Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/ljIx3BXhXHLSDJ2kAhLByTgpSxU.roa
File: ljIx3BXhXHLSDJ2kAhLByTgpSxU.roa (raw, json)
Hash identifier: F6spuY7jeg3TU/oE9SUSGN3k+SCL1EV53GM8wVsBgHM=
Subject key identifier: 96:32:31:DC:15:E1:5C:72:D2:0C:9D:A4:02:12:C1:C9:38:29:4B:15
Certificate issuer: /CN=cfb75191978866f1fc97f523c7dda40a88f7e777
Certificate serial: 018F0425AB3E0C5DBB6ED77A4BEE826DA998
Authority key identifier: CF:B7:51:91:97:88:66:F1:FC:97:F5:23:C7:DD:A4:0A:88:F7:E7:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z7dRkZeIZvH8l_Ujx92kCoj353c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/ljIx3BXhXHLSDJ2kAhLByTgpSxU.roa
Signing time: Mon 22 Apr 2024 04:52:08 +0000
ROA not before: Mon 22 Apr 2024 04:52:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 13150
IP address blocks: 85.255.16.0/24 maxlen: 24
85.255.17.0/24 maxlen: 24
85.255.19.0/24 maxlen: 24
85.255.20.0/24 maxlen: 24
85.255.21.0/24 maxlen: 24
85.255.23.0/24 maxlen: 24
85.255.24.0/24 maxlen: 24
85.255.25.0/24 maxlen: 24
85.255.26.0/24 maxlen: 24
85.255.27.0/24 maxlen: 24
85.255.28.0/24 maxlen: 24
85.255.29.0/24 maxlen: 24
85.255.30.0/24 maxlen: 24
85.255.31.0/24 maxlen: 24
185.114.120.0/24 maxlen: 24
185.114.121.0/24 maxlen: 24
185.114.122.0/24 maxlen: 24
185.114.123.0/24 maxlen: 24
209.206.0.0/24 maxlen: 24
209.206.1.0/24 maxlen: 24
209.206.2.0/24 maxlen: 24
209.206.3.0/24 maxlen: 24
209.206.4.0/24 maxlen: 24
209.206.5.0/24 maxlen: 24
209.206.6.0/24 maxlen: 24
209.206.7.0/24 maxlen: 24
209.206.8.0/24 maxlen: 24
209.206.9.0/24 maxlen: 24
209.206.10.0/24 maxlen: 24
209.206.11.0/24 maxlen: 24
209.206.12.0/24 maxlen: 24
209.206.13.0/24 maxlen: 24
209.206.14.0/24 maxlen: 24
209.206.15.0/24 maxlen: 24
209.206.16.0/24 maxlen: 24
209.206.17.0/24 maxlen: 24
209.206.18.0/24 maxlen: 24
209.206.19.0/24 maxlen: 24
209.206.20.0/24 maxlen: 24
209.206.21.0/24 maxlen: 24
209.206.22.0/24 maxlen: 24
209.206.23.0/24 maxlen: 24
209.206.24.0/24 maxlen: 24
209.206.25.0/24 maxlen: 24
209.206.26.0/24 maxlen: 24
209.206.27.0/24 maxlen: 24
209.206.28.0/24 maxlen: 24
209.206.29.0/24 maxlen: 24
209.206.30.0/24 maxlen: 24
209.206.31.0/24 maxlen: 24
216.252.177.0/24 maxlen: 24
216.252.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.mft
rsync://rpki.ripe.net/repository/DEFAULT/z7dRkZeIZvH8l_Ujx92kCoj353c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 10:03:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:04:25:ab:3e:0c:5d:bb:6e:d7:7a:4b:ee:82:6d:a9:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfb75191978866f1fc97f523c7dda40a88f7e777
