Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/irI3MWFbe9SYAaw_AYb_s1bUOTc.roa
File: irI3MWFbe9SYAaw_AYb_s1bUOTc.roa (raw, json)
Hash identifier: pKbaoA7Nm1LIStJq0i09ook+9813QgzROCaNDfhb/Fs=
Subject key identifier: 8A:B2:37:31:61:5B:7B:D4:98:01:AC:3F:01:86:FF:B3:56:D4:39:37
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018EC1DF86766F52366BA8E1535E2D6B097A
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/irI3MWFbe9SYAaw_AYb_s1bUOTc.roa
Signing time: Tue 09 Apr 2024 08:00:35 +0000
ROA not before: Tue 09 Apr 2024 08:00:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61317
IP address blocks: 81.168.120.0/24 maxlen: 24
82.152.248.0/24 maxlen: 24
82.152.251.0/24 maxlen: 24
82.152.254.0/24 maxlen: 24
82.153.69.0/24 maxlen: 24
82.153.72.0/24 maxlen: 24
82.153.79.0/24 maxlen: 24
82.153.132.0/24 maxlen: 24
82.153.224.0/24 maxlen: 24
89.213.4.0/24 maxlen: 24
89.213.6.0/24 maxlen: 24
89.213.7.0/24 maxlen: 24
89.213.130.0/24 maxlen: 24
89.213.190.0/24 maxlen: 24
109.176.244.0/24 maxlen: 24
109.176.247.0/24 maxlen: 24
109.176.251.0/24 maxlen: 24
185.49.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:c1:df:86:76:6f:52:36:6b:a8:e1:53:5e:2d:6b:09:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Apr 9 08:00:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8ab23731615b7bd49801ac3f0186ffb356d43937
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:2b:d1:15:73:b9:06:62:16:20:fc:ac:09:8b:
74:4d:9f:ff:e9:0a:e4:99:c9:f5:a9:68:09:e3:f7:
bb:30:89:a9:4d:72:c6:b8:d2:42:22:90:d9:e9:f8:
d6:d2:69:4b:dc:5d:db:ac:81:d0:b5:87:6b:fb:b5:
b0:2a:d2:97:3c:ee:6c:63:de:b1:c1:0c:d4:08:cb:
4f:39:30:3c:71:1d:4b:04:be:c5:e4:09:78:86:d1:
f4:1e:12:62:2c:51:99:91:aa:8c:ce:93:75:75:0f:
30:31:b3:e3:24:54:15:1d:5c:0f:14:a2:c7:79:36:
71:f9:66:c7:dc:86:37:df:cd:f0:22:4b:53:b0:bb:
3a:d5:d4:cd:4a:e7:11:f8:b7:ac:83:11:8f:3b:e8:
bd:4b:16:bf:61:9f:89:24:4d:cf:3b:2e:ad:6e:a2:
3a:b3:a5:70:c8:ea:3c:8a:1e:32:6a:ed:cc:e4:c0:
d9:51:0f:b2:e7:6e:b1:cb:e0:69:7f:be:a6:41:3b:
31:ce:0d:1e:70:16:4f:7b:85:29:de:c6:63:0d:b7:
f6:98:d3:a3:67:6b:d0:cb:c9:d9:b7:55:5d:e6:9c:
b1:61:01:d5:bb:20:a9:72:ca:34:06:7e:66:5d:6a:
10:93:d1:21:4a:4e:17:68:d5:65:96:65:7e:52:fa:
b3:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:B2:37:31:61:5B:7B:D4:98:01:AC:3F:01:86:FF:B3:56:D4:39:37
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/irI3MWFbe9SYAaw_AYb_s1bUOTc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.168.120.0/24
82.152.248.0/24
82.152.251.0/24
82.152.254.0/24
82.153.69.0/24
82.153.72.0/24
82.153.79.0/24
82.153.132.0/24
82.153.224.0/24
89.213.4.0/24
89.213.6.0/23
89.213.130.0/24
89.213.190.0/24
109.176.244.0/24
109.176.247.0/24
109.176.251.0/24
185.49.124.0/24
Signature Algorithm: sha256WithRSAEncryption
89:a9:2f:fa:9d:bc:6d:7d:38:a9:bb:4d:6b:30:1e:5d:72:19:
83:1c:c2:66:0c:55:27:5f:cf:04:1c:23:a7:be:8c:01:de:d7:
a7:52:f0:ef:60:09:ff:56:ac:2e:0d:47:f6:b8:a4:33:27:25:
0c:c9:53:13:65:86:5f:d8:94:88:16:b2:94:7b:f8:a5:41:38:
b9:ff:eb:76:27:d3:12:1b:d1:71:07:d5:19:ca:54:59:d6:81:
55:02:09:ca:9f:14:2a:1f:13:a2:18:97:b1:dd:4c:2a:f9:c6:
6d:83:d9:1d:cc:2f:9d:99:f1:d4:b6:71:a7:25:e8:22:de:05:
73:0d:d2:37:03:3a:64:1d:ac:d0:28:35:af:2b:29:27:60:59:
24:2c:df:08:92:a5:da:c8:0a:98:e5:e4:06:4c:56:c0:c9:e4:
6b:25:93:50:dd:b7:ce:7f:1b:62:95:04:c8:f6:7a:b1:52:0e:
de:4c:e2:70:20:ff:85:ac:8a:bc:8d:a5:24:d3:96:00:a2:1b:
cd:1d:39:ca:8a:26:46:7b:12:a1:c5:6d:7c:63:72:3e:2c:63:
a9:65:79:ee:ce:9e:f3:1a:6f:47:b6:e5:7d:7c:e5:b5:7f:de:
55:00:11:f5:43:ae:dd:65:8c:64:11:d5:49:a3:4c:6a:46:86:
b7:de:0b:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 03:09:54 2024 by rpki-client on console-fra.rpki-client.org