Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/0e58dc-7c90-49d7-8855-fa32d2d52968/1/9zfEVbUu01LdxXk2LXnbx3_9ovg.roa
File: 9zfEVbUu01LdxXk2LXnbx3_9ovg.roa (raw, json)
Hash identifier: WxhhJS9ySBrx5QiBN2AEuiTDBJ+iFQbalHQUScQQwhE=
Subject key identifier: F7:37:C4:55:B5:2E:D3:52:DD:C5:79:36:2D:79:DB:C7:7F:FD:A2:F8
Certificate issuer: /CN=f0cc7a447482e57b0604babb82a52409cde3b36d
Certificate serial: 018CC64B757A73C969E857D14268A1D98B61
Authority key identifier: F0:CC:7A:44:74:82:E5:7B:06:04:BA:BB:82:A5:24:09:CD:E3:B3:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Mx6RHSC5XsGBLq7gqUkCc3js20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/0e58dc-7c90-49d7-8855-fa32d2d52968/1/9zfEVbUu01LdxXk2LXnbx3_9ovg.roa
Signing time: Mon 01 Jan 2024 18:31:23 +0000
ROA not before: Mon 01 Jan 2024 18:31:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9009
IP address blocks: 91.123.0.0/24 maxlen: 24
91.123.1.0/24 maxlen: 24
91.123.2.0/24 maxlen: 24
91.123.3.0/24 maxlen: 24
91.123.4.0/24 maxlen: 24
91.123.5.0/24 maxlen: 24
91.123.6.0/24 maxlen: 24
91.123.7.0/24 maxlen: 24
91.123.8.0/24 maxlen: 24
91.123.9.0/24 maxlen: 24
91.123.10.0/24 maxlen: 24
91.123.11.0/24 maxlen: 24
91.123.12.0/24 maxlen: 24
91.123.13.0/24 maxlen: 24
91.123.14.0/24 maxlen: 24
91.123.15.0/24 maxlen: 24
190.106.187.0/24 maxlen: 24
190.106.188.0/24 maxlen: 24
190.106.189.0/24 maxlen: 24
190.106.190.0/24 maxlen: 24
190.106.191.0/24 maxlen: 24
190.106.160.0/24 maxlen: 24
190.106.161.0/24 maxlen: 24
190.106.162.0/24 maxlen: 24
190.106.163.0/24 maxlen: 24
190.106.164.0/24 maxlen: 24
190.106.165.0/24 maxlen: 24
190.106.166.0/24 maxlen: 24
190.106.167.0/24 maxlen: 24
190.106.168.0/24 maxlen: 24
190.106.169.0/24 maxlen: 24
190.106.170.0/24 maxlen: 24
190.106.171.0/24 maxlen: 24
190.106.172.0/24 maxlen: 24
190.106.177.0/24 maxlen: 24
190.106.178.0/24 maxlen: 24
190.106.179.0/24 maxlen: 24
190.106.173.0/24 maxlen: 24
190.106.174.0/24 maxlen: 24
190.106.175.0/24 maxlen: 24
190.106.176.0/24 maxlen: 24
190.106.180.0/24 maxlen: 24
190.106.181.0/24 maxlen: 24
190.106.182.0/24 maxlen: 24
190.106.183.0/24 maxlen: 24
190.106.184.0/24 maxlen: 24
190.106.185.0/24 maxlen: 24
190.106.186.0/24 maxlen: 24
206.195.128.0/24 maxlen: 24
206.195.129.0/24 maxlen: 24
206.195.130.0/24 maxlen: 24
206.195.131.0/24 maxlen: 24
206.195.132.0/24 maxlen: 24
206.195.133.0/24 maxlen: 24
206.195.134.0/24 maxlen: 24
206.195.135.0/24 maxlen: 24
206.195.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/0e58dc-7c90-49d7-8855-fa32d2d52968/1/8Mx6RHSC5XsGBLq7gqUkCc3js20.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/0e58dc-7c90-49d7-8855-fa32d2d52968/1/8Mx6RHSC5XsGBLq7gqUkCc3js20.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Mx6RHSC5XsGBLq7gqUkCc3js20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 20:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:75:7a:73:c9:69:e8:57:d1:42:68:a1:d9:8b:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0cc7a447482e57b0604babb82a52409cde3b36d
