Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/83535a-e1bd-4fb7-9f09-7b7e976c8412/1/USIamFas4eTY9-0eKRopDj7smOg.roa
File: USIamFas4eTY9-0eKRopDj7smOg.roa (raw, json)
Hash identifier: o2bZZAr0dqKKfdAoHrmYeK8rx92ZunI6RInko/Sa6SA=
Subject key identifier: 51:22:1A:98:56:AC:E1:E4:D8:F7:ED:1E:29:1A:29:0E:3E:EC:98:E8
Certificate issuer: /CN=1fa795167d2d9fb420941f17287bdf3c5eed8df9
Certificate serial: 018CC86FE2E6B2D934B31CCB2D88E872EF71
Authority key identifier: 1F:A7:95:16:7D:2D:9F:B4:20:94:1F:17:28:7B:DF:3C:5E:ED:8D:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H6eVFn0tn7QglB8XKHvfPF7tjfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/83535a-e1bd-4fb7-9f09-7b7e976c8412/1/USIamFas4eTY9-0eKRopDj7smOg.roa
Signing time: Tue 02 Jan 2024 04:30:24 +0000
ROA not before: Tue 02 Jan 2024 04:30:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44735
IP address blocks: 213.181.96.0/19 maxlen: 24
149.126.80.0/21 maxlen: 24
185.152.116.0/22 maxlen: 24
185.40.120.0/22 maxlen: 24
157.97.0.0/19 maxlen: 24
178.19.48.0/20 maxlen: 24
91.220.138.0/24 maxlen: 24
185.111.36.0/22 maxlen: 24
46.182.184.0/21 maxlen: 24
78.40.248.0/21 maxlen: 24
2a01:6f00::/29 maxlen: 48
2a00:9280::/32 maxlen: 32
2a01:8280::/32 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/83535a-e1bd-4fb7-9f09-7b7e976c8412/1/H6eVFn0tn7QglB8XKHvfPF7tjfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/83535a-e1bd-4fb7-9f09-7b7e976c8412/1/H6eVFn0tn7QglB8XKHvfPF7tjfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/H6eVFn0tn7QglB8XKHvfPF7tjfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 01 Jul 2024 04:02:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:e2:e6:b2:d9:34:b3:1c:cb:2d:88:e8:72:ef:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fa795167d2d9fb420941f17287bdf3c5eed8df9
Validity
Not Before: Jan 2 04:30:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=51221a9856ace1e4d8f7ed1e291a290e3eec98e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:6c:37:f9:d6:30:ab:54:96:92:54:3d:0e:c7:
6c:9a:89:45:7a:85:2c:08:ea:00:12:9b:9c:11:db:
87:fd:d0:f2:6a:82:2e:3a:d7:16:14:b7:ec:b9:d4:
51:ea:62:86:ac:ef:a1:05:26:79:1b:57:44:94:ae:
9b:9c:87:bb:5c:c7:aa:0f:07:dd:86:4b:a3:1c:1f:
e1:9e:31:ac:07:13:59:40:e8:f1:3f:f6:2f:16:fe:
3f:e7:6c:63:6e:04:5c:72:25:b5:d4:ad:72:05:c2:
0a:8b:49:a8:bc:69:6d:94:f8:33:98:ca:16:54:7b:
07:8c:77:79:60:01:c3:74:30:82:77:c3:16:76:e3:
f0:03:4b:75:8f:8d:49:5e:a5:83:98:01:cf:31:90:
00:5e:98:3d:5b:f7:41:ba:fa:77:10:70:99:d8:9e:
7e:54:bf:71:c4:6d:0c:47:30:28:df:92:f8:dc:bc:
78:0d:e9:24:93:2b:05:e8:d3:b2:9d:bd:76:8a:19:
d2:01:20:8b:a4:15:b5:21:1d:d8:b0:d3:6e:bc:14:
60:c9:d9:f1:8c:ec:2b:b0:49:f7:ab:bd:4b:31:48:
3c:be:fe:da:40:d6:f2:b7:e0:44:de:9c:58:dc:a3:
cc:1b:cc:57:6f:af:6c:80:76:e3:74:7b:bb:96:60:
9e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:22:1A:98:56:AC:E1:E4:D8:F7:ED:1E:29:1A:29:0E:3E:EC:98:E8
X509v3 Authority Key Identifier:
keyid:1F:A7:95:16:7D:2D:9F:B4:20:94:1F:17:28:7B:DF:3C:5E:ED:8D:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H6eVFn0tn7QglB8XKHvfPF7tjfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/83535a-e1bd-4fb7-9f09-7b7e976c8412/1/USIamFas4eTY9-0eKRopDj7smOg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/83535a-e1bd-4fb7-9f09-7b7e976c8412/1/H6eVFn0tn7QglB8XKHvfPF7tjfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.182.184.0/21
78.40.248.0/21
91.220.138.0/24
149.126.80.0/21
157.97.0.0/19
178.19.48.0/20
185.40.120.0/22
185.111.36.0/22
185.152.116.0/22
213.181.96.0/19
IPv6:
2a00:9280::/32
2a01:6f00::/29
2a01:8280::/32
Signature Algorithm: sha256WithRSAEncryption
a8:45:5d:aa:69:13:fe:e0:de:a5:77:88:4a:3f:95:a0:f6:6e:
ff:85:80:26:a5:27:95:df:e8:0c:74:8f:e8:f2:fa:70:fd:54:
c3:e0:90:a0:55:fa:a2:67:27:8e:73:09:4f:37:3c:83:9f:c4:
49:9b:08:2b:9a:4c:d5:24:57:e1:32:38:53:40:4f:e1:49:99:
96:a6:54:17:2e:15:ca:d0:3f:0d:48:59:4d:74:a0:ca:9c:a8:
d6:60:59:98:6c:9a:10:d8:66:2a:c2:3b:f2:94:b5:df:51:07:
59:e8:ac:ff:b7:23:14:41:20:80:11:38:f3:23:85:81:db:0f:
a4:eb:85:df:0b:f6:bf:d8:76:43:4f:95:56:00:d6:69:67:c4:
40:d9:b8:6c:6b:c6:36:94:48:4a:a3:c6:8f:30:aa:ef:e3:f6:
3f:18:93:6a:d9:e9:51:d7:e9:ad:53:da:60:cc:2c:d0:f4:82:
d3:ef:79:0e:14:cd:08:b4:08:dc:91:77:fb:d3:75:7d:99:b7:
3a:a2:48:db:bf:d7:e9:35:61:9c:4d:2f:4b:0f:95:a7:15:79:
a4:dd:63:e8:4c:b5:25:b9:c7:b9:77:09:e3:b0:06:9e:77:bd:
14:83:9d:21:ed:26:a3:5a:8b:ef:2d:e4:4e:b1:96:d9:df:3f:
3f:73:bc:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 30 13:38:02 2024 by rpki-client on console-fra.rpki-client.org