Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/m9LCFz5xLfc4cljH-wG5be6Lw68.roa
File: m9LCFz5xLfc4cljH-wG5be6Lw68.roa (raw, json)
Hash identifier: 5JHvMT30DNy79BTMrBYOZlkuZy0xDZde4R/SmH9ui18=
Subject key identifier: 9B:D2:C2:17:3E:71:2D:F7:38:72:58:C7:FB:01:B9:6D:EE:8B:C3:AF
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 0192049C0D90CCADA9BC0B3AF1009F6C1409
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/m9LCFz5xLfc4cljH-wG5be6Lw68.roa
Signing time: Wed 18 Sep 2024 10:09:48 +0000
ROA not before: Wed 18 Sep 2024 10:09:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 5.182.114.0/24 maxlen: 24
77.242.159.0/24 maxlen: 24
88.151.63.0/24 maxlen: 24
88.209.203.0/24 maxlen: 24
88.209.229.0/24 maxlen: 24
88.209.230.0/24 maxlen: 24
88.209.232.0/24 maxlen: 24
88.209.233.0/24 maxlen: 24
88.209.234.0/24 maxlen: 24
88.209.235.0/24 maxlen: 24
88.209.255.0/24 maxlen: 24
92.52.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 17:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:04:9c:0d:90:cc:ad:a9:bc:0b:3a:f1:00:9f:6c:14:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Sep 18 10:09:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9bd2c2173e712df7387258c7fb01b96dee8bc3af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:55:23:14:3e:ad:62:e3:dc:51:e7:ee:0f:e5:
f0:6a:f9:3c:0c:a3:14:62:d2:43:f2:c2:0e:1b:2f:
7e:96:41:b0:a5:0d:9a:d0:64:0d:fa:4a:95:cf:c6:
8a:f7:fd:47:81:d6:e1:3c:03:33:32:af:50:a0:5e:
e5:5f:7f:79:82:e4:31:c5:7f:d0:b1:aa:88:65:8a:
0c:14:cb:72:1b:bf:bc:03:24:43:aa:64:e6:3a:17:
39:26:bf:27:f2:c8:54:0c:25:39:42:81:8d:0b:0f:
de:6c:6e:75:2c:f4:56:83:07:eb:31:09:c7:55:ed:
42:2f:6b:97:c3:f3:a9:64:6c:a6:65:52:a3:1f:67:
0c:d6:41:67:f3:4b:3b:f6:99:15:b3:c4:ab:03:02:
0e:4e:40:a4:63:80:e5:5f:e3:00:5d:24:d3:b7:4f:
89:59:eb:6c:e6:20:8e:e9:c3:3f:2b:2b:65:10:61:
61:a8:e2:a3:72:a2:04:ca:90:f7:cf:0b:80:63:20:
35:34:be:82:d8:9d:65:57:c9:31:fb:39:ce:eb:39:
59:3b:a1:d0:0f:c2:fe:0d:e6:15:b3:b8:c8:f2:34:
91:71:11:f7:da:ea:d6:a8:2f:ae:0b:df:99:7c:26:
3e:25:33:fc:78:92:33:83:42:7b:71:85:17:52:f5:
ae:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:D2:C2:17:3E:71:2D:F7:38:72:58:C7:FB:01:B9:6D:EE:8B:C3:AF
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/m9LCFz5xLfc4cljH-wG5be6Lw68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.114.0/24
77.242.159.0/24
88.151.63.0/24
88.209.203.0/24
88.209.229.0-88.209.230.255
88.209.232.0/22
88.209.255.0/24
92.52.214.0/24
Signature Algorithm: sha256WithRSAEncryption
91:d3:50:d9:4a:e1:b0:5c:07:46:18:65:40:1c:d7:41:ba:41:
07:4f:95:e0:e2:cd:e6:d9:a1:f5:8a:e9:66:a2:88:d6:0d:81:
4d:50:7f:50:67:47:a5:d7:59:c0:e4:fa:0a:5b:b6:f3:88:bb:
ec:57:ad:6b:bf:9c:fa:7c:5d:67:eb:53:ba:58:80:d3:4a:b5:
a9:c6:21:15:86:67:48:fe:65:b0:db:1e:21:67:eb:b2:c7:3b:
21:74:09:3e:7c:0a:b5:11:24:cc:c8:cd:f0:8e:0e:bc:ec:0a:
5e:c9:f4:c3:23:53:1d:9e:32:52:ca:66:40:f6:0a:dd:aa:ab:
4e:b8:d9:8e:ed:d1:89:88:6a:5c:86:3e:e4:05:15:4d:a8:36:
ad:f7:b1:69:2d:00:d5:c7:1e:17:4c:63:99:40:b2:b4:1e:5b:
47:ef:33:38:f2:de:5e:33:51:6d:79:35:52:2d:b5:32:f1:4c:
d4:2f:6f:6c:d5:19:36:42:35:ec:f6:48:bf:ca:ca:03:12:70:
a0:5a:d1:68:06:92:8e:26:f9:11:7b:e9:36:6b:b3:55:81:72:
7c:c6:19:3a:d1:22:9f:78:b2:6f:14:0b:a0:c9:0b:47:42:25:
c3:a4:c3:a1:4c:f8:1f:05:f9:a2:f7:d4:8d:2d:22:94:2f:d3:
43:ce:4d:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:09:22 2024 by rpki-client on console-ams.rpki-client.org