Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/KADaT5jnl7ok8phSTOcZmIq-OyA.roa
File: KADaT5jnl7ok8phSTOcZmIq-OyA.roa (raw, json)
Hash identifier: mkY+YBYLJ3NBNKtItDTO71ZsAWjobLFl0Dmeg2jWuN0=
Subject key identifier: 28:00:DA:4F:98:E7:97:BA:24:F2:98:52:4C:E7:19:98:8A:BE:3B:20
Certificate issuer: /CN=8cdcf26f74860588cac6bae17f99de22dbc49ae6
Certificate serial: 0191313026041B2A486988995F9818992C49
Authority key identifier: 8C:DC:F2:6F:74:86:05:88:CA:C6:BA:E1:7F:99:DE:22:DB:C4:9A:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNzyb3SGBYjKxrrhf5neItvEmuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/KADaT5jnl7ok8phSTOcZmIq-OyA.roa
Signing time: Thu 08 Aug 2024 08:52:04 +0000
ROA not before: Thu 08 Aug 2024 08:52:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41114
IP address blocks: 31.11.40.0/21 maxlen: 24
45.151.16.0/22 maxlen: 22
45.157.248.0/22 maxlen: 22
62.192.140.0/22 maxlen: 22
77.83.228.0/22 maxlen: 22
109.106.24.0/22 maxlen: 22
147.78.164.0/22 maxlen: 22
153.92.104.0/21 maxlen: 21
185.42.112.0/22 maxlen: 22
185.98.64.0/22 maxlen: 22
193.148.80.0/22 maxlen: 22
213.226.72.0/22 maxlen: 22
2a00:7aa0::/32 maxlen: 32
2a01:60e0::/32 maxlen: 32
2a09:26c0::/32 maxlen: 32
2a09:4380::/32 maxlen: 32
2a0a:7980::/32 maxlen: 32
2a0d:e6c0::/32 maxlen: 48
2a0f:d00::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/jNzyb3SGBYjKxrrhf5neItvEmuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/jNzyb3SGBYjKxrrhf5neItvEmuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jNzyb3SGBYjKxrrhf5neItvEmuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:31:30:26:04:1b:2a:48:69:88:99:5f:98:18:99:2c:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cdcf26f74860588cac6bae17f99de22dbc49ae6
Validity
Not Before: Aug 8 08:52:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2800da4f98e797ba24f298524ce719988abe3b20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:8a:e9:48:54:f2:ca:37:5b:d2:e4:0d:7a:8a:
db:c5:52:69:1a:cc:e6:a1:a3:23:27:1b:15:77:5d:
26:64:a4:0a:a9:97:90:08:0a:a1:3d:77:11:6e:68:
c1:a0:1b:97:b1:70:94:ba:45:71:df:18:08:16:df:
d3:c3:22:f2:87:13:d1:cb:f6:6b:7f:d8:bb:64:3f:
b2:36:59:f3:1b:52:06:b2:c2:e6:a7:49:13:b9:bc:
ae:f8:94:17:b4:08:86:c9:99:98:5e:83:26:48:8f:
fb:6c:f5:a6:79:97:cf:65:15:3f:2b:0b:ca:3d:93:
c3:d4:0f:04:65:ff:a1:24:63:ed:60:d2:fa:ff:be:
75:93:2a:11:cf:83:76:3d:5c:04:ba:1a:5d:9c:05:
73:14:34:bf:fc:ec:2d:1c:1f:b4:74:3c:ee:4c:59:
de:f4:69:9a:35:a5:c8:8d:dd:c5:2e:00:15:95:76:
aa:2a:fb:3c:e5:68:d0:8c:fd:2e:5b:14:94:eb:87:
67:29:8c:52:5d:6c:f1:ef:db:e9:60:5e:d4:61:dc:
22:d1:60:40:13:b8:8d:72:ec:e3:73:1a:28:20:54:
26:41:9e:ec:ca:08:4d:63:cc:41:54:c4:ea:f3:d7:
be:20:bc:4f:33:5f:bb:65:55:4d:1e:e3:8d:ff:71:
49:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:00:DA:4F:98:E7:97:BA:24:F2:98:52:4C:E7:19:98:8A:BE:3B:20
X509v3 Authority Key Identifier:
keyid:8C:DC:F2:6F:74:86:05:88:CA:C6:BA:E1:7F:99:DE:22:DB:C4:9A:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNzyb3SGBYjKxrrhf5neItvEmuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/KADaT5jnl7ok8phSTOcZmIq-OyA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/jNzyb3SGBYjKxrrhf5neItvEmuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.11.40.0/21
45.151.16.0/22
45.157.248.0/22
62.192.140.0/22
77.83.228.0/22
109.106.24.0/22
147.78.164.0/22
153.92.104.0/21
185.42.112.0/22
185.98.64.0/22
193.148.80.0/22
213.226.72.0/22
IPv6:
2a00:7aa0::/32
2a01:60e0::/32
2a09:26c0::/32
2a09:4380::/32
2a0a:7980::/32
2a0d:e6c0::/32
2a0f:d00::/32
Signature Algorithm: sha256WithRSAEncryption
0f:c9:4b:25:ff:e5:57:c6:4c:3a:f7:9a:e7:2b:1b:70:33:9b:
5f:16:2a:83:83:8b:f3:93:31:ea:af:96:fb:85:b4:6d:87:84:
d8:36:c8:fe:94:76:d7:aa:fc:d5:5c:b1:81:19:2d:55:94:9a:
80:d6:5e:b4:21:c3:d0:43:d1:7e:8e:2c:27:93:ac:e2:62:47:
87:83:1b:f6:02:69:68:0d:87:2e:6f:de:ce:ce:23:ad:88:82:
fe:24:31:28:ab:43:b2:db:2f:62:53:f2:dd:22:59:7b:d9:1b:
90:32:f2:7c:08:7c:65:a7:b3:d6:2d:10:09:1d:91:00:64:58:
9e:00:b0:80:01:82:cf:5e:be:c1:d9:0f:26:74:e4:7d:f7:f9:
70:d2:f4:36:7d:59:9f:eb:4d:ee:65:f3:b7:f6:72:22:2b:23:
c2:6a:57:da:b6:fd:b8:09:d3:f9:a9:a0:9d:ee:90:51:a2:6e:
c1:7d:82:e9:22:bb:18:0f:2f:b2:01:cd:b7:92:b1:dd:24:dc:
1a:43:ae:8f:26:8c:b5:1d:d5:0f:fd:ea:71:20:3f:d7:92:05:
2e:0e:e1:01:3f:4c:c4:91:0b:d4:3f:31:b6:42:4d:65:e1:e3:
63:13:b2:52:5a:d4:0d:22:80:af:c4:5d:26:68:0e:92:18:e5:
c6:1d:ae:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:33:56 2024 by rpki-client on console-ams.rpki-client.org