Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/BF4f3yp4IPH3nqc6zRdOuancmNw.roa
File: BF4f3yp4IPH3nqc6zRdOuancmNw.roa (raw, json)
Hash identifier: 5ehKmxKJSHh3bHhWgDb3Mi23Gpdl6E5Dhnvj9Dyvmx8=
Subject key identifier: 04:5E:1F:DF:2A:78:20:F1:F7:9E:A7:3A:CD:17:4E:B9:A9:DC:98:DC
Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Certificate serial: 0191DAD88691FE00FD54553B8BC72B3EA747
Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/BF4f3yp4IPH3nqc6zRdOuancmNw.roa
Signing time: Tue 10 Sep 2024 07:31:48 +0000
ROA not before: Tue 10 Sep 2024 07:31:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8795
IP address blocks: 77.85.175.0/24 maxlen: 24
77.85.196.0/24 maxlen: 24
95.43.230.0/24 maxlen: 24
212.5.130.0/24 maxlen: 24
212.5.133.0/24 maxlen: 24
212.5.145.0/24 maxlen: 24
213.16.35.0/24 maxlen: 24
213.91.170.0/24 maxlen: 24
2a01:5a8:7::/56 maxlen: 56
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 14:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:da:d8:86:91:fe:00:fd:54:55:3b:8b:c7:2b:3e:a7:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Validity
Not Before: Sep 10 07:31:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=045e1fdf2a7820f1f79ea73acd174eb9a9dc98dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:38:8c:1c:ff:ce:18:13:e8:86:05:b8:28:33:
02:30:a2:bb:3f:a9:c1:96:37:09:6c:c7:22:96:e5:
2c:10:6c:72:23:88:8a:0e:54:4a:40:0f:9b:64:4c:
04:2d:c8:c8:1a:03:6f:9a:7b:7f:85:86:ed:16:e8:
ce:e9:2b:33:ee:1f:06:ad:99:2b:a4:d1:88:30:63:
a6:62:f2:d5:53:c1:f2:eb:ce:92:c5:d7:eb:36:f6:
18:72:a6:a4:77:5b:f1:5c:3d:cc:94:fa:b3:10:8f:
7f:af:18:78:71:4c:67:50:c7:a0:22:f0:17:85:00:
0a:ce:49:a1:ef:6a:c9:71:c5:88:33:5b:97:71:0c:
59:10:7d:b7:6d:9f:2d:5b:b0:c8:a9:e1:cd:f1:00:
9f:f2:72:30:03:3c:ad:ac:dd:81:ec:73:79:d2:22:
4f:fe:4a:62:0e:14:28:f0:14:c5:56:ae:5a:74:b2:
61:f6:63:8e:bb:7e:28:80:5d:4e:1e:f9:d9:26:d8:
fe:1a:3b:07:52:38:11:5a:11:84:d6:62:78:f8:a8:
ff:c4:18:b7:22:14:a4:90:35:f4:3d:d1:43:5a:94:
af:b2:b0:ea:ee:23:d0:9a:b8:aa:6f:05:fc:d9:a6:
f3:19:8a:99:e5:96:d7:86:ef:86:b3:8c:df:d3:4d:
ec:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:5E:1F:DF:2A:78:20:F1:F7:9E:A7:3A:CD:17:4E:B9:A9:DC:98:DC
X509v3 Authority Key Identifier:
keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/BF4f3yp4IPH3nqc6zRdOuancmNw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.85.175.0/24
77.85.196.0/24
95.43.230.0/24
212.5.130.0/24
212.5.133.0/24
212.5.145.0/24
213.16.35.0/24
213.91.170.0/24
IPv6:
2a01:5a8:7::/56
Signature Algorithm: sha256WithRSAEncryption
72:f8:84:aa:fa:05:78:2b:70:f2:65:cc:5b:ec:eb:c5:78:c9:
b0:88:2c:5d:ba:f0:55:02:04:9a:57:b4:61:0f:74:eb:61:c5:
13:f5:98:e0:c4:c8:23:04:01:ab:d5:08:1b:54:5c:cc:89:bd:
cf:c3:6d:6e:cc:50:89:b8:7b:76:3a:d1:d4:b4:65:fb:ae:3c:
bf:63:cd:74:f5:4a:51:36:f1:af:98:ed:e0:d3:14:d1:25:06:
9b:73:eb:90:2d:09:7f:1f:f2:f2:c3:e3:2b:5a:ef:3d:82:d4:
23:d6:b6:71:02:94:49:45:d6:4b:2c:e5:51:1b:bb:3c:bf:60:
22:b4:9c:c4:c9:32:d1:05:34:94:d8:3d:cd:83:9f:b2:d1:fc:
78:c9:ed:b2:42:a4:d2:56:39:75:ac:06:2a:86:ff:59:16:24:
20:7d:9b:4c:07:a8:ff:9a:f7:55:f5:48:b2:09:75:02:2f:22:
43:35:48:b9:79:7e:61:34:93:ad:23:f3:b3:10:cb:c7:0c:46:
6a:9d:cd:60:14:fa:57:c4:aa:5b:1f:eb:ba:0f:6e:bb:3c:1b:
ce:ab:15:16:1c:10:d3:d8:bd:12:e5:c9:ae:0f:36:db:3b:bc:
82:70:37:4e:9f:ed:7d:48:87:ad:f9:2d:e6:c0:84:f3:0c:6f:
ed:db:9a:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 17:34:05 2024 by rpki-client on console-fra.rpki-client.org