Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/9t9wJmxbY0LfK4d4u2AmgjhwIM8.roa
File: 9t9wJmxbY0LfK4d4u2AmgjhwIM8.roa (raw, json)
Hash identifier: 2lUq2O1f9KFXqrVNos35bbHBpT+US2YY90kWuKRMyVw=
Subject key identifier: F6:DF:70:26:6C:5B:63:42:DF:2B:87:78:BB:60:26:82:38:70:20:CF
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019150137C34B89A4BD235D8FD11FB74229B
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/9t9wJmxbY0LfK4d4u2AmgjhwIM8.roa
Signing time: Wed 14 Aug 2024 08:48:59 +0000
ROA not before: Wed 14 Aug 2024 08:48:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57634
IP address blocks: 31.13.192.0/24 maxlen: 24
31.13.199.0/24 maxlen: 24
31.13.209.0/24 maxlen: 24
85.217.168.0/23 maxlen: 23
87.120.67.0/24 maxlen: 24
87.120.156.0/23 maxlen: 23
87.121.32.0/24 maxlen: 24
93.123.9.0/24 maxlen: 24
94.156.0.0/23 maxlen: 23
94.156.7.0/24 maxlen: 24
94.156.76.0/24 maxlen: 24
94.156.170.0/24 maxlen: 24
94.156.171.0/24 maxlen: 24
212.73.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:50:13:7c:34:b8:9a:4b:d2:35:d8:fd:11:fb:74:22:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Aug 14 08:48:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f6df70266c5b6342df2b8778bb602682387020cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:09:19:1b:91:3c:fe:ef:0f:93:90:6c:ff:d5:
d8:71:68:a9:bb:d0:2e:28:c9:08:12:ef:8e:ab:2e:
22:cb:33:21:49:d7:57:76:88:77:75:5f:07:1a:12:
79:02:67:a2:ae:37:b0:3b:75:e6:95:d4:27:09:ba:
c6:5f:97:61:70:1b:75:b8:10:61:a7:9d:de:54:46:
3a:70:55:f0:26:1e:a3:ae:aa:10:66:09:3a:4d:63:
da:f5:37:53:41:52:12:e3:ca:37:17:bf:1e:ec:5e:
68:20:a1:81:8f:6f:66:c8:8c:b5:a6:1a:61:a4:fb:
5e:7e:03:a5:81:6b:1f:4d:9c:ee:cd:a1:82:43:b3:
3f:7d:4a:58:f6:7d:98:b6:6a:9f:fe:2f:43:af:2a:
10:33:86:d3:2d:9d:4e:c4:71:a1:86:8a:cf:0c:09:
14:67:2c:2f:0c:65:e8:97:75:84:33:3e:3c:45:5a:
99:d1:69:6a:36:96:c9:8d:e1:c9:56:82:c7:61:9a:
73:b6:81:a4:06:c2:31:e9:60:a4:75:c8:72:d1:e8:
7b:09:d3:8e:fe:7f:5c:19:69:4f:56:36:56:2f:3f:
d2:ef:80:e4:23:70:10:66:14:eb:c0:28:00:c7:01:
bc:5f:2e:f3:71:c2:06:89:8f:f4:ef:24:1c:44:ff:
6a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:DF:70:26:6C:5B:63:42:DF:2B:87:78:BB:60:26:82:38:70:20:CF
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/9t9wJmxbY0LfK4d4u2AmgjhwIM8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.13.192.0/24
31.13.199.0/24
31.13.209.0/24
85.217.168.0/23
87.120.67.0/24
87.120.156.0/23
87.121.32.0/24
93.123.9.0/24
94.156.0.0/23
94.156.7.0/24
94.156.76.0/24
94.156.170.0/23
212.73.151.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:7f:f6:10:de:90:fb:0e:40:80:ae:81:8e:43:7c:97:e5:c2:
0c:b1:23:23:ab:39:c9:6f:05:98:a8:8d:1b:55:85:7e:e6:95:
6a:b8:6e:a5:40:0a:27:e5:4b:e2:f1:b2:a9:19:19:9f:5d:78:
b6:ef:68:17:89:ca:14:82:48:72:b1:06:bc:17:00:5c:da:eb:
74:22:f8:ca:b2:d7:7a:91:0e:99:53:2e:b5:01:c9:0f:f7:b9:
09:19:ff:55:5e:80:19:05:2d:c8:34:2b:c7:19:36:0c:59:77:
5b:e8:57:da:2e:00:60:de:52:f1:33:15:9f:d5:4e:bd:bd:7d:
5d:9a:34:30:ea:a4:1f:35:0a:9d:bf:a8:f3:8c:21:f2:91:47:
2e:79:e4:3c:e2:b8:35:ca:2b:41:58:45:aa:4b:9b:85:4f:b9:
ec:2c:dd:f1:96:1d:3a:f5:98:8a:04:bf:61:a5:94:27:9e:5a:
1e:e7:15:24:b2:0d:a1:ab:49:36:cd:6b:46:dc:61:0b:50:3c:
be:a1:a8:16:15:f1:b6:73:b2:ff:99:a4:fc:4b:7e:8e:b5:73:
a0:24:e7:04:a2:ae:53:a4:94:14:19:ac:5c:bc:a4:25:37:db:
27:71:13:f3:70:f8:f8:a7:8b:15:6a:14:89:71:30:87:20:b6:
cd:c5:44:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:15:15 2024 by rpki-client on console-ams.rpki-client.org