Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/RP7UgJJkm8oH-RNR0e8Im-cDkmo.roa
File: RP7UgJJkm8oH-RNR0e8Im-cDkmo.roa (raw, json)
Hash identifier: tuScYoRiFQ7Z6TVe9spGh9cA+N6fIAVpPmz6yh+zb/s=
Subject key identifier: 44:FE:D4:80:92:64:9B:CA:07:F9:13:51:D1:EF:08:9B:E7:03:92:6A
Certificate issuer: /CN=a86580e18ad6ff8dc942be883c16de8b731f9605
Certificate serial: 018F0F1BC2EF103E40F7B6155AAD44AD12AA
Authority key identifier: A8:65:80:E1:8A:D6:FF:8D:C9:42:BE:88:3C:16:DE:8B:73:1F:96:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qGWA4YrW_43JQr6IPBbei3MflgU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/RP7UgJJkm8oH-RNR0e8Im-cDkmo.roa
Signing time: Wed 24 Apr 2024 07:57:08 +0000
ROA not before: Wed 24 Apr 2024 07:57:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39686
IP address blocks: 31.207.8.0/21 maxlen: 24
31.207.16.0/20 maxlen: 24
37.251.176.0/20 maxlen: 24
37.251.200.0/21 maxlen: 24
37.251.240.0/21 maxlen: 24
45.11.164.0/22 maxlen: 24
46.102.148.0/22 maxlen: 24
46.231.104.0/21 maxlen: 24
62.122.40.0/21 maxlen: 24
89.20.160.0/19 maxlen: 24
90.145.59.0/24 maxlen: 24
93.95.248.0/21 maxlen: 24
94.24.64.0/21 maxlen: 24
109.94.144.0/20 maxlen: 24
141.136.16.0/20 maxlen: 24
144.178.64.0/19 maxlen: 24
144.178.96.0/21 maxlen: 24
144.178.108.0/22 maxlen: 24
144.178.112.0/22 maxlen: 24
144.178.120.0/21 maxlen: 24
144.178.192.0/19 maxlen: 24
144.178.224.0/20 maxlen: 24
144.178.240.0/21 maxlen: 24
144.178.248.0/22 maxlen: 24
151.236.144.0/20 maxlen: 24
161.51.64.0/19 maxlen: 24
185.184.204.0/22 maxlen: 24
188.214.40.0/21 maxlen: 24
2a01:9bc0::/29 maxlen: 48
2a02:fe8::/32 maxlen: 48
2a02:fe9::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/qGWA4YrW_43JQr6IPBbei3MflgU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/qGWA4YrW_43JQr6IPBbei3MflgU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qGWA4YrW_43JQr6IPBbei3MflgU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 02 Jul 2024 04:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:0f:1b:c2:ef:10:3e:40:f7:b6:15:5a:ad:44:ad:12:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a86580e18ad6ff8dc942be883c16de8b731f9605
Validity
Not Before: Apr 24 07:57:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=44fed48092649bca07f91351d1ef089be703926a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:5e:f5:c4:b2:40:4d:58:9a:ec:96:45:77:fa:
bf:de:03:6a:2f:86:31:c5:5a:1e:89:2e:7f:ac:d0:
b3:04:17:89:c7:6d:65:6f:4f:e8:a3:57:4e:3c:84:
eb:66:a6:6a:c1:bc:3d:c8:29:65:06:40:1e:7c:20:
bf:f7:77:9a:5b:1d:f5:1a:62:41:a5:20:85:30:dd:
df:c4:05:6a:e3:aa:1e:d5:3c:bb:0d:3f:d8:5a:f1:
d5:c9:d9:4e:98:d9:aa:5c:23:b3:41:d1:8d:26:e2:
72:a2:81:67:10:1e:b3:07:be:a2:3a:a2:dd:93:84:
6d:fd:1c:a1:89:f3:f0:05:47:5e:16:0b:1d:52:9f:
97:92:cc:56:4b:a8:88:0d:c2:ea:d4:5e:7a:f4:7f:
39:30:d8:72:b0:c8:10:75:96:cf:b5:b3:93:1b:41:
f1:c7:1a:d7:27:c1:a4:02:b2:63:ef:82:03:a9:26:
e9:a6:bf:f2:85:9c:29:23:23:8a:1d:19:36:39:ae:
80:14:51:3f:b2:2d:e6:0a:ae:d4:19:bc:2a:7d:df:
9b:d7:24:5e:f8:d0:22:4b:39:63:a0:42:dd:4c:1b:
fb:ca:3a:7b:3d:0a:37:05:14:79:02:24:5e:82:fa:
03:d4:54:07:53:b7:8e:27:e1:13:4a:ed:58:0b:ef:
7a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:FE:D4:80:92:64:9B:CA:07:F9:13:51:D1:EF:08:9B:E7:03:92:6A
X509v3 Authority Key Identifier:
keyid:A8:65:80:E1:8A:D6:FF:8D:C9:42:BE:88:3C:16:DE:8B:73:1F:96:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qGWA4YrW_43JQr6IPBbei3MflgU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/RP7UgJJkm8oH-RNR0e8Im-cDkmo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/qGWA4YrW_43JQr6IPBbei3MflgU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.207.8.0-31.207.31.255
37.251.176.0/20
37.251.200.0/21
37.251.240.0/21
45.11.164.0/22
46.102.148.0/22
46.231.104.0/21
62.122.40.0/21
89.20.160.0/19
90.145.59.0/24
93.95.248.0/21
94.24.64.0/21
109.94.144.0/20
141.136.16.0/20
144.178.64.0-144.178.103.255
144.178.108.0-144.178.115.255
144.178.120.0/21
144.178.192.0-144.178.251.255
151.236.144.0/20
161.51.64.0/19
185.184.204.0/22
188.214.40.0/21
IPv6:
2a01:9bc0::/29
2a02:fe8::/31
Signature Algorithm: sha256WithRSAEncryption
85:e8:89:d0:53:8a:0e:f7:8e:50:ec:26:b0:3a:de:64:58:45:
2b:d9:b6:12:e6:86:55:86:dc:e9:13:cc:2d:8b:1e:ce:97:45:
b1:10:4e:f2:f8:96:08:54:8e:9f:af:8c:a2:ab:11:25:0a:51:
fd:2a:02:f2:c4:21:20:81:bb:7c:7f:6e:de:f9:03:59:b1:4c:
99:99:71:3b:13:34:f7:bf:24:2e:41:3f:3d:68:55:eb:af:66:
81:c2:2d:33:2a:17:bd:e9:dd:af:5f:7d:5a:c4:3e:9b:15:9b:
04:f5:ac:92:2b:ca:d2:d7:6f:03:6c:30:48:90:7f:e2:2b:19:
d2:a0:cb:d9:db:a2:54:00:bb:3c:32:ef:15:18:58:75:89:a0:
a5:b6:74:31:f9:8b:40:a6:36:dc:83:dc:cd:e9:8d:c4:c9:3a:
fe:a0:3d:50:fc:32:b7:af:65:ed:64:dc:ee:73:06:00:8e:15:
e4:a4:6a:a8:9a:5c:ad:30:96:c5:13:84:a6:d2:dc:8a:b1:dd:
98:17:10:3d:3e:76:42:f8:b8:25:98:52:c5:36:86:c1:45:67:
45:30:03:47:e3:8f:d9:d1:ab:03:e8:12:e1:66:29:35:0f:5a:
8e:b1:19:a4:a2:37:1a:2a:68:40:a6:9b:b3:f2:ff:2e:c9:c6:
d5:ca:2f:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 10:46:39 2024 by rpki-client on console-ams.rpki-client.org