Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6cd5fc-60cc-45de-bd8a-1544b44d59ca/1/pIwOovcQleUfQh_wnbHslne_rmw.roa
File: pIwOovcQleUfQh_wnbHslne_rmw.roa (raw, json)
Hash identifier: 1W2W7TK4jL8iXE3CghNXamFMV84cg78C5ZZmT+E5enM=
Subject key identifier: A4:8C:0E:A2:F7:10:95:E5:1F:42:1F:F0:9D:B1:EC:96:77:BF:AE:6C
Certificate issuer: /CN=c62d7cac1ffb2c3fbde284625bf1af4c6bae6b0e
Certificate serial: 018E3CFC81D0FA281B370053B7A601A367DE
Authority key identifier: C6:2D:7C:AC:1F:FB:2C:3F:BD:E2:84:62:5B:F1:AF:4C:6B:AE:6B:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xi18rB_7LD-94oRiW_GvTGuuaw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6cd5fc-60cc-45de-bd8a-1544b44d59ca/1/pIwOovcQleUfQh_wnbHslne_rmw.roa
Signing time: Thu 14 Mar 2024 12:42:45 +0000
ROA not before: Thu 14 Mar 2024 12:42:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29156
IP address blocks: 147.29.0.0/17 maxlen: 17
147.29.128.0/20 maxlen: 20
147.29.144.0/22 maxlen: 22
147.29.148.0/23 maxlen: 23
147.29.152.0/21 maxlen: 21
147.29.160.0/19 maxlen: 19
147.29.192.0/18 maxlen: 18
152.95.0.0/16 maxlen: 16
158.173.0.0/16 maxlen: 16
159.195.0.0/16 maxlen: 16
2a01:5440::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/6cd5fc-60cc-45de-bd8a-1544b44d59ca/1/xi18rB_7LD-94oRiW_GvTGuuaw4.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/6cd5fc-60cc-45de-bd8a-1544b44d59ca/1/xi18rB_7LD-94oRiW_GvTGuuaw4.mft
rsync://rpki.ripe.net/repository/DEFAULT/xi18rB_7LD-94oRiW_GvTGuuaw4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:3c:fc:81:d0:fa:28:1b:37:00:53:b7:a6:01:a3:67:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c62d7cac1ffb2c3fbde284625bf1af4c6bae6b0e
Validity
Not Before: Mar 14 12:42:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a48c0ea2f71095e51f421ff09db1ec9677bfae6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c2:4b:a0:af:7b:d1:5d:64:69:2c:5d:2c:67:
3a:ec:fb:bf:6f:e7:37:25:3b:ad:45:de:cd:f1:69:
03:5f:91:57:9c:d1:fe:b1:e5:43:31:ee:9f:c9:49:
0b:72:f3:d5:63:30:39:98:1e:e9:8f:58:89:03:f9:
cd:ca:81:ce:29:20:ef:fe:ad:43:ca:65:53:05:f6:
1f:05:9c:b4:9d:5f:48:b7:64:47:a1:e7:d9:8c:b4:
b3:02:cb:81:d1:54:b3:65:cd:d1:30:4c:ea:b1:5c:
94:34:73:cb:b1:b2:f7:3f:b8:a9:e0:c2:97:a8:be:
fa:af:c2:80:71:a2:a4:d0:52:24:79:c4:2f:5b:d8:
31:73:fb:ba:f6:38:a9:28:15:37:8c:cb:22:cb:e4:
04:53:82:90:80:31:31:3e:75:13:56:45:2a:f6:e1:
a4:fd:9b:15:5c:e6:2e:ce:ef:4d:ec:d8:fe:7b:13:
2d:0a:9c:a9:a9:37:bf:c9:c3:59:b3:01:83:1c:98:
f3:19:77:8d:68:72:e6:99:6d:8a:8b:42:2c:21:5c:
29:5c:fe:e8:1a:9e:59:d7:7e:cc:01:25:be:07:b8:
a6:63:78:6e:e1:4d:1e:88:ca:76:25:62:c2:9b:6c:
e7:41:ce:2e:87:a6:9c:03:d3:b3:8e:95:d1:70:95:
37:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:8C:0E:A2:F7:10:95:E5:1F:42:1F:F0:9D:B1:EC:96:77:BF:AE:6C
X509v3 Authority Key Identifier:
keyid:C6:2D:7C:AC:1F:FB:2C:3F:BD:E2:84:62:5B:F1:AF:4C:6B:AE:6B:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xi18rB_7LD-94oRiW_GvTGuuaw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6cd5fc-60cc-45de-bd8a-1544b44d59ca/1/pIwOovcQleUfQh_wnbHslne_rmw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6cd5fc-60cc-45de-bd8a-1544b44d59ca/1/xi18rB_7LD-94oRiW_GvTGuuaw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.29.0.0-147.29.149.255
147.29.152.0-147.29.255.255
152.95.0.0/16
158.173.0.0/16
159.195.0.0/16
IPv6:
2a01:5440::/32
Signature Algorithm: sha256WithRSAEncryption
5c:1d:a0:43:7b:a2:48:6c:67:d9:a8:97:89:db:2a:fa:42:e4:
b3:ec:61:f2:3f:f7:20:be:e7:2f:68:70:2d:64:66:7d:4f:04:
be:60:cd:fb:7f:2f:e5:5c:c8:12:e0:7a:a8:1b:31:4a:e8:99:
6c:80:1e:4d:bc:b5:88:5a:b8:5d:aa:d6:05:b9:b7:9e:cb:9e:
ce:15:c5:95:1f:66:f6:29:dc:95:7b:50:61:99:16:92:f2:77:
18:31:db:c3:f6:33:33:11:27:3e:31:b8:82:2d:bf:3b:be:d1:
bf:4c:a3:e9:6d:4f:cd:72:2c:21:7c:79:f8:5a:1c:e9:df:6f:
91:1d:ee:cb:9d:2d:6c:c2:0d:d3:8d:a9:17:a2:c6:d1:f2:a4:
d0:93:ce:c0:41:c8:a3:a5:2c:7e:cf:06:49:0a:72:b4:66:6d:
9b:c9:93:10:1a:01:61:f6:63:20:d7:30:73:9f:3d:51:3f:7c:
60:89:53:d5:01:01:b5:0f:15:b6:82:45:63:58:28:1a:5b:27:
ae:48:32:f6:1b:2f:1e:d7:d9:67:d8:a0:d2:6d:bd:b0:84:a7:
00:c3:38:87:76:b1:42:0e:c6:35:e2:32:1b:eb:2c:c9:d5:5b:
06:bc:67:ba:56:79:8a:56:ca:55:a9:b4:2a:c3:4f:9c:be:7c:
89:0f:e7:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 15:46:40 2024 by rpki-client on console-fra.rpki-client.org