Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/361c57-ea42-47e2-a68f-ec967b511d7f/1/aYHNYlRBIOdg14UribFBq7vPmzE.roa
File: aYHNYlRBIOdg14UribFBq7vPmzE.roa (raw, json)
Hash identifier: YKxowAQ1A3UaAYmJ6nkIJieUMg1EEoi8NUxQZjnV5UM=
Subject key identifier: 69:81:CD:62:54:41:20:E7:60:D7:85:2B:89:B1:41:AB:BB:CF:9B:31
Certificate issuer: /CN=f8fbc8415821486e8fe0860b5bec3e9283b80385
Certificate serial: 018CC86F62336269FC57D58CF61CBDB30A8B
Authority key identifier: F8:FB:C8:41:58:21:48:6E:8F:E0:86:0B:5B:EC:3E:92:83:B8:03:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-PvIQVghSG6P4IYLW-w-koO4A4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/361c57-ea42-47e2-a68f-ec967b511d7f/1/aYHNYlRBIOdg14UribFBq7vPmzE.roa
Signing time: Tue 02 Jan 2024 04:29:51 +0000
ROA not before: Tue 02 Jan 2024 04:29:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31169
IP address blocks: 79.170.80.0/21 maxlen: 21
193.247.202.0/24 maxlen: 24
89.34.22.0/23 maxlen: 23
194.104.112.0/24 maxlen: 24
45.134.208.0/22 maxlen: 22
194.104.126.0/24 maxlen: 24
217.17.208.0/20 maxlen: 20
193.247.183.0/24 maxlen: 24
193.247.181.0/24 maxlen: 24
89.45.165.0/24 maxlen: 24
193.247.192.0/24 maxlen: 24
92.114.96.0/23 maxlen: 23
185.28.128.0/22 maxlen: 22
194.104.97.0/24 maxlen: 24
194.104.98.0/24 maxlen: 24
84.247.63.0/24 maxlen: 24
91.126.0.0/20 maxlen: 20
195.88.32.0/23 maxlen: 23
2a04:2740::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/361c57-ea42-47e2-a68f-ec967b511d7f/1/1-PvIQVghSG6P4IYLW-w-koO4A4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/361c57-ea42-47e2-a68f-ec967b511d7f/1/1-PvIQVghSG6P4IYLW-w-koO4A4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-PvIQVghSG6P4IYLW-w-koO4A4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:62:33:62:69:fc:57:d5:8c:f6:1c:bd:b3:0a:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8fbc8415821486e8fe0860b5bec3e9283b80385
Validity
Not Before: Jan 2 04:29:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6981cd62544120e760d7852b89b141abbbcf9b31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ff:6a:10:06:21:19:64:e5:ec:9a:85:87:87:
0b:14:a6:56:8d:ae:fc:43:3a:8f:d0:55:89:ae:9c:
16:1d:cc:58:62:29:72:fa:74:d9:4f:00:0b:56:9e:
83:4d:6c:53:a8:55:52:89:cf:b7:05:75:18:13:01:
de:3a:b6:4c:46:f5:e3:a1:9e:ba:c0:3b:39:27:52:
ad:2f:2d:32:98:4c:fc:c3:05:b9:89:e4:66:d4:d9:
45:3e:72:ef:6a:b7:43:74:79:9a:d5:d7:3f:8a:00:
85:07:d3:0d:2b:98:31:3b:4d:9a:72:0c:1c:90:c2:
82:2d:52:c6:b6:5a:b7:91:94:3b:ff:c2:18:4f:e7:
7a:61:78:82:69:da:71:20:81:44:9a:d4:ca:f4:8b:
22:9e:2d:6f:92:28:cc:2f:ec:ec:51:cd:2b:6c:97:
f3:e3:0f:e0:33:aa:89:74:db:07:04:98:7a:d2:17:
72:aa:8a:67:f1:de:e2:b7:5f:19:de:58:b6:20:76:
d0:cb:15:84:74:44:95:53:9e:39:4f:a8:86:b0:4f:
dd:37:43:d5:b7:01:23:f1:2b:bf:9d:d1:ae:63:29:
8f:5b:9d:a0:79:ea:7b:80:58:74:c8:ab:40:bc:d4:
28:cd:73:c5:d0:af:38:89:cc:15:16:ef:89:ab:07:
e9:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:81:CD:62:54:41:20:E7:60:D7:85:2B:89:B1:41:AB:BB:CF:9B:31
X509v3 Authority Key Identifier:
keyid:F8:FB:C8:41:58:21:48:6E:8F:E0:86:0B:5B:EC:3E:92:83:B8:03:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-PvIQVghSG6P4IYLW-w-koO4A4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/361c57-ea42-47e2-a68f-ec967b511d7f/1/aYHNYlRBIOdg14UribFBq7vPmzE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/361c57-ea42-47e2-a68f-ec967b511d7f/1/1-PvIQVghSG6P4IYLW-w-koO4A4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.208.0/22
79.170.80.0/21
84.247.63.0/24
89.34.22.0/23
89.45.165.0/24
91.126.0.0/20
92.114.96.0/23
185.28.128.0/22
193.247.181.0/24
193.247.183.0/24
193.247.192.0/24
193.247.202.0/24
194.104.97.0-194.104.98.255
194.104.112.0/24
194.104.126.0/24
195.88.32.0/23
217.17.208.0/20
IPv6:
2a04:2740::/29
Signature Algorithm: sha256WithRSAEncryption
66:3b:e4:64:d1:0d:a4:0e:83:13:af:fe:8a:f2:52:f3:f7:96:
62:d9:55:3a:f1:83:c4:d2:31:99:d0:5b:d1:7a:39:43:66:e2:
d4:11:0a:d9:8b:0c:81:ff:eb:67:85:2a:7e:31:c7:44:f4:30:
69:94:27:79:cb:a8:b3:7a:72:f5:ee:45:15:20:6f:80:0a:63:
c6:83:b6:a1:5f:11:32:23:66:2a:41:52:f0:c8:3c:60:c3:78:
ac:2b:1e:a2:0e:30:6d:97:21:96:90:56:2a:6c:03:e3:2c:5f:
02:62:a1:15:ff:d8:06:c3:77:b6:57:37:f3:ec:42:c1:f8:aa:
14:1c:06:18:03:f6:45:5e:35:9a:a0:31:9a:f1:d3:f5:6e:b4:
67:ba:31:ec:db:86:d9:46:8f:95:3b:40:52:86:6a:ce:ae:50:
aa:df:37:c3:b7:83:67:96:e0:c3:41:d3:d0:db:d7:7b:20:4c:
22:ea:f2:26:99:d7:cf:e9:4b:10:cb:d2:40:fe:4c:b5:32:34:
f5:77:20:44:ae:09:b0:9e:9b:c6:74:14:77:61:cb:39:ad:d4:
40:9c:44:2f:1c:05:3f:33:99:67:97:fc:03:8c:28:93:43:a3:
db:99:6c:fc:ad:05:db:18:26:35:f9:f6:a1:85:99:64:e6:12:
80:87:76:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 17:26:06 2024 by rpki-client on console-fra.rpki-client.org