:c4:68:2f:fe:09:
af:4e:76:07:3b:1a:d3:f7:ec:47:46:99:f2:59:b2:
35:9b:34:88:a3:6f:76:b3:db:bf:71:28:69:0e:a0:
41:da:09:e5:95:25:c7:6d:5a:16:92:31:83:bf:a6:
a7:5a:ad:09:45:80:88:57:77:4d:d0:90:a2:93:31:
6b:b2:45:9f:69:2d:ad:71:40:82:62:d1:0b:78:18:
e1:40:11:fd:21:a0:09:a9:1d:07:44:42:52:29:f0:
72:2a:b2:37:78:72:64:6b:cc:bc:f4:5e:70:06:b3:
ee:13:df:dc:fb:13:aa:9a:e1:9c:51:3b:89:3c:a9:
80:cd:23:30:26:76:90:68:f4:1d:ff:97:af:46:52:
1a:53:97:c8:34:86:12:f7:b1:7f:d9:12:29:b9:15:
86:c8:6d:96:6c:7d:3c:35:d3:d6:0b:23:b3:73:c8:
ac:8c:4d:bb:97:b9:16:72:2a:99:4f:5f:30:e5:bf:
be:38:36:59:6d:f5:89:14:4f:d8:1e:e4:01:4a:a1:
ce:64:37:1a:f7:35:44:22:46:d3:7c:98:28:ed:fb:
ff:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:6E:F0:46:6D:5A:1A:A8:5F:7C:A4:43:01:D5:04:EF:C1:FC:12:BA
X509v3 Authority Key Identifier:
keyid:7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/uG7wRm1aGqhffKRDAdUE78H8Ero.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.106.134.0/24
89.43.54.0/24
89.44.125.0/24
89.47.42.0/24
89.47.88.0/24
188.241.188.0/23
Signature Algorithm: sha256WithRSAEncryption
2c:30:80:8b:03:83:99:8a:d0:b6:2a:c5:2e:b4:30:9c:f2:25:
eb:91:a6:ae:0e:c4:6c:13:62:d6:c8:ca:05:cf:40:e8:4e:d5:
fa:37:5f:a3:33:18:95:73:4d:9c:cc:57:25:f2:9a:42:8c:96:
73:88:7d:2e:91:7f:a9:86:e6:37:28:16:39:67:19:4a:d9:01:
56:3b:40:0e:ed:cb:cc:c9:97:be:7a:dd:40:60:21:27:3b:ba:
36:36:d7:dc:e0:ba:93:a4:fc:23:e9:9e:fb:d5:11:54:18:7b:
06:66:72:24:6c:d3:77:23:12:32:6e:3a:05:ff:b5:b3:c7:aa:
50:bf:4d:f2:4f:47:e7:79:ed:69:34:6e:12:5a:99:fc:6c:ea:
bf:c9:a1:f3:6b:50:b7:20:2f:7e:2d:f7:d5:70:15:b1:b8:69:
19:c2:07:cc:fe:c6:66:4a:03:b3:8c:9c:6a:4e:e2:9e:27:45:
b7:19:ec:b5:1a:f9:1f:0c:c6:85:40:3c:ed:b3:26:f9:8f:bb:
8c:a6:6b:69:bb:fa:18:3d:b7:65:6d:52:42:b7:7e:90:58:4c:
c1:82:16:08:93:a2:db:7a:96:07:36:5b:eb:81:f8:d1:7a:fb:
8b:0b:20:67:10:2d:d9:e7:0d:12:f2:ae:24:18:cd:4b:65:6a:
b5:ac:12:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:21:29 2024 by rpki-client on console-ams.rpki-client.org