Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/tgtmOWqHgNMQwFxtHifEkWmo-mA.roa
File: tgtmOWqHgNMQwFxtHifEkWmo-mA.roa (raw, json)
Hash identifier: Re+HI9XI/ula7arVMlAzOaoplZTZMJQDpmJspHEEAEY=
Subject key identifier: B6:0B:66:39:6A:87:80:D3:10:C0:5C:6D:1E:27:C4:91:69:A8:FA:60
Certificate issuer: /CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Certificate serial: 019275A0E68CDD142530C3EA4CE70453DECB
Authority key identifier: 60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/tgtmOWqHgNMQwFxtHifEkWmo-mA.roa
Signing time: Thu 10 Oct 2024 08:52:11 +0000
ROA not before: Thu 10 Oct 2024 08:52:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 24852
IP address blocks: 79.132.160.0/20 maxlen: 20
84.55.32.0/24 maxlen: 24
84.55.33.0/24 maxlen: 24
84.55.34.0/23 maxlen: 23
84.55.36.0/23 maxlen: 23
84.55.48.0/21 maxlen: 21
84.55.56.0/23 maxlen: 23
84.55.58.0/23 maxlen: 23
84.55.60.0/23 maxlen: 23
84.55.62.0/23 maxlen: 23
88.223.0.0/18 maxlen: 18
88.223.96.0/22 maxlen: 22
88.223.104.0/21 maxlen: 21
88.223.112.0/20 maxlen: 20
88.223.128.0/22 maxlen: 22
88.223.144.0/21 maxlen: 21
88.223.152.0/24 maxlen: 24
88.223.153.0/24 maxlen: 24
88.223.160.0/22 maxlen: 22
88.223.192.0/20 maxlen: 20
95.173.32.0/23 maxlen: 23
185.104.176.0/22 maxlen: 22
213.164.112.0/22 maxlen: 22
213.164.116.0/23 maxlen: 23
213.164.118.0/24 maxlen: 24
217.147.34.0/24 maxlen: 24
217.147.35.0/24 maxlen: 24
217.147.36.0/23 maxlen: 23
217.147.38.0/24 maxlen: 24
217.147.40.0/24 maxlen: 24
217.147.41.0/24 maxlen: 24
217.147.44.0/23 maxlen: 23
217.147.46.0/24 maxlen: 24
217.147.47.0/24 maxlen: 24
2a01:7c80::/33 maxlen: 33
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:75:a0:e6:8c:dd:14:25:30:c3:ea:4c:e7:04:53:de:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Validity
Not Before: Oct 10 08:52:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b60b66396a8780d310c05c6d1e27c49169a8fa60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:51:2a:8d:ca:1c:b5:52:46:e7:1d:e6:b5:b0:
8b:fe:f2:ef:4b:a9:f9:ae:a2:06:33:1a:4e:28:90:
c7:09:a4:d9:ce:b4:e0:4c:58:2f:eb:5e:77:4a:cc:
27:c1:39:c2:af:41:a9:51:26:c9:7d:f0:e5:d5:49:
2e:5e:5a:30:48:de:41:96:8e:05:45:8a:60:de:a4:
29:6d:60:47:68:87:a2:90:d7:69:5e:50:a2:33:8d:
80:0f:73:c2:49:64:ac:a0:5a:34:0d:3c:19:d5:3f:
d1:24:a3:6e:0d:16:ed:fe:aa:42:cb:dc:f6:fb:10:
3a:92:c0:f9:8c:b4:48:22:8b:5a:b8:65:49:d1:ce:
a7:b4:1a:ae:42:8b:2d:4d:d5:cc:dd:e6:07:e1:5f:
18:a7:64:d5:3e:ee:d2:54:69:f5:a2:ed:30:dc:98:
aa:8e:f1:ac:9b:58:27:f2:e8:22:80:2d:ff:5d:bb:
fd:13:24:b7:f9:d5:a6:5d:e3:4c:f2:54:a9:0d:f9:
55:74:70:ec:ca:e6:22:33:38:71:3f:1e:7b:d2:ec:
de:d3:d8:5e:f2:f0:95:c0:24:6e:05:7c:6f:3d:4d:
34:a4:a2:97:ab:f0:81:4e:7d:b8:b2:00:6a:01:b7:
04:e6:90:04:60:f6:98:70:5a:ce:7d:69:3b:f3:d2:
16:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:0B:66:39:6A:87:80:D3:10:C0:5C:6D:1E:27:C4:91:69:A8:FA:60
X509v3 Authority Key Identifier:
keyid:60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/tgtmOWqHgNMQwFxtHifEkWmo-mA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.132.160.0/20
84.55.32.0-84.55.37.255
84.55.48.0/20
88.223.0.0/18
88.223.96.0/22
88.223.104.0-88.223.131.255
88.223.144.0-88.223.153.255
88.223.160.0/22
88.223.192.0/20
95.173.32.0/23
185.104.176.0/22
213.164.112.0-213.164.118.255
217.147.34.0-217.147.38.255
217.147.40.0/23
217.147.44.0/22
IPv6:
2a01:7c80::/33
Signature Algorithm: sha256WithRSAEncryption
66:0d:3a:e7:84:76:dc:a1:91:12:ad:fb:2c:94:5d:3a:9e:2e:
3d:a3:99:93:b2:f9:bd:ff:eb:b8:79:22:82:e5:40:cf:e1:1a:
a6:d2:e4:f6:6e:88:83:76:4f:ba:79:30:5b:81:66:0e:91:9b:
38:da:18:00:7f:77:ab:e4:4d:08:80:79:6e:df:aa:45:4c:c0:
ce:45:92:33:73:f1:57:f8:bc:a5:00:f9:3c:1b:d3:f1:a6:86:
18:1c:ab:5d:18:04:61:ec:5a:0b:fa:6c:1d:88:c5:b8:5b:99:
88:e4:c2:a5:8b:38:80:79:7b:bb:5b:9b:e3:b6:08:8b:5d:2d:
eb:d7:54:5a:7f:5c:56:b5:a4:3f:8c:6a:a8:f1:1d:b9:4c:38:
1c:a3:fd:ba:9c:0c:61:1c:5d:fb:d9:cb:9f:b1:73:8e:49:56:
eb:34:f0:fb:d7:e5:4d:35:21:2a:d4:62:0d:c5:7a:8e:f3:f7:
b5:c3:25:ac:10:26:63:a4:b8:2d:66:83:0e:2b:4b:d4:04:48:
e9:41:b5:18:2f:66:27:1e:d6:07:c2:00:26:37:4f:6e:46:c5:
79:57:ff:65:39:53:23:b1:44:07:d0:b2:5f:74:ed:4c:85:98:
f7:29:e0:79:61:55:ff:b3:4d:1a:38:0f:cd:1c:9b:40:54:fa:
d4:94:63:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 17:05:16 2024 by rpki-client on console-ams.rpki-client.org