Validity
Not Before: Jan 1 18:31:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f737c455b52ed352ddc579362d79dbc77ffda2f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:71:ca:da:36:73:52:4b:7b:62:0c:16:7f:70:
57:94:e0:3e:0a:06:54:17:60:80:6c:c1:91:ff:92:
7a:64:19:e5:de:d4:66:e3:8d:3b:9b:78:cd:f4:4d:
55:4b:d9:e9:69:c1:6a:47:c3:f8:e2:be:bd:34:1f:
24:be:fa:f0:a7:7f:ad:04:0c:0c:ae:46:52:7b:c8:
16:c1:52:42:69:a3:92:92:64:12:61:2b:ca:92:78:
af:7b:4d:f7:0e:f7:9f:28:ad:41:c7:91:b7:28:af:
da:6d:80:c1:b3:e9:9a:fd:0d:c9:09:e6:8c:e6:0a:
73:96:c9:1a:fb:60:69:9f:93:f3:79:0f:11:a1:fc:
89:37:d6:9a:38:8e:9c:d3:eb:18:81:be:c7:af:96:
1f:f8:71:3f:a7:39:12:8e:4f:e0:71:63:62:d5:22:
c3:9e:e6:74:09:9b:ae:a5:46:d0:73:9b:59:f6:cc:
14:81:25:d3:36:a5:7e:1a:3a:f7:f7:bc:e2:b3:66:
c0:0b:de:2f:d0:d7:fe:82:a1:57:e1:29:51:c2:e1:
59:65:6a:d0:35:23:f5:25:a5:ab:5d:ba:48:a4:1f:
3a:d5:9c:00:6f:65:b7:73:86:5f:c5:58:d9:fd:9c:
a4:8c:26:57:b1:fb:63:04:32:51:d0:9a:c6:ae:cc:
2b:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:37:C4:55:B5:2E:D3:52:DD:C5:79:36:2D:79:DB:C7:7F:FD:A2:F8
X509v3 Authority Key Identifier:
keyid:F0:CC:7A:44:74:82:E5:7B:06:04:BA:BB:82:A5:24:09:CD:E3:B3:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Mx6RHSC5XsGBLq7gqUkCc3js20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/0e58dc-7c90-49d7-8855-fa32d2d52968/1/9zfEVbUu01LdxXk2LXnbx3_9ovg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/0e58dc-7c90-49d7-8855-fa32d2d52968/1/8Mx6RHSC5XsGBLq7gqUkCc3js20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.123.0.0/20
190.106.160.0/19
206.195.128.0-206.195.136.255
Signature Algorithm: sha256WithRSAEncryption
57:97:d8:bb:d4:22:a0:4e:55:b7:ca:3c:d4:ee:95:01:c5:6c:
4c:7a:e3:22:fd:1a:d5:d9:b5:9f:bc:68:26:55:1d:6a:a2:c8:
80:9d:da:c4:c8:3d:39:86:16:77:03:83:67:d9:5e:f0:ac:a9:
f9:13:97:1c:94:7a:ed:58:59:d2:a0:e3:a1:b4:0e:c4:6f:4f:
94:fa:3e:db:15:0e:2e:7d:1c:c2:fe:f4:69:ff:0b:b0:17:32:
4e:a5:5e:17:df:d1:07:61:d9:63:ff:31:d3:32:29:a5:34:f0:
27:ca:2c:2e:a6:c4:d7:49:a4:3b:d7:02:91:ea:9d:43:0f:46:
38:6a:19:20:a5:55:fd:92:e5:67:71:b6:b2:a3:e3:36:0d:a3:
3c:06:13:c9:b9:2e:56:58:90:26:c1:eb:70:e7:34:05:24:cb:
81:00:ab:a4:7c:cd:35:13:b1:8e:a5:e8:29:09:c8:d9:f3:06:
47:e1:de:5e:2e:26:73:d9:69:67:4b:22:fd:34:81:e5:8f:11:
81:36:7c:aa:ee:de:dc:b9:42:8d:15:3f:fe:b0:ad:23:58:c3:
53:ec:37:40:f6:d9:ac:31:d1:53:8d:00:ef:84:e3:69:73:3e:
f6:ab:06:60:44:df:39:05:04:2b:34:8a:f2:ed:c2:9c:fb:fe:
61:1a:5a:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 05:51:06 2024 by rpki-client on console-ams.rpki-client.org