Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/e7da9a-932a-467b-b2d2-97042891eb99/1/mDz0g-hfHcZzdtKwR4T6L878DUc.roa
File: mDz0g-hfHcZzdtKwR4T6L878DUc.roa (raw, json)
Hash identifier: hM/uZCQKAIckOFf+ervxvaOnyXSb51GekwdxJww/apw=
Subject key identifier: 98:3C:F4:83:E8:5F:1D:C6:73:76:D2:B0:47:84:FA:2F:CE:FC:0D:47
Certificate issuer: /CN=f382cb13dde12658cdac18cacae91fbbf5c58090
Certificate serial: 018CC80196030581D47C8389E9999A7AD044
Authority key identifier: F3:82:CB:13:DD:E1:26:58:CD:AC:18:CA:CA:E9:1F:BB:F5:C5:80:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/84LLE93hJljNrBjKyukfu_XFgJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/e7da9a-932a-467b-b2d2-97042891eb99/1/mDz0g-hfHcZzdtKwR4T6L878DUc.roa
Signing time: Tue 02 Jan 2024 02:29:56 +0000
ROA not before: Tue 02 Jan 2024 02:29:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207190
IP address blocks: 193.218.38.0/24 maxlen: 24
193.218.39.0/24 maxlen: 24
193.218.38.0/23 maxlen: 23
45.141.71.0/24 maxlen: 24
45.141.68.0/24 maxlen: 24
45.141.68.0/22 maxlen: 22
45.141.70.0/24 maxlen: 24
45.141.69.0/24 maxlen: 24
178.236.43.0/24 maxlen: 24
178.236.42.0/24 maxlen: 24
178.236.42.0/23 maxlen: 23
178.236.44.0/24 maxlen: 24
178.236.44.0/22 maxlen: 22
178.236.40.0/21 maxlen: 21
178.236.41.0/24 maxlen: 24
178.236.40.0/24 maxlen: 24
178.236.40.0/23 maxlen: 23
178.236.46.0/24 maxlen: 24
178.236.45.0/24 maxlen: 24
178.236.47.0/24 maxlen: 24
193.203.215.0/24 maxlen: 24
193.203.214.0/23 maxlen: 23
193.203.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/e7da9a-932a-467b-b2d2-97042891eb99/1/84LLE93hJljNrBjKyukfu_XFgJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/e7da9a-932a-467b-b2d2-97042891eb99/1/84LLE93hJljNrBjKyukfu_XFgJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/84LLE93hJljNrBjKyukfu_XFgJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 May 2024 22:02:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:96:03:05:81:d4:7c:83:89:e9:99:9a:7a:d0:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f382cb13dde12658cdac18cacae91fbbf5c58090
Validity
Not Before: Jan 2 02:29:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=983cf483e85f1dc67376d2b04784fa2fcefc0d47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6b:db:c5:0f:8c:76:42:c0:39:31:06:95:4c:
6d:c0:53:cf:9f:e8:3c:0a:1d:ae:26:90:f8:73:0c:
1d:7d:ed:97:3f:59:70:39:63:36:3d:59:b0:b5:bf:
b2:aa:ec:be:ab:2f:4a:2f:a3:84:87:0c:44:fe:5e:
5a:d3:0e:c3:28:59:a6:ea:63:d6:32:97:92:14:54:
59:e4:f8:da:da:42:23:8f:58:a1:11:79:56:18:c8:
00:7c:3e:c7:4c:70:ec:6d:dc:7a:9a:d2:0d:1d:4f:
e5:fe:cd:98:ab:32:ae:8b:f6:94:4f:50:8c:6b:05:
e7:9d:45:21:9e:35:d6:da:64:5e:90:fc:f5:cc:3e:
4c:4f:b1:1e:22:35:00:61:41:5d:4a:3f:25:93:0a:
78:8d:d5:d7:4a:d8:ad:ee:b4:e2:c4:0a:85:c4:9b:
67:be:f1:10:5a:31:59:f3:9a:79:df:af:26:21:cf:
a8:a6:96:97:e5:7d:62:8b:7d:24:cc:09:13:a6:6e:
a8:f0:c4:6a:07:d5:0d:cd:a1:00:7b:45:6a:9a:fc:
d2:24:c8:c0:71:fc:70:26:16:eb:3a:f7:31:4b:f0:
be:be:e1:00:3a:27:c9:10:66:98:c1:3f:c8:ae:ac:
da:d7:b7:6a:68:68:3d:fd:22:14:0e:17:3b:a8:e8:
1a:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:3C:F4:83:E8:5F:1D:C6:73:76:D2:B0:47:84:FA:2F:CE:FC:0D:47
X509v3 Authority Key Identifier:
keyid:F3:82:CB:13:DD:E1:26:58:CD:AC:18:CA:CA:E9:1F:BB:F5:C5:80:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/84LLE93hJljNrBjKyukfu_XFgJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e7da9a-932a-467b-b2d2-97042891eb99/1/mDz0g-hfHcZzdtKwR4T6L878DUc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e7da9a-932a-467b-b2d2-97042891eb99/1/84LLE93hJljNrBjKyukfu_XFgJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.68.0/22
178.236.40.0/21
193.203.214.0/23
193.218.38.0/23
Signature Algorithm: sha256WithRSAEncryption
5e:0d:a0:d0:dc:e2:4e:9b:1e:3e:7b:de:97:33:4e:27:f2:d6:
40:96:cf:d8:ab:c6:d1:e9:7b:9f:fd:c1:a0:d3:b2:cc:14:eb:
7d:b7:e0:9f:6c:5a:b3:08:77:a4:ab:ce:5b:18:2d:cb:8d:38:
26:21:57:4e:d7:97:96:46:bf:b8:84:1a:85:47:1f:c3:b3:21:
2a:44:d8:2b:c6:14:2c:ef:aa:ba:ec:87:62:b1:ad:dc:0c:0b:
fb:ea:21:7a:a6:1b:01:7c:59:fc:f1:11:f8:6e:d4:24:3b:22:
87:c3:51:a5:c4:6e:b3:6c:71:b0:95:bc:4e:0e:cb:d0:50:64:
b7:f6:98:b2:0a:79:7b:95:f1:a3:0d:a6:ce:ae:9b:94:e2:64:
e4:1a:4a:a2:48:55:55:61:bd:77:d1:f9:11:37:d4:88:cd:d2:
6b:6d:a6:c5:ba:70:f8:3c:92:e1:c4:04:8e:86:2b:7a:07:8f:
40:d7:b7:43:ac:b4:e0:c9:f8:bc:24:1f:0d:9e:47:20:c4:6f:
62:09:63:50:2b:2a:90:49:37:cc:24:93:57:37:2c:5e:e0:89:
7b:49:f8:1c:3e:51:87:61:f9:0e:0e:b4:95:74:d1:c6:a8:4d:
ae:e4:c7:78:cd:f7:94:1e:63:0b:6f:64:fa:75:19:b2:0f:be:
44:8f:f5:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 29 01:45:52 2024 by rpki-client on console-fra.rpki-client.org