Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/09af2b-64f7-4c1d-abd4-d07464b9b378/1/iGZRbHbXIyq48MaLIfXUvRl8dag.roa
File: iGZRbHbXIyq48MaLIfXUvRl8dag.roa (raw, json)
Hash identifier: hCC0SCZXXVWtvnQOUVvcvyQ0Kl0ZgeH7K8aU2gTrPIY=
Subject key identifier: 88:66:51:6C:76:D7:23:2A:B8:F0:C6:8B:21:F5:D4:BD:19:7C:75:A8
Certificate issuer: /CN=fc13f7fa237f89d011233bac7328c2219ba7d62c
Certificate serial: 018CC5013F5B02AFD1B4DC58F1FC564EB2BB
Authority key identifier: FC:13:F7:FA:23:7F:89:D0:11:23:3B:AC:73:28:C2:21:9B:A7:D6:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_BP3-iN_idARIzuscyjCIZun1iw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/09af2b-64f7-4c1d-abd4-d07464b9b378/1/iGZRbHbXIyq48MaLIfXUvRl8dag.roa
Signing time: Mon 01 Jan 2024 12:30:42 +0000
ROA not before: Mon 01 Jan 2024 12:30:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20546
IP address blocks: 5.61.80.0/21 maxlen: 24
195.135.128.0/18 maxlen: 24
195.94.64.0/19 maxlen: 24
62.40.0.0/19 maxlen: 24
80.87.160.0/20 maxlen: 24
195.227.0.0/16 maxlen: 24
185.32.32.0/22 maxlen: 24
195.82.64.0/19 maxlen: 24
212.237.160.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/09af2b-64f7-4c1d-abd4-d07464b9b378/1/_BP3-iN_idARIzuscyjCIZun1iw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/09af2b-64f7-4c1d-abd4-d07464b9b378/1/_BP3-iN_idARIzuscyjCIZun1iw.mft
rsync://rpki.ripe.net/repository/DEFAULT/_BP3-iN_idARIzuscyjCIZun1iw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 03:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:3f:5b:02:af:d1:b4:dc:58:f1:fc:56:4e:b2:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc13f7fa237f89d011233bac7328c2219ba7d62c
Validity
Not Before: Jan 1 12:30:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8866516c76d7232ab8f0c68b21f5d4bd197c75a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ec:4b:51:d0:1f:31:4c:61:19:39:97:a1:dd:
df:f3:a6:3c:01:8c:55:c5:56:04:c6:86:8f:23:3d:
6b:d1:a3:be:8a:02:44:29:de:c5:d1:34:32:ab:51:
a8:f0:d6:89:1b:9d:97:fe:ad:8e:2c:2d:c0:ce:72:
91:1f:f9:98:a7:97:8d:51:d4:c1:c0:aa:4b:70:87:
d8:d3:69:a7:73:d4:cd:9b:74:d7:c8:8e:68:de:a4:
6c:2b:3d:72:1f:e3:74:9b:90:6e:01:22:b4:6b:e1:
4e:e8:a0:11:e2:49:97:00:bf:34:75:c2:61:88:30:
3a:85:d1:08:96:e5:a3:2e:48:6f:ed:22:c4:d9:d8:
95:f3:7f:39:c3:27:4b:82:01:e3:03:bc:a7:2c:e7:
82:af:1a:fb:c2:c7:19:ad:9a:82:9d:e5:ed:ed:29:
09:86:00:77:83:9e:9e:ac:b9:13:f7:42:79:26:39:
cc:7e:43:03:2f:13:e5:d7:82:d0:fc:85:1b:f9:35:
92:b2:52:90:a0:f1:44:40:3d:b0:20:0b:a2:c6:f6:
58:a2:d8:ad:ce:03:1c:7f:d7:4e:c2:e7:e4:64:55:
3a:3f:bb:ff:02:db:38:63:23:c5:d3:79:ce:f2:21:
ad:0e:b2:4a:26:6d:e5:4b:2b:91:22:3b:af:a8:f6:
d1:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:66:51:6C:76:D7:23:2A:B8:F0:C6:8B:21:F5:D4:BD:19:7C:75:A8
X509v3 Authority Key Identifier:
keyid:FC:13:F7:FA:23:7F:89:D0:11:23:3B:AC:73:28:C2:21:9B:A7:D6:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_BP3-iN_idARIzuscyjCIZun1iw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/09af2b-64f7-4c1d-abd4-d07464b9b378/1/iGZRbHbXIyq48MaLIfXUvRl8dag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/09af2b-64f7-4c1d-abd4-d07464b9b378/1/_BP3-iN_idARIzuscyjCIZun1iw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.61.80.0/21
62.40.0.0/19
80.87.160.0/20
185.32.32.0/22
195.82.64.0/19
195.94.64.0/19
195.135.128.0/18
195.227.0.0/16
212.237.160.0/21
Signature Algorithm: sha256WithRSAEncryption
44:42:68:0a:5b:4b:a5:20:11:c8:36:16:48:19:e2:f7:de:2d:
97:ee:f0:0b:6c:12:8d:46:a4:fd:ba:e6:91:69:ee:15:ab:02:
f3:b2:9b:70:85:b9:f9:7f:85:da:49:c9:d6:fd:58:de:1d:7b:
63:05:b5:ba:b2:37:5d:08:9d:8c:51:c8:4c:00:79:32:d5:24:
db:b0:1b:96:69:14:2e:c0:d2:1a:df:16:fc:3a:60:45:a1:e4:
b5:22:1d:ca:dd:f7:fb:1e:e8:86:e0:c5:42:9d:99:0c:32:ed:
2f:72:94:42:30:f7:a5:1a:e2:c0:f8:5a:f6:42:61:31:fc:61:
0f:f3:59:5c:62:30:a7:35:ec:2f:a6:b9:c6:c2:4d:d5:9b:90:
57:bc:38:7a:c5:6b:8f:2a:18:e2:0a:30:6f:b4:63:e5:46:6b:
a3:27:7c:c9:d5:a2:c7:67:00:e7:26:cf:37:44:5c:24:55:30:
76:28:4a:56:8d:64:d0:38:3e:a7:6a:f0:1e:d7:37:81:6a:e8:
78:05:fe:34:bc:69:08:fa:4e:db:37:81:d0:34:3b:7b:05:01:
9f:e7:31:be:22:15:2e:5c:4d:f2:f3:06:e5:33:28:80:c3:4a:
0b:8d:46:6d:e3:a2:8d:7d:39:e4:0a:94:7c:ab:92:30:dd:43:
c8:fc:5e:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:52:04 2024 by rpki-client on console-fra.rpki-client.org