Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/pnh8jYwhUt7DGZBV-j6gkS5fjaU.roa
File: pnh8jYwhUt7DGZBV-j6gkS5fjaU.roa (raw, json)
Hash identifier: MRa79bK43/15uXyForjSs8TMxx/7jxCtYP2qLtacbzI=
Subject key identifier: A6:78:7C:8D:8C:21:52:DE:C3:19:90:55:FA:3E:A0:91:2E:5F:8D:A5
Certificate issuer: /CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Certificate serial: 018E80C9FE0BB79A172692EA9A26DCC33DD1
Authority key identifier: 60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/pnh8jYwhUt7DGZBV-j6gkS5fjaU.roa
Signing time: Wed 27 Mar 2024 16:41:45 +0000
ROA not before: Wed 27 Mar 2024 16:41:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 24852
IP address blocks: 79.132.160.0/19 maxlen: 19
84.55.0.0/18 maxlen: 18
84.55.32.0/24 maxlen: 24
84.55.33.0/24 maxlen: 24
84.55.34.0/23 maxlen: 23
84.55.36.0/23 maxlen: 23
84.55.48.0/21 maxlen: 21
84.55.56.0/23 maxlen: 23
84.55.58.0/23 maxlen: 23
84.55.60.0/23 maxlen: 23
84.55.62.0/23 maxlen: 23
88.223.0.0/18 maxlen: 18
88.223.96.0/22 maxlen: 22
88.223.104.0/21 maxlen: 21
88.223.112.0/20 maxlen: 20
88.223.128.0/22 maxlen: 22
88.223.144.0/21 maxlen: 21
88.223.152.0/24 maxlen: 24
88.223.153.0/24 maxlen: 24
88.223.160.0/20 maxlen: 20
88.223.192.0/19 maxlen: 19
95.173.32.0/19 maxlen: 19
185.104.176.0/22 maxlen: 22
213.164.112.0/22 maxlen: 22
213.164.116.0/23 maxlen: 23
213.164.118.0/24 maxlen: 24
217.147.34.0/24 maxlen: 24
217.147.35.0/24 maxlen: 24
217.147.36.0/23 maxlen: 23
217.147.38.0/24 maxlen: 24
217.147.40.0/24 maxlen: 24
217.147.41.0/24 maxlen: 24
217.147.44.0/23 maxlen: 23
217.147.46.0/24 maxlen: 24
217.147.47.0/24 maxlen: 24
2a01:7c80::/33 maxlen: 33
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 04:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:80:c9:fe:0b:b7:9a:17:26:92:ea:9a:26:dc:c3:3d:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Validity
Not Before: Mar 27 16:41:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a6787c8d8c2152dec3199055fa3ea0912e5f8da5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ed:a9:ae:34:88:ee:5a:ee:98:93:bd:23:af:
2c:50:4e:98:a5:7e:8a:3f:5b:fa:4d:47:ae:12:03:
17:8d:7d:0d:54:be:66:57:89:c0:6d:88:e7:fa:e3:
3a:6d:9a:53:4c:66:c2:0d:12:ed:a4:46:92:dc:84:
e1:04:8f:2e:92:fa:ec:6f:38:45:16:f9:9a:8f:17:
67:29:c5:b7:c7:4f:e3:e5:93:60:b1:2c:81:c7:60:
f3:bc:bc:4a:2b:88:19:59:e9:b6:ca:5c:2a:94:d0:
36:77:1a:d3:89:ff:ac:b0:15:34:61:61:01:f7:ce:
de:e3:21:09:19:09:67:c9:74:26:c8:df:2d:c0:af:
9e:7e:64:ca:a6:4b:f0:15:8d:8f:2f:c9:d1:8a:c3:
73:02:b4:85:50:5f:ec:05:8f:9a:57:82:fe:eb:b4:
d6:14:a5:87:a4:3e:c1:ad:bf:f7:5f:d5:2d:06:55:
dc:f6:11:e5:1d:89:fb:4c:b6:00:23:c4:52:c6:b5:
b5:7f:56:c4:eb:27:f3:fd:96:3c:d6:40:c6:1f:9d:
9c:f2:bf:0c:22:95:64:c5:9b:35:83:91:20:53:0c:
c2:d1:2e:1a:61:82:41:9f:e2:70:82:af:b8:0e:fe:
39:f9:71:f9:15:3b:0a:03:18:54:65:0c:61:3c:29:
74:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:78:7C:8D:8C:21:52:DE:C3:19:90:55:FA:3E:A0:91:2E:5F:8D:A5
X509v3 Authority Key Identifier:
keyid:60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/pnh8jYwhUt7DGZBV-j6gkS5fjaU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.132.160.0/19
84.55.0.0/18
88.223.0.0/18
88.223.96.0/22
88.223.104.0-88.223.131.255
88.223.144.0-88.223.153.255
88.223.160.0/20
88.223.192.0/19
95.173.32.0/19
185.104.176.0/22
213.164.112.0-213.164.118.255
217.147.34.0-217.147.38.255
217.147.40.0/23
217.147.44.0/22
IPv6:
2a01:7c80::/33
Signature Algorithm: sha256WithRSAEncryption
4a:9a:6b:67:6c:97:6f:a9:c9:fa:a7:9a:67:8d:3c:97:5e:ce:
3f:a1:17:47:47:e8:43:a8:11:dd:de:99:ef:6a:03:65:8a:6e:
0e:3d:97:c6:fb:75:88:2c:96:c3:58:be:c6:bd:f5:25:08:3d:
27:e3:7f:7f:75:ef:e8:04:6c:42:99:10:c7:89:e8:25:f8:9f:
72:47:f9:30:7e:c2:ff:b7:57:21:8a:fe:2e:71:f5:a5:75:f1:
40:74:ca:00:8a:7c:cc:49:aa:4a:c6:47:0e:b7:5f:43:26:6b:
47:af:92:db:e7:0c:73:43:e9:0d:ab:90:c3:79:34:ef:39:88:
99:1d:0f:5f:f4:b8:b1:dd:2b:76:ee:28:e9:d5:db:69:8e:2c:
5a:ff:af:c4:ff:37:9d:61:96:1c:e2:75:64:3e:f6:f3:8d:7b:
a9:4c:6a:07:3a:9f:b5:9a:8f:7c:f0:26:7a:02:f1:35:3b:7f:
cf:b4:b5:1e:11:b1:9d:46:54:ba:90:ab:2d:da:b3:aa:0a:47:
14:ad:11:a4:4c:02:a1:59:09:27:52:88:fa:cc:73:41:cb:53:
0b:2f:b1:d0:11:01:7f:b4:d9:ae:1c:4a:21:79:13:01:48:68:
b6:b8:3a:71:d1:16:9d:34:50:97:6a:62:2b:74:73:7e:c6:35:
f7:f5:f5:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 11:12:27 2024 by rpki-client on console-fra.rpki-client.org