Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/C87qaNWTsYUo_1kORSz5OwE3n0c.roa
File: C87qaNWTsYUo_1kORSz5OwE3n0c.roa (raw, json)
Hash identifier: HCz6buITsDcfcWtp95peJ+XKBY8TuJVLXjcxLq5AAQo=
Subject key identifier: 0B:CE:EA:68:D5:93:B1:85:28:FF:59:0E:45:2C:F9:3B:01:37:9F:47
Certificate issuer: /CN=c755702467770ed69b367b77bbe640bc6db4153e
Certificate serial: 01900748423FE9D0D922AAAC2A074DD622BE
Authority key identifier: C7:55:70:24:67:77:0E:D6:9B:36:7B:77:BB:E6:40:BC:6D:B4:15:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x1VwJGd3DtabNnt3u-ZAvG20FT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/C87qaNWTsYUo_1kORSz5OwE3n0c.roa
Signing time: Tue 11 Jun 2024 12:31:34 +0000
ROA not before: Tue 11 Jun 2024 12:31:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201935
IP address blocks: 84.254.130.0/24 maxlen: 24
84.254.131.0/24 maxlen: 24
84.254.132.0/24 maxlen: 24
84.254.137.0/24 maxlen: 24
84.254.144.0/23 maxlen: 24
84.254.144.0/24 maxlen: 24
84.254.145.0/24 maxlen: 24
84.254.146.0/24 maxlen: 24
84.254.164.0/24 maxlen: 24
95.210.111.0/24 maxlen: 24
95.210.132.0/23 maxlen: 24
95.210.132.0/24 maxlen: 24
95.210.133.0/24 maxlen: 24
176.227.131.0/24 maxlen: 24
176.227.138.0/24 maxlen: 24
176.227.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.mft
rsync://rpki.ripe.net/repository/DEFAULT/x1VwJGd3DtabNnt3u-ZAvG20FT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 17:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:07:48:42:3f:e9:d0:d9:22:aa:ac:2a:07:4d:d6:22:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c755702467770ed69b367b77bbe640bc6db4153e
Validity
Not Before: Jun 11 12:31:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0bceea68d593b18528ff590e452cf93b01379f47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:58:eb:37:bc:97:d8:16:a9:75:3f:b9:b6:36:
1f:6a:7e:5f:e9:66:9a:d9:69:14:95:99:f5:0d:f5:
93:28:df:3a:ff:dd:ce:b7:3a:a5:31:95:0a:03:f9:
10:f5:a7:d8:7a:6c:51:5c:5d:5d:b9:5d:3e:de:02:
21:e3:bc:85:93:0a:00:1d:2e:7a:bc:3a:fe:e9:3e:
08:f0:5b:05:3a:1f:0b:1c:8e:53:ac:47:a2:ce:ca:
46:e4:dd:4a:b3:21:b1:c1:51:a0:1d:88:a7:db:36:
28:0f:4b:f0:d1:99:09:20:c6:08:45:35:69:e0:d1:
ca:27:3b:cb:ed:09:bb:9c:91:4d:00:94:b3:e9:f0:
dc:2a:e5:ba:54:a0:fd:54:22:61:0f:9c:88:b2:77:
ff:bb:46:70:a7:6c:ba:4f:91:5b:77:1a:ea:86:3c:
35:48:0d:66:0e:a2:7d:a4:ad:a8:73:ff:8e:20:f2:
04:5c:48:13:c2:ff:66:6a:af:15:8d:6a:82:28:1b:
c5:95:76:35:02:c8:04:d1:af:38:ed:25:02:e0:10:
aa:d8:31:d6:5b:74:80:1b:a4:5f:40:a7:95:86:cb:
11:9e:22:82:ef:a4:b8:53:17:cb:37:6f:2f:d9:da:
9c:9e:fd:b2:e5:21:23:30:f9:4c:ab:00:e2:df:53:
56:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:CE:EA:68:D5:93:B1:85:28:FF:59:0E:45:2C:F9:3B:01:37:9F:47
X509v3 Authority Key Identifier:
keyid:C7:55:70:24:67:77:0E:D6:9B:36:7B:77:BB:E6:40:BC:6D:B4:15:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x1VwJGd3DtabNnt3u-ZAvG20FT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/C87qaNWTsYUo_1kORSz5OwE3n0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.254.130.0-84.254.132.255
84.254.137.0/24
84.254.144.0-84.254.146.255
84.254.164.0/24
95.210.111.0/24
95.210.132.0/23
176.227.131.0/24
176.227.138.0/23
Signature Algorithm: sha256WithRSAEncryption
84:58:e8:f8:36:22:6f:d7:34:c3:c1:4c:42:89:a0:79:0b:61:
34:87:80:0f:91:e6:ea:7a:90:c1:56:f5:5d:39:e3:61:f5:61:
8a:e8:ad:89:e1:69:72:ea:3a:52:f3:37:61:42:d3:10:5e:35:
c6:13:01:c0:20:d1:af:38:d4:84:6d:e6:0e:60:03:cb:7f:12:
72:05:72:ca:4c:73:93:dc:36:da:b5:0f:a9:af:d6:c6:57:99:
f7:4f:0d:3e:c5:df:2b:76:64:0d:78:e3:00:78:f9:ed:8d:51:
27:05:05:15:83:2b:6c:da:03:c9:b9:44:a0:23:9b:46:fb:eb:
81:29:5e:c1:a3:59:14:6a:3b:3f:82:52:2f:9e:89:5e:5d:43:
b9:df:68:ae:e4:04:7f:ef:c8:a6:06:63:7a:c7:ca:96:f7:48:
8a:85:a1:5e:82:e8:52:f3:76:3b:98:6f:55:b2:70:a2:00:6d:
3a:8d:70:ae:f7:27:27:45:25:3b:41:1a:1f:39:06:e7:6f:ac:
b6:de:f5:0b:6b:c4:99:f5:ba:51:92:e3:47:dc:d2:6c:b2:b2:
3c:7f:67:9b:9b:35:d8:fe:23:6b:4b:bb:dc:18:86:64:a3:d9:
bc:a5:aa:f2:42:65:e5:2f:62:82:f1:0a:1f:28:3e:ac:73:28:
eb:b4:07:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:34:20 2024 by rpki-client on console-ams.rpki-client.org