Validity
Not Before: Apr 22 04:52:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=963231dc15e15c72d20c9da40212c1c938294b15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:88:dc:c6:82:16:01:b0:2a:9b:d5:1a:d4:bc:
61:bb:58:1e:f4:34:cb:6e:b1:cf:97:24:37:60:95:
64:45:c1:02:a8:ed:65:cd:74:20:43:f8:53:a4:0c:
76:e0:a5:47:34:53:d1:21:f0:88:a1:72:e3:b6:f8:
f9:a0:93:d4:f9:c1:0f:5b:db:0a:da:61:d4:03:8a:
f5:0f:b9:37:d1:eb:03:81:d1:e2:47:66:6a:dd:78:
10:79:29:1c:7c:ee:a2:cd:8d:e7:4f:e0:9e:50:7b:
cb:20:96:55:b0:38:80:aa:bc:dd:b6:63:c3:53:4b:
24:3d:2a:92:14:7b:a3:2f:8a:01:66:b8:e2:dd:cc:
b3:35:15:49:c5:7a:09:f1:f9:f6:ec:33:9b:d7:ef:
e0:7a:57:ff:96:e3:9d:b0:ea:18:86:0b:d9:81:9c:
56:8e:97:8c:bf:f5:c1:04:23:72:2a:a7:d0:25:d8:
68:b7:e5:53:2d:41:18:ad:48:48:52:70:c8:49:56:
34:9d:a3:63:43:62:ef:03:a7:ae:3f:65:ac:9a:9e:
b7:a6:6b:15:9a:70:1e:cf:54:8d:35:e0:25:a3:0a:
03:1e:d5:1a:b7:b4:e0:16:b1:e0:6b:76:2b:cb:ac:
70:5a:fd:6b:3c:7e:e8:85:e8:66:fc:56:e3:02:84:
b9:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:32:31:DC:15:E1:5C:72:D2:0C:9D:A4:02:12:C1:C9:38:29:4B:15
X509v3 Authority Key Identifier:
keyid:CF:B7:51:91:97:88:66:F1:FC:97:F5:23:C7:DD:A4:0A:88:F7:E7:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z7dRkZeIZvH8l_Ujx92kCoj353c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/ljIx3BXhXHLSDJ2kAhLByTgpSxU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.255.16.0/23
85.255.19.0-85.255.21.255
85.255.23.0-85.255.31.255
185.114.120.0/22
209.206.0.0/19
216.252.177.0-216.252.178.255
Signature Algorithm: sha256WithRSAEncryption
82:75:2d:15:a9:08:3d:22:0f:e7:b5:86:1c:a4:2d:84:f6:2c:
55:97:af:89:43:64:07:c0:dd:d5:99:5e:49:bc:fc:a0:85:7b:
70:30:b3:00:a0:ad:2e:a7:ef:7b:4a:a3:4a:07:2c:6c:96:39:
52:76:54:ae:94:f8:17:49:cd:9c:37:ef:9f:05:c8:d6:31:86:
dd:e1:f8:32:d7:bc:84:f7:60:0f:de:3d:17:de:c0:14:56:94:
e6:cc:4e:c7:9f:cf:fa:47:3d:64:f8:b9:dd:c0:04:f7:9d:d9:
8d:93:c7:18:dd:be:10:f9:d3:4e:50:eb:54:38:0f:b6:75:64:
7c:37:07:2f:f5:76:5e:82:92:2f:b5:c4:7a:be:5f:21:7c:65:
73:4f:35:af:fb:10:71:68:6a:5c:9c:ab:27:5c:e6:0c:0a:e5:
c8:5f:25:50:d3:12:2c:9b:75:1f:cd:77:83:9f:41:e1:91:de:
1d:90:8d:25:f6:bb:cf:a4:59:9d:cf:0a:20:3b:e7:1e:8f:7e:
e5:1f:7a:9f:6a:7c:be:4c:34:84:5a:87:d1:d2:61:61:00:2c:
8c:b0:c7:da:c6:91:da:bb:ae:b2:5e:c0:7a:56:63:2b:db:ba:
07:2f:ef:ae:1b:9c:17:ee:d9:48:5d:69:4b:65:d2:46:e0:f7:
4d:6e:c2:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 16:52:43 2024 by rpki-client on console-fra.rpki-client.org