Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/ad6b73-0e8c-4a45-b6bb-42281f5518a9/1/Maxm74tcm8dEkyArXyfppLYgDr8.roa
File: Maxm74tcm8dEkyArXyfppLYgDr8.roa (raw, json)
Hash identifier: GjP3B4ytY4CN+AYThETbA4uJMyfw55qXCqG3rXCqSpQ=
Subject key identifier: 31:AC:66:EF:8B:5C:9B:C7:44:93:20:2B:5F:27:E9:A4:B6:20:0E:BF
Certificate issuer: /CN=7d15cfedb9aeab42bf8ac5b24cb1aeec2a660943
Certificate serial: 018CC26D69AD0567CF72B3928CBBC1CDC159
Authority key identifier: 7D:15:CF:ED:B9:AE:AB:42:BF:8A:C5:B2:4C:B1:AE:EC:2A:66:09:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fRXP7bmuq0K_isWyTLGu7CpmCUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/ad6b73-0e8c-4a45-b6bb-42281f5518a9/1/Maxm74tcm8dEkyArXyfppLYgDr8.roa
Signing time: Mon 01 Jan 2024 00:29:59 +0000
ROA not before: Mon 01 Jan 2024 00:29:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2856
IP address blocks: 159.253.66.0/23 maxlen: 23
213.249.188.0/22 maxlen: 22
178.78.108.0/22 maxlen: 22
178.78.106.0/23 maxlen: 23
94.72.248.0/21 maxlen: 21
178.78.112.0/21 maxlen: 21
178.78.120.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/ad6b73-0e8c-4a45-b6bb-42281f5518a9/1/fRXP7bmuq0K_isWyTLGu7CpmCUM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/ad6b73-0e8c-4a45-b6bb-42281f5518a9/1/fRXP7bmuq0K_isWyTLGu7CpmCUM.mft
rsync://rpki.ripe.net/repository/DEFAULT/fRXP7bmuq0K_isWyTLGu7CpmCUM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:69:ad:05:67:cf:72:b3:92:8c:bb:c1:cd:c1:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d15cfedb9aeab42bf8ac5b24cb1aeec2a660943
Validity
Not Before: Jan 1 00:29:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=31ac66ef8b5c9bc74493202b5f27e9a4b6200ebf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:93:cf:dd:45:1b:1f:3a:26:18:a6:70:a6:66:
30:48:b9:c5:60:a0:6a:32:3c:2c:53:9a:a9:d1:f7:
04:fa:3e:60:46:23:60:c3:3d:56:09:7f:85:d9:b9:
03:83:be:78:ba:8b:2d:a3:fc:6b:83:68:fe:2e:19:
b5:11:d5:19:6f:76:d7:82:6f:0a:6a:a3:68:f6:e9:
35:b6:ae:04:c2:03:eb:2b:9a:38:94:2d:0c:37:c0:
18:3d:e6:99:bc:81:7e:e1:bd:5b:13:e6:1d:a7:a0:
4c:4e:0a:7b:b8:7b:ff:f9:fb:0b:32:7d:88:be:f8:
71:79:db:34:e3:8b:98:74:ea:7f:1e:e7:ca:a5:47:
82:47:6a:33:e9:a0:97:38:e1:4b:ed:8b:05:37:19:
55:26:a3:eb:12:dc:ca:1f:35:c0:57:c4:a9:ba:ea:
2b:a4:30:21:28:bf:43:e5:25:67:4e:1a:31:48:a0:
94:3a:b8:59:99:71:bd:af:2e:b2:53:ad:04:70:e9:
4d:89:ac:b7:69:cf:fa:82:35:ae:38:4d:e4:b7:de:
a4:8e:a1:1a:f4:a9:b9:f6:c8:3b:48:13:75:b4:53:
10:fa:64:3f:00:c8:27:76:d6:da:d3:d2:7e:43:37:
7d:70:33:8a:46:be:00:24:0a:eb:46:90:10:75:0f:
b5:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:AC:66:EF:8B:5C:9B:C7:44:93:20:2B:5F:27:E9:A4:B6:20:0E:BF
X509v3 Authority Key Identifier:
keyid:7D:15:CF:ED:B9:AE:AB:42:BF:8A:C5:B2:4C:B1:AE:EC:2A:66:09:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fRXP7bmuq0K_isWyTLGu7CpmCUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ad6b73-0e8c-4a45-b6bb-42281f5518a9/1/Maxm74tcm8dEkyArXyfppLYgDr8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ad6b73-0e8c-4a45-b6bb-42281f5518a9/1/fRXP7bmuq0K_isWyTLGu7CpmCUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.72.248.0/21
159.253.66.0/23
178.78.106.0-178.78.127.255
213.249.188.0/22
Signature Algorithm: sha256WithRSAEncryption
42:ac:9d:74:62:bf:f3:99:26:a1:a6:f5:5a:e3:ea:40:bd:2b:
2c:2c:15:43:6a:11:77:b1:0a:ed:59:05:21:98:fa:d5:83:71:
86:33:36:d0:27:2c:02:b1:ab:0c:36:a4:3c:85:5c:92:ac:57:
85:23:41:e0:84:28:e6:f1:92:bb:9d:c4:a1:7f:87:a1:35:5a:
db:16:91:d6:09:4e:95:b4:ba:35:e4:ff:6a:d8:0c:af:e2:ee:
08:7b:db:c2:77:c8:23:9a:64:46:ab:14:57:dc:34:9f:08:b2:
0d:de:08:84:31:79:48:ef:a3:ce:b9:ce:99:81:97:76:3b:92:
94:8b:28:60:8e:60:14:fc:b6:ba:84:90:b4:ea:fd:df:ef:d6:
80:5b:16:87:f3:f6:6a:2c:2a:9d:b2:39:3e:84:c8:38:79:17:
a4:a2:e7:4c:dc:97:1c:0c:f9:21:0e:02:f3:98:08:1b:29:e8:
56:d2:6d:21:25:27:29:ff:e9:4b:30:d8:2f:f5:70:25:03:a7:
82:a8:88:f6:95:27:4f:19:23:65:b7:31:f1:44:84:42:5d:a4:
e3:e5:ea:46:b7:f6:9d:36:2e:59:36:9d:71:21:7d:93:c6:b9:
66:0e:ce:7c:66:d3:90:77:31:cf:fc:cb:7f:e8:0e:25:45:a7:
50:39:45:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 16:47:38 2024 by rpki-client on console-fra.rpki-client.org