Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8d3c82-e403-4da6-b315-8790206f0d74/1/C1ROWJrktcCe7IvBd9c2GgDZuhA.roa
File: C1ROWJrktcCe7IvBd9c2GgDZuhA.roa (raw, json)
Hash identifier: NCcvBC7IX7NGG0jkl4mdO2KjaFjHXAFD9GNcUduHrzs=
Subject key identifier: 0B:54:4E:58:9A:E4:B5:C0:9E:EC:8B:C1:77:D7:36:1A:00:D9:BA:10
Certificate issuer: /CN=41f5a10e4fd2655adbbb40ede18b2615ac558ea9
Certificate serial: 018CC9BB02C969CC11B5A1385B1A4F33D489
Authority key identifier: 41:F5:A1:0E:4F:D2:65:5A:DB:BB:40:ED:E1:8B:26:15:AC:55:8E:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QfWhDk_SZVrbu0Dt4YsmFaxVjqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8d3c82-e403-4da6-b315-8790206f0d74/1/C1ROWJrktcCe7IvBd9c2GgDZuhA.roa
Signing time: Tue 02 Jan 2024 10:32:05 +0000
ROA not before: Tue 02 Jan 2024 10:32:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48452
IP address blocks: 94.26.83.0/24 maxlen: 24
94.26.80.0/22 maxlen: 22
94.26.81.0/24 maxlen: 24
94.26.82.0/24 maxlen: 24
94.26.91.0/24 maxlen: 24
94.26.88.0/24 maxlen: 24
94.26.92.0/24 maxlen: 24
94.26.104.0/22 maxlen: 22
94.26.105.0/24 maxlen: 24
94.26.106.0/24 maxlen: 24
94.26.107.0/24 maxlen: 24
94.26.34.0/24 maxlen: 24
94.26.35.0/24 maxlen: 24
94.26.36.0/24 maxlen: 24
94.26.32.0/21 maxlen: 21
94.26.32.0/24 maxlen: 24
94.26.33.0/24 maxlen: 24
94.26.37.0/24 maxlen: 24
94.26.41.0/24 maxlen: 24
94.26.42.0/24 maxlen: 24
94.26.43.0/24 maxlen: 24
94.26.39.0/24 maxlen: 24
94.26.48.0/24 maxlen: 24
94.26.49.0/24 maxlen: 24
94.26.50.0/24 maxlen: 24
94.26.48.0/20 maxlen: 20
94.26.51.0/24 maxlen: 24
94.26.55.0/24 maxlen: 24
94.26.56.0/24 maxlen: 24
94.26.57.0/24 maxlen: 24
94.26.52.0/24 maxlen: 24
94.26.53.0/24 maxlen: 24
94.26.54.0/24 maxlen: 24
94.26.58.0/24 maxlen: 24
94.26.62.0/24 maxlen: 24
94.26.63.0/24 maxlen: 24
94.26.59.0/24 maxlen: 24
94.26.60.0/24 maxlen: 24
94.26.61.0/24 maxlen: 24
94.26.69.0/24 maxlen: 24
94.26.70.0/24 maxlen: 24
94.26.71.0/24 maxlen: 24
94.26.68.0/24 maxlen: 24
94.26.0.0/24 maxlen: 24
94.26.0.0/22 maxlen: 22
94.26.1.0/24 maxlen: 24
94.26.3.0/24 maxlen: 24
2a00:6f40::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/8d3c82-e403-4da6-b315-8790206f0d74/1/QfWhDk_SZVrbu0Dt4YsmFaxVjqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/8d3c82-e403-4da6-b315-8790206f0d74/1/QfWhDk_SZVrbu0Dt4YsmFaxVjqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/QfWhDk_SZVrbu0Dt4YsmFaxVjqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bb:02:c9:69:cc:11:b5:a1:38:5b:1a:4f:33:d4:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41f5a10e4fd2655adbbb40ede18b2615ac558ea9
Validity
