Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/6ec39c-a9d4-4a12-810a-4f0650da545b/1/k0fv_0lBTVHhkgh3M6y4FfdKWug.roa
File: k0fv_0lBTVHhkgh3M6y4FfdKWug.roa (raw, json)
Hash identifier: NS6EWo/2W4cdxM4+yYUneBPcsKtB9dlJYih0Lk7s4iM=
Subject key identifier: 93:47:EF:FF:49:41:4D:51:E1:92:08:77:33:AC:B8:15:F7:4A:5A:E8
Certificate issuer: /CN=3e50d1dd31bc7449bacc1864b01af994c547efd3
Certificate serial: 01942669D6EED489F4AED2C9CF9DDF9D3190
Authority key identifier: 3E:50:D1:DD:31:BC:74:49:BA:CC:18:64:B0:1A:F9:94:C5:47:EF:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PlDR3TG8dEm6zBhksBr5lMVH79M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/6ec39c-a9d4-4a12-810a-4f0650da545b/1/k0fv_0lBTVHhkgh3M6y4FfdKWug.roa
Signing time: Thu 02 Jan 2025 09:47:38 +0000
ROA not before: Thu 02 Jan 2025 09:47:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43376
IP address blocks: 86.104.176.0/24 maxlen: 24
86.104.177.0/24 maxlen: 24
86.104.178.0/24 maxlen: 24
86.104.179.0/24 maxlen: 24
86.104.180.0/24 maxlen: 24
86.104.182.0/24 maxlen: 24
86.104.183.0/24 maxlen: 24
91.194.234.0/24 maxlen: 24
93.115.243.0/24 maxlen: 24
185.163.104.0/24 maxlen: 24
185.163.105.0/24 maxlen: 24
185.163.106.0/24 maxlen: 24
185.163.107.0/24 maxlen: 24
188.240.82.0/24 maxlen: 24
2001:67c:2170::/48 maxlen: 48
2a0b:8800::/48 maxlen: 48
2a0b:8800:1::/48 maxlen: 48
2a0b:8800:2::/48 maxlen: 48
2a0b:8800:3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/6ec39c-a9d4-4a12-810a-4f0650da545b/1/PlDR3TG8dEm6zBhksBr5lMVH79M.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/6ec39c-a9d4-4a12-810a-4f0650da545b/1/PlDR3TG8dEm6zBhksBr5lMVH79M.mft
rsync://rpki.ripe.net/repository/DEFAULT/PlDR3TG8dEm6zBhksBr5lMVH79M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:69:d6:ee:d4:89:f4:ae:d2:c9:cf:9d:df:9d:31:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e50d1dd31bc7449bacc1864b01af994c547efd3
Validity
Not Before: Jan 2 09:47:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9347efff49414d51e192087733acb815f74a5ae8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:22:ea:5c:d8:3d:69:9b:74:99:ec:d3:7f:8d:
50:72:5e:7d:c8:f9:34:e5:a3:41:13:df:a5:91:3a:
36:78:c2:92:23:c1:1b:60:5e:10:4a:95:24:1e:33:
18:55:5c:14:0a:eb:ec:cd:50:31:5a:b0:7e:cb:8e:
de:60:c8:b6:e6:77:b5:b6:fa:34:d1:26:f1:79:bd:
9c:51:72:d9:c1:84:6c:d1:fe:2b:32:b6:cc:c7:38:
56:71:9b:74:67:8b:21:ca:d1:9d:87:25:7b:71:56:
67:35:dc:1e:2c:98:a5:70:2d:38:50:6c:7b:65:cf:
ca:8c:4d:cf:d7:30:70:f0:67:b7:b9:e3:0d:d6:fa:
7f:33:53:40:71:5f:70:84:13:ff:01:89:b2:75:e3:
b8:1d:62:d3:68:70:d2:24:19:1b:97:6a:9a:ff:dd:
b1:c8:c2:1f:38:a8:80:6b:13:97:35:b2:f0:10:8e:
a6:37:4f:07:2e:01:c9:fd:3b:59:8b:c1:c1:6a:be:
82:51:b2:a6:1f:b2:d9:b5:76:d4:bb:37:bb:4b:9e:
7e:2f:cd:e7:af:7c:e8:1c:bc:ba:42:ed:c8:28:37:
27:b1:9d:07:83:dd:04:c7:8b:d2:5e:53:73:c1:c5:
ee:f6:45:8e:4f:e0:66:bf:d0:71:b1:43:46:d1:b6:
b1:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:47:EF:FF:49:41:4D:51:E1:92:08:77:33:AC:B8:15:F7:4A:5A:E8
X509v3 Authority Key Identifier:
keyid:3E:50:D1:DD:31:BC:74:49:BA:CC:18:64:B0:1A:F9:94:C5:47:EF:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PlDR3TG8dEm6zBhksBr5lMVH79M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/6ec39c-a9d4-4a12-810a-4f0650da545b/1/k0fv_0lBTVHhkgh3M6y4FfdKWug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/6ec39c-a9d4-4a12-810a-4f0650da545b/1/PlDR3TG8dEm6zBhksBr5lMVH79M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.104.176.0-86.104.180.255
86.104.182.0/23
91.194.234.0/24
93.115.243.0/24
185.163.104.0/22
188.240.82.0/24
IPv6:
2001:67c:2170::/48
2a0b:8800::/46
Signature Algorithm: sha256WithRSAEncryption
30:68:c3:59:d3:07:6e:8a:62:a2:f3:80:74:b3:2a:5e:b5:c7:
07:9f:da:d5:66:d4:2d:28:9f:f1:e1:5b:36:91:18:8f:9f:c6:
d6:59:29:ec:43:96:d9:bc:00:53:12:50:11:73:a3:c9:4b:e9:
20:63:1c:8c:79:da:b2:a4:ef:75:d1:46:db:20:50:e0:08:1e:
fc:24:4a:44:d4:c2:5c:43:6b:92:81:8d:3d:9e:d8:2f:4b:59:
b0:9b:55:af:15:81:25:73:d3:36:d8:d2:02:43:fc:1d:7d:24:
ed:65:88:1d:02:7a:fa:dc:f2:28:f7:09:b5:9d:f5:13:1c:0a:
86:45:31:05:f0:a4:8f:56:eb:21:ab:17:6f:4a:b7:32:50:47:
af:04:1c:5e:30:b1:8e:a0:53:a9:5a:cf:d0:60:6d:ed:e0:bd:
12:35:8e:79:9c:bc:52:14:03:a7:f4:81:6a:27:75:a8:9b:95:
57:47:34:46:76:a7:94:11:eb:19:76:78:17:58:bb:4e:ae:01:
f8:a3:51:62:c1:ff:84:47:f8:79:20:50:e1:99:3a:88:3f:9f:
8d:cc:29:2e:1b:76:88:69:d5:12:23:3d:27:58:cd:d1:75:14:
c6:e5:36:46:20:7e:bf:6c:70:d8:8b:b8:a6:e5:b4:a7:db:2a:
72:3f:0c:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 09:47:27 2025 by rpki-client