Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/bluEJVRMUaPjdB6oVBbkA2QCF7E.roa
File: bluEJVRMUaPjdB6oVBbkA2QCF7E.roa (raw, json)
Hash identifier: AcLxLMOOZ71nPzB7AgoOwQr2u0OlR5xvEljcsy+gVp8=
Subject key identifier: 6E:5B:84:25:54:4C:51:A3:E3:74:1E:A8:54:16:E4:03:64:02:17:B1
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018ED683841B6561B323FFED2E36EC2F74F4
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/bluEJVRMUaPjdB6oVBbkA2QCF7E.roa
Signing time: Sat 13 Apr 2024 08:12:06 +0000
ROA not before: Sat 13 Apr 2024 08:12:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 84.32.7.0/24 maxlen: 24
84.32.8.0/24 maxlen: 24
84.32.9.0/24 maxlen: 24
84.32.20.0/22 maxlen: 24
84.32.24.0/22 maxlen: 24
84.32.46.0/24 maxlen: 24
84.32.47.0/24 maxlen: 24
84.32.71.0/24 maxlen: 24
84.32.95.0/24 maxlen: 24
84.32.148.0/23 maxlen: 24
84.32.150.0/23 maxlen: 24
84.32.174.0/23 maxlen: 24
84.32.214.0/23 maxlen: 24
84.32.244.0/23 maxlen: 24
84.32.246.0/23 maxlen: 24
88.216.22.0/23 maxlen: 24
88.216.44.0/24 maxlen: 24
88.216.45.0/24 maxlen: 24
88.216.93.0/24 maxlen: 24
88.216.130.0/23 maxlen: 24
88.216.132.0/24 maxlen: 24
88.216.134.0/23 maxlen: 24
88.216.188.0/24 maxlen: 24
88.216.189.0/24 maxlen: 24
88.216.190.0/24 maxlen: 24
88.216.191.0/24 maxlen: 24
88.216.212.0/22 maxlen: 24
88.216.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Apr 2024 20:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:d6:83:84:1b:65:61:b3:23:ff:ed:2e:36:ec:2f:74:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Apr 13 08:12:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6e5b8425544c51a3e3741ea85416e403640217b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:98:75:d5:7e:b3:02:8e:9e:bf:39:3e:ce:ba:
2d:82:26:e5:b4:61:e5:9f:10:a1:39:63:43:29:d9:
2b:ea:97:51:03:54:0b:d5:22:80:bb:29:cd:9b:72:
02:05:0e:93:ec:b1:3a:99:f9:5e:66:00:bc:72:6f:
55:ec:7c:9c:2c:9c:1c:c5:62:44:82:84:d4:18:91:
6f:6b:90:6f:82:d4:7c:a8:17:32:17:aa:58:f7:d6:
4f:76:c6:c1:b4:2e:e9:d6:d3:ac:4d:ea:23:1b:53:
11:8c:55:25:b3:e9:a0:de:16:25:76:b3:f7:cd:50:
b2:22:7b:11:11:21:41:9c:c4:84:48:9d:ec:2f:dd:
59:23:fe:c1:97:5e:c2:b6:54:8a:5a:ba:a4:08:c8:
66:46:f5:27:84:cb:f0:74:3c:cb:56:66:24:fe:61:
1a:2d:ab:69:7f:b6:18:88:52:a4:52:19:70:68:2e:
38:ba:a9:6d:3f:49:5d:15:65:7e:78:9b:61:fc:35:
17:45:fd:b9:0e:35:6b:78:3d:21:a8:9c:f4:8d:db:
82:fc:4a:4a:cb:a1:2b:f7:b9:fc:bd:d0:12:2e:b9:
88:c6:42:99:86:d3:77:72:1c:13:98:97:5d:31:de:
da:45:fe:69:d7:56:59:0e:15:bb:ff:39:07:c8:43:
2f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:5B:84:25:54:4C:51:A3:E3:74:1E:A8:54:16:E4:03:64:02:17:B1
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/bluEJVRMUaPjdB6oVBbkA2QCF7E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.7.0-84.32.9.255
84.32.20.0-84.32.27.255
84.32.46.0/23
84.32.71.0/24
84.32.95.0/24
84.32.148.0/22
84.32.174.0/23
84.32.214.0/23
84.32.244.0/22
88.216.22.0/23
88.216.44.0/23
88.216.93.0/24
88.216.130.0-88.216.132.255
88.216.134.0/23
88.216.188.0/22
88.216.212.0/22
88.216.222.0/24
Signature Algorithm: sha256WithRSAEncryption
65:02:16:73:c0:b0:f2:9e:0f:09:0e:51:90:d2:41:97:90:de:
10:75:74:a6:0c:a0:6e:34:ed:df:3d:3e:0e:c3:4a:9e:ab:17:
d8:7d:69:91:f4:9c:22:71:c0:c3:5b:a0:d2:d5:df:d0:19:13:
61:cf:96:1e:df:94:3a:3d:02:32:ae:39:ce:34:bd:3a:db:ae:
d1:8a:e0:a3:a1:86:99:f3:f0:e7:28:25:d2:f0:84:d5:97:44:
31:77:93:bd:c9:b6:b8:29:ba:92:4d:a4:64:33:49:d0:d5:69:
4c:84:b3:d6:fa:98:10:08:31:2a:e0:96:52:a9:48:a6:23:29:
a7:f0:e1:3d:75:5c:a8:49:1d:e2:fa:29:2d:e5:7b:4b:2b:79:
91:7e:7a:53:7a:55:0a:f8:6d:33:27:68:55:39:dc:c6:da:15:
b1:22:a6:0a:7a:35:3a:e5:a5:3d:fa:ec:a2:d1:47:ad:27:05:
b6:6b:e0:6d:33:09:df:36:d7:a4:44:33:95:a1:dc:19:31:b6:
a0:85:21:74:51:b8:54:70:8f:e1:e3:04:4a:b0:91:ed:cb:5e:
26:a2:69:66:38:50:73:ec:92:68:24:3c:38:6e:e9:fb:61:0e:
79:01:24:5b:9c:df:a3:4c:b8:98:ca:0c:0e:66:9d:74:67:da:
5b:d8:3b:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 21 03:57:28 2024 by rpki-client on console-fra.rpki-client.org