Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/NXMqDPVx2sYm6nhcIsmPH8Mr-SM.roa
File: NXMqDPVx2sYm6nhcIsmPH8Mr-SM.roa (raw, json)
Hash identifier: Zr0+0TzrO+Y6lFf/yZfWpuME+pFZwDF5EdryVZV0E6g=
Subject key identifier: 35:73:2A:0C:F5:71:DA:C6:26:EA:78:5C:22:C9:8F:1F:C3:2B:F9:23
Certificate issuer: /CN=fb987244611b5230536744b6a89f044f32f462ea
Certificate serial: 018E561DEBF1BCCB0328A47020F0F2D49BFE
Authority key identifier: FB:98:72:44:61:1B:52:30:53:67:44:B6:A8:9F:04:4F:32:F4:62:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/NXMqDPVx2sYm6nhcIsmPH8Mr-SM.roa
Signing time: Tue 19 Mar 2024 09:49:45 +0000
ROA not before: Tue 19 Mar 2024 09:49:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43811
IP address blocks: 31.193.192.0/24 maxlen: 24
31.193.193.0/24 maxlen: 24
31.193.194.0/24 maxlen: 24
31.193.195.0/24 maxlen: 24
31.193.196.0/24 maxlen: 24
31.193.197.0/24 maxlen: 24
31.193.198.0/24 maxlen: 24
31.193.199.0/24 maxlen: 24
81.7.105.0/24 maxlen: 24
81.7.106.0/24 maxlen: 24
81.7.107.0/24 maxlen: 24
81.7.114.0/24 maxlen: 24
81.7.115.0/24 maxlen: 24
82.135.132.0/24 maxlen: 24
82.135.133.0/24 maxlen: 24
82.135.217.0/24 maxlen: 24
82.135.218.0/24 maxlen: 24
85.206.140.0/24 maxlen: 24
85.206.141.0/24 maxlen: 24
85.206.142.0/24 maxlen: 24
85.206.143.0/24 maxlen: 24
85.206.148.0/22 maxlen: 22
88.118.143.0/24 maxlen: 24
88.119.180.0/24 maxlen: 24
88.119.181.0/24 maxlen: 24
88.119.220.0/24 maxlen: 24
88.119.221.0/24 maxlen: 24
88.119.222.0/24 maxlen: 24
88.119.246.0/24 maxlen: 24
92.61.32.0/20 maxlen: 32
185.3.228.0/24 maxlen: 24
185.3.229.0/24 maxlen: 24
185.3.230.0/24 maxlen: 24
185.3.231.0/24 maxlen: 24
193.105.146.0/24 maxlen: 24
193.200.124.0/24 maxlen: 24
193.200.125.0/24 maxlen: 24
194.176.32.0/24 maxlen: 24
194.176.33.0/24 maxlen: 24
194.176.35.0/24 maxlen: 24
194.176.36.0/24 maxlen: 24
194.176.54.0/23 maxlen: 23
195.12.180.0/24 maxlen: 24
212.47.123.0/24 maxlen: 24
2a00:1eb8:c004::/48 maxlen: 48
2a02:118:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 May 2024 14:15:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:56:1d:eb:f1:bc:cb:03:28:a4:70:20:f0:f2:d4:9b:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb987244611b5230536744b6a89f044f32f462ea
Validity
Not Before: Mar 19 09:49:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=35732a0cf571dac626ea785c22c98f1fc32bf923
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:27:fc:89:2a:36:d9:d9:98:25:fa:99:1d:97:
67:9b:9c:83:6c:f4:55:f2:46:6c:d2:7b:15:78:c8:
4a:9a:75:e4:5a:23:5b:41:2e:ab:52:5b:a3:20:97:
aa:3b:07:8e:ce:61:9c:48:b8:4a:90:08:a8:67:f9:
a3:cd:ba:96:ec:47:45:54:ff:f7:a9:be:fb:41:f9:
04:b4:b1:5c:86:75:2d:81:e3:eb:d4:0a:29:53:96:
e8:ef:da:59:43:ec:3c:c2:67:45:55:97:75:3d:4f:
70:d3:ae:12:89:d6:8b:5f:ca:12:8e:37:64:f3:77:
36:1b:5f:a7:c8:82:3c:82:a2:31:e7:00:08:0a:8f:
91:d7:46:57:ef:a0:42:8d:ac:df:89:c3:d2:2e:67:
6d:f7:4b:ba:87:89:3c:02:ff:c0:a4:b8:b7:91:b0:
55:0f:b0:2f:d1:ab:bb:19:18:a9:9f:03:af:df:7b:
64:99:28:73:0a:40:38:17:ec:75:72:ab:8a:bd:76:
52:25:51:27:83:6f:7c:43:3f:36:34:3b:cc:f1:cd:
83:d7:e5:01:1d:28:c3:04:fa:26:ec:c2:e6:53:6e:
78:1d:60:0c:d1:74:55:4f:05:02:1a:69:d7:a7:ff:
0f:83:20:8f:05:51:bd:93:f3:d2:ed:1b:e5:70:b8:
5a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:73:2A:0C:F5:71:DA:C6:26:EA:78:5C:22:C9:8F:1F:C3:2B:F9:23
X509v3 Authority Key Identifier:
keyid:FB:98:72:44:61:1B:52:30:53:67:44:B6:A8:9F:04:4F:32:F4:62:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/NXMqDPVx2sYm6nhcIsmPH8Mr-SM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.193.192.0/21
81.7.105.0-81.7.107.255
81.7.114.0/23
82.135.132.0/23
82.135.217.0-82.135.218.255
85.206.140.0/22
85.206.148.0/22
88.118.143.0/24
88.119.180.0/23
88.119.220.0-88.119.222.255
88.119.246.0/24
92.61.32.0/20
185.3.228.0/22
193.105.146.0/24
193.200.124.0/23
194.176.32.0/23
194.176.35.0-194.176.36.255
194.176.54.0/23
195.12.180.0/24
212.47.123.0/24
IPv6:
2a00:1eb8:c004::/48
2a02:118:2::/48
Signature Algorithm: sha256WithRSAEncryption
79:fc:c6:0e:0d:bf:ca:6f:e4:db:0c:e0:cc:58:3d:29:f9:91:
fe:8c:1c:d0:19:25:b3:f4:5e:3c:06:93:aa:dc:15:ce:4b:35:
df:a9:70:c2:a4:e1:01:6e:6e:c9:be:51:a0:e4:2f:12:2e:fe:
7d:36:73:eb:b6:f9:12:ef:9d:dc:97:8f:6c:3f:0c:16:35:87:
10:a5:e9:76:7d:79:39:24:9c:f3:67:3a:2d:ee:bf:57:75:64:
b9:3a:85:dc:6d:a7:d5:48:78:1c:88:59:39:83:a8:16:25:72:
bb:89:e4:6e:4b:87:5b:e8:6a:6e:29:d1:31:24:63:2f:4d:cc:
16:6e:6c:12:2f:2b:53:6a:2a:03:e5:94:ee:d9:24:a8:c4:8e:
1e:17:40:3b:70:5e:16:38:99:53:cc:c1:00:2e:87:b6:fe:ee:
c5:c9:4d:b5:ae:d4:c6:91:de:96:04:0e:f3:cc:bf:9b:74:27:
cd:7a:8c:e1:ec:f5:a9:45:66:06:9b:24:13:6f:b1:14:be:62:
98:7e:2e:fe:b4:68:c9:81:8d:8f:34:bd:25:7d:50:41:96:42:
7f:c4:0c:e7:1e:55:31:99:e6:40:d5:e3:46:60:0b:df:91:b5:
05:13:82:23:90:32:b3:59:23:0a:09:a9:88:16:e0:fd:ef:4f:
53:cf:12:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 23:46:46 2024 by rpki-client on console-ams.rpki-client.org