Not Before: Jan 2 10:32:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0b544e589ae4b5c09eec8bc177d7361a00d9ba10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:24:7d:ea:cf:51:95:b4:4d:0a:7b:48:63:b8:
75:82:48:0f:16:25:6e:d3:c7:5a:d6:eb:35:30:37:
57:a9:64:29:0a:66:9b:a7:a9:c2:13:fe:76:80:45:
82:81:d3:37:ad:21:fc:8c:96:33:d8:42:b9:f9:58:
cb:48:62:5d:c7:eb:61:75:f5:f6:56:bb:9f:8b:37:
a6:30:db:92:fb:1f:7a:90:cb:b4:22:a7:c6:50:4f:
ca:4c:58:64:d1:0d:cc:d1:73:12:80:d4:10:f5:9f:
48:37:1e:1d:91:76:0e:e1:07:b2:5e:d4:76:42:d4:
85:cf:5b:44:69:e7:ef:68:c5:4f:d7:f1:d4:21:91:
08:7e:79:96:d7:5b:63:71:d1:e5:67:93:cd:2c:39:
82:d1:ad:4b:c2:8e:a1:fd:86:94:1c:7a:5a:25:32:
cc:8c:64:8e:cb:a7:fa:2f:0a:73:57:80:e5:35:df:
7d:46:4a:87:b8:7c:39:22:be:93:16:c0:5a:62:5c:
c8:da:ee:42:e2:a4:a4:be:23:ca:a4:ea:5e:10:02:
d8:5a:f9:46:0b:1f:4c:76:63:0c:d1:85:00:cd:a1:
11:c4:cf:92:59:c5:0a:6b:28:0c:ce:41:e2:0e:9c:
0b:64:bb:85:fa:06:bd:f5:31:d2:39:ce:eb:2f:81:
66:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:54:4E:58:9A:E4:B5:C0:9E:EC:8B:C1:77:D7:36:1A:00:D9:BA:10
X509v3 Authority Key Identifier:
keyid:41:F5:A1:0E:4F:D2:65:5A:DB:BB:40:ED:E1:8B:26:15:AC:55:8E:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QfWhDk_SZVrbu0Dt4YsmFaxVjqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8d3c82-e403-4da6-b315-8790206f0d74/1/C1ROWJrktcCe7IvBd9c2GgDZuhA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8d3c82-e403-4da6-b315-8790206f0d74/1/QfWhDk_SZVrbu0Dt4YsmFaxVjqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.26.0.0/22
94.26.32.0/21
94.26.41.0-94.26.43.255
94.26.48.0/20
94.26.68.0/22
94.26.80.0/22
94.26.88.0/24
94.26.91.0-94.26.92.255
94.26.104.0/22
IPv6:
2a00:6f40::/32
Signature Algorithm: sha256WithRSAEncryption
63:ae:43:1e:6d:56:13:45:ea:57:cc:42:90:d1:32:52:ee:d0:
66:d6:6f:82:a2:80:8e:be:55:4b:d9:73:be:a6:98:25:7e:5e:
f2:de:1f:5b:b6:94:af:0d:aa:97:2f:10:8a:b4:b9:1f:fa:56:
88:2f:05:16:ad:ce:7a:f4:37:b8:93:78:5d:a8:2e:9f:1f:ab:
9b:d6:81:94:56:52:91:6f:46:47:a4:2b:68:bb:ea:cc:0c:c6:
24:7a:30:be:39:37:e3:c0:23:81:75:e4:44:43:04:c8:d3:22:
59:8c:db:a0:ea:1d:e6:af:60:ed:6b:e1:5d:1b:23:a0:0a:85:
be:b1:19:b9:5d:43:73:50:2e:22:0c:f9:12:e3:59:56:db:8b:
b4:7f:db:88:32:6e:e7:18:4c:a1:6e:87:9e:6d:8c:1c:c8:02:
55:8f:52:a0:ef:f2:96:d9:0f:6e:16:f9:26:65:c3:16:04:85:
9c:30:49:9e:c7:e7:39:02:e7:c9:cf:d7:19:5e:47:06:b6:38:
17:2c:9d:f9:84:50:95:d5:39:99:aa:0d:bb:33:c4:61:7e:99:
7a:1b:ad:3a:67:9c:19:89:6b:2b:2b:b4:ef:69:7d:00:38:37:
bc:1d:71:05:b5:9c:27:6d:78:11:7a:66:ae:1b:c6:c2:1b:9e:
e4:a2:6e:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:46:55 2024 by rpki-client on console-ams.rpki-client.org