Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/2P96ZGamF8cnh8sqLrJWk0eYNmE.roa
File: 2P96ZGamF8cnh8sqLrJWk0eYNmE.roa (raw, json)
Hash identifier: rvAA0/K4NChfgcbFiJm5Q8+PDKwOpzCYhQYx4zOOz6Y=
Subject key identifier: D8:FF:7A:64:66:A6:17:C7:27:87:CB:2A:2E:B2:56:93:47:98:36:61
Certificate issuer: /CN=359f0f5ff620e0db5311f64736909973ac60f6f3
Certificate serial: 018D5720BC77F88E853A69DA34F77B08BE72
Authority key identifier: 35:9F:0F:5F:F6:20:E0:DB:53:11:F6:47:36:90:99:73:AC:60:F6:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/2P96ZGamF8cnh8sqLrJWk0eYNmE.roa
Signing time: Mon 29 Jan 2024 21:29:39 +0000
ROA not before: Mon 29 Jan 2024 21:29:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198668
IP address blocks: 37.221.240.0/20 maxlen: 32
45.153.192.0/22 maxlen: 24
85.255.88.0/22 maxlen: 22
185.19.0.0/22 maxlen: 32
185.64.222.0/24 maxlen: 32
185.74.60.0/23 maxlen: 32
185.97.24.0/22 maxlen: 22
185.188.100.0/22 maxlen: 24
2a03:d840::/32 maxlen: 48
2a03:d840:ffff::/48 maxlen: 48
2a04:c740::/29 maxlen: 48
2a0d:3140::/29 maxlen: 29
2a0f:9300::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.mft
rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Jun 2024 08:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:57:20:bc:77:f8:8e:85:3a:69:da:34:f7:7b:08:be:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359f0f5ff620e0db5311f64736909973ac60f6f3
Validity
Not Before: Jan 29 21:29:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d8ff7a6466a617c72787cb2a2eb2569347983661
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:fa:10:21:8c:bb:cd:3b:22:04:fb:ac:39:6b:
62:ac:b3:71:fa:65:63:a7:10:3e:ec:01:50:a1:3b:
a5:bb:c3:4f:aa:e4:27:06:ef:18:45:bc:39:0a:57:
2b:48:e3:a2:bc:ed:36:b2:01:a2:b0:5f:a7:2f:09:
56:46:c2:7b:a5:b5:7b:e9:91:a8:21:3a:59:e3:7c:
ab:b4:1b:6d:06:30:e7:c5:60:ea:90:21:f7:48:70:
91:13:45:65:22:24:93:2f:ba:56:6b:bd:e3:70:8e:
21:d6:a8:fa:fd:7d:f1:42:a2:d5:56:85:44:e8:82:
65:fb:32:5a:24:61:c0:2c:44:22:30:bb:f8:ef:0a:
b9:22:68:a2:78:c2:c3:ea:60:70:df:c0:ff:84:90:
6c:9f:04:74:1f:a8:7b:a0:cb:d2:7b:0d:be:11:41:
bb:93:ae:98:a6:70:21:42:40:71:f7:79:89:bf:a1:
bb:98:83:36:a7:ec:76:49:4c:80:27:83:99:0a:9b:
e0:30:33:49:bd:a7:82:5a:e5:22:85:66:af:33:53:
89:ef:ac:01:ac:18:92:2f:21:42:d4:b2:df:63:dc:
82:1c:8c:31:90:d4:15:23:d7:56:44:23:a7:16:e9:
ec:20:7c:cb:11:52:ec:50:31:90:1c:c8:11:8f:b4:
3c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:FF:7A:64:66:A6:17:C7:27:87:CB:2A:2E:B2:56:93:47:98:36:61
X509v3 Authority Key Identifier:
keyid:35:9F:0F:5F:F6:20:E0:DB:53:11:F6:47:36:90:99:73:AC:60:F6:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/2P96ZGamF8cnh8sqLrJWk0eYNmE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.221.240.0/20
45.153.192.0/22
85.255.88.0/22
185.19.0.0/22
185.64.222.0/24
185.74.60.0/23
185.97.24.0/22
185.188.100.0/22
IPv6:
2a03:d840::/32
2a04:c740::/29
2a0d:3140::/29
2a0f:9300::/29
Signature Algorithm: sha256WithRSAEncryption
5b:37:2e:c2:31:98:e5:ff:cd:f4:5a:87:ce:c2:ad:b4:14:70:
ee:8b:a8:11:4a:f5:9a:7b:13:b1:08:42:5f:0d:00:32:42:57:
03:44:0b:16:ca:72:1c:68:71:7b:00:5c:79:bd:a6:20:0f:34:
e2:a9:bd:d6:89:ea:df:6a:e9:fe:9a:8a:dc:9b:dc:c2:f7:f2:
82:40:bb:03:6a:6a:29:dc:d3:31:88:5c:a2:a2:39:aa:19:7b:
9e:19:2e:c6:a4:66:37:b5:36:3d:73:9c:52:1b:9e:ac:90:fe:
6c:df:de:ce:5e:f5:e7:34:2a:ee:62:dd:b6:f7:c5:35:84:c8:
16:bb:bd:72:ae:3f:b7:01:a5:42:28:fe:a6:47:38:c4:2c:3a:
a4:9e:ef:f1:a1:24:0b:54:c8:b7:85:84:c9:1f:37:2f:52:a9:
0c:81:ef:4e:fe:d3:f7:f1:1f:4d:09:88:01:ba:9b:4d:06:98:
78:08:cc:b4:71:e4:ff:a6:93:b2:c3:92:f8:16:61:2e:54:3f:
e1:60:59:02:7e:7a:e3:c4:83:fd:65:a3:b7:da:8f:07:7b:39:
81:f7:e9:4f:8d:85:dd:da:0e:fe:86:3a:2c:ae:63:cd:af:2b:
48:34:1b:19:f9:2e:eb:ee:a0:4e:ac:58:06:82:f7:8d:13:33:
c0:f1:6f:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 12:09:08 2024 by rpki-client on console-fra.rpki-client.org