Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/9DIXvyAwiwsSZ3j0a_vLuA14nLA.roa
File: 9DIXvyAwiwsSZ3j0a_vLuA14nLA.roa (raw, json)
Hash identifier: 8MTC4i3f0E+SIMjDC0rsFk9RHXuljGSKLZikxjsFBzw=
Subject key identifier: F4:32:17:BF:20:30:8B:0B:12:67:78:F4:6B:FB:CB:B8:0D:78:9C:B0
Certificate issuer: /CN=8e626c909eb4951154bcee8221e43951b4257624
Certificate serial: 019141945170774C259EF149B63A5BC4C01E
Authority key identifier: 8E:62:6C:90:9E:B4:95:11:54:BC:EE:82:21:E4:39:51:B4:25:76:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jmJskJ60lRFUvO6CIeQ5UbQldiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/9DIXvyAwiwsSZ3j0a_vLuA14nLA.roa
Signing time: Sun 11 Aug 2024 13:15:24 +0000
ROA not before: Sun 11 Aug 2024 13:15:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51088
IP address blocks: 5.10.192.0/24 maxlen: 24
31.41.255.0/24 maxlen: 24
31.134.200.0/21 maxlen: 21
46.244.0.0/19 maxlen: 19
46.244.96.0/19 maxlen: 19
62.3.55.0/24 maxlen: 24
146.19.97.0/24 maxlen: 24
178.249.152.0/21 maxlen: 21
185.51.52.0/23 maxlen: 23
185.205.52.0/22 maxlen: 22
212.24.126.0/24 maxlen: 24
2a02:1668::/32 maxlen: 32
2a02:166a::/32 maxlen: 32
2a02:166b::/32 maxlen: 32
2a05:2900::/29 maxlen: 29
2a06:2600::/29 maxlen: 32
2a06:2600::/32 maxlen: 32
2a06:2602::/32 maxlen: 32
2a0a:e80::/29 maxlen: 29
2a0b:1c0::/29 maxlen: 29
2a0f:ba00::/29 maxlen: 29
2a13:800::/29 maxlen: 29
2a13:2c00::/29 maxlen: 29
2a13:3400::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/jmJskJ60lRFUvO6CIeQ5UbQldiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:41:94:51:70:77:4c:25:9e:f1:49:b6:3a:5b:c4:c0:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e626c909eb4951154bcee8221e43951b4257624
Validity
Not Before: Aug 11 13:15:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f43217bf20308b0b126778f46bfbcbb80d789cb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d3:07:91:db:7b:d5:25:65:0a:79:ff:5e:00:
78:3b:5a:9e:cf:8b:01:7d:97:ca:30:71:d7:c9:5a:
00:4d:91:5b:01:a4:fb:fb:b7:bc:1a:38:41:c3:04:
e7:f6:47:fc:6e:74:a0:f2:5c:6d:bb:3d:68:83:65:
d7:3b:49:c5:2a:6e:44:c3:e4:6b:6b:4d:5e:3c:1d:
4a:33:ad:7d:e9:38:69:e3:f5:a8:d0:6f:cd:4d:39:
3c:7f:96:38:08:c8:90:80:0a:2b:ae:7e:93:46:96:
ba:cf:a9:f0:a6:42:e0:47:c2:69:c8:ac:52:8c:62:
c0:63:7c:c0:a0:3a:4e:86:d4:b0:c8:b6:37:7f:aa:
d5:cf:3f:5b:6f:eb:ee:97:72:0f:44:69:64:e6:d0:
87:27:ca:7d:c5:07:a4:83:2f:00:15:c7:82:76:13:
ba:d3:c3:ba:8a:05:87:3c:c4:c9:47:d6:21:97:76:
ec:7e:6f:db:89:54:7d:4b:a5:ae:4e:d6:e9:9f:99:
76:55:12:e2:83:00:63:96:0c:ef:9d:50:40:fd:4f:
2c:eb:9f:4b:a8:21:09:a2:f5:af:cb:64:d5:ad:9c:
70:cf:2d:ec:82:3d:03:ea:48:f7:de:25:17:31:d2:
58:69:ea:67:61:03:96:32:9e:83:e9:3b:48:f0:d0:
bf:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:32:17:BF:20:30:8B:0B:12:67:78:F4:6B:FB:CB:B8:0D:78:9C:B0
X509v3 Authority Key Identifier:
keyid:8E:62:6C:90:9E:B4:95:11:54:BC:EE:82:21:E4:39:51:B4:25:76:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmJskJ60lRFUvO6CIeQ5UbQldiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/9DIXvyAwiwsSZ3j0a_vLuA14nLA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.10.192.0/24
31.41.255.0/24
31.134.200.0/21
46.244.0.0/19
46.244.96.0/19
62.3.55.0/24
146.19.97.0/24
178.249.152.0/21
185.51.52.0/23
185.205.52.0/22
212.24.126.0/24
IPv6:
2a02:1668::/32
2a02:166a::/31
2a05:2900::/29
2a06:2600::/29
2a0a:e80::/29
2a0b:1c0::/29
2a0f:ba00::/29
2a13:800::/29
2a13:2c00::/29
2a13:3400::/29
Signature Algorithm: sha256WithRSAEncryption
63:db:8d:5f:87:de:c7:0f:3e:57:9d:44:44:d5:c3:8e:b1:f2:
8d:3a:37:93:8a:87:68:10:ac:ff:10:fc:ae:e9:07:64:ce:0b:
b6:d3:e3:7a:4c:d8:b5:1d:9e:af:fb:9b:ae:c6:45:0b:68:55:
81:bb:b2:d1:92:8d:e6:d5:fd:12:25:cc:a5:4c:2a:e0:27:53:
36:a5:39:8e:fc:09:41:45:de:4f:da:02:23:d0:c1:5f:cb:71:
8f:5e:b8:cc:84:b4:20:e6:89:54:cc:bb:ff:ab:54:e6:0c:48:
ad:26:58:5c:4f:0f:ac:c5:a9:18:bd:38:82:ff:d2:03:84:73:
17:20:0b:ac:34:30:b7:11:ad:1f:dd:2b:97:58:5f:a7:a5:f2:
7e:1d:c5:a8:8b:86:31:e4:25:e8:34:13:f3:04:28:3e:ac:7c:
74:06:e4:2c:73:21:eb:a5:03:5b:68:aa:de:a1:8b:c1:8f:6e:
17:06:cb:78:05:2f:a3:f5:c0:52:72:04:33:03:1e:aa:25:8e:
bf:8c:61:2d:a6:68:c0:48:44:89:a8:91:71:3f:a0:a8:32:7b:
dd:18:36:8b:8f:aa:82:51:0a:ee:1a:32:c4:4d:54:4f:9a:3b:
6f:b9:2f:fe:0f:c1:60:c3:0a:e6:04:c3:08:5d:48:ce:39:1b:
b4:b4:92:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:50:32 2024 by rpki-client on console-fra.rpki-client.org