Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/617778-9f31-475b-84fa-74c979a6536e/1/OmEy79Y0i7zJlH1eawleJZpBMJU.roa
File: OmEy79Y0i7zJlH1eawleJZpBMJU.roa (raw, json)
Hash identifier: 5Ez4L/le0xnpHNYvekZy8BbeVJoa1mmQ4fFJEiv29bQ=
Subject key identifier: 3A:61:32:EF:D6:34:8B:BC:C9:94:7D:5E:6B:09:5E:25:9A:41:30:95
Certificate issuer: /CN=68cc325c8ad9769a1b54da296305fe0c36573775
Certificate serial: 018E582A84073ACC8C28B2CE725B63124BDF
Authority key identifier: 68:CC:32:5C:8A:D9:76:9A:1B:54:DA:29:63:05:FE:0C:36:57:37:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMwyXIrZdpobVNopYwX-DDZXN3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/617778-9f31-475b-84fa-74c979a6536e/1/OmEy79Y0i7zJlH1eawleJZpBMJU.roa
Signing time: Tue 19 Mar 2024 19:22:45 +0000
ROA not before: Tue 19 Mar 2024 19:22:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31034
IP address blocks: 80.88.80.0/20 maxlen: 24
85.235.128.0/19 maxlen: 24
93.186.240.0/21 maxlen: 24
93.186.248.0/21 maxlen: 24
193.254.240.0/23 maxlen: 24
195.128.234.0/23 maxlen: 24
195.225.168.0/22 maxlen: 24
195.234.171.0/24 maxlen: 24
195.250.34.0/24 maxlen: 24
212.237.0.0/18 maxlen: 24
217.61.120.0/21 maxlen: 24
217.73.224.0/20 maxlen: 24
2a01:5940::/36 maxlen: 48
2a01:5940:1000::/36 maxlen: 48
2a02:fd40::/32 maxlen: 48
2a02:fd41::/32 maxlen: 48
2a03:cdc0::/36 maxlen: 48
2a03:cdc0:1000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/617778-9f31-475b-84fa-74c979a6536e/1/aMwyXIrZdpobVNopYwX-DDZXN3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/617778-9f31-475b-84fa-74c979a6536e/1/aMwyXIrZdpobVNopYwX-DDZXN3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/aMwyXIrZdpobVNopYwX-DDZXN3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:58:2a:84:07:3a:cc:8c:28:b2:ce:72:5b:63:12:4b:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68cc325c8ad9769a1b54da296305fe0c36573775
Validity
Not Before: Mar 19 19:22:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3a6132efd6348bbcc9947d5e6b095e259a413095
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:df:5e:e5:b3:fe:57:3d:49:9e:04:db:b3:ef:
38:3f:f2:df:d9:af:8f:7c:7b:67:5a:7e:87:61:05:
8c:a9:53:0d:e5:cc:72:5d:c4:28:34:e0:d0:a7:ee:
5b:0a:a1:d2:f8:60:36:81:00:72:7b:3e:e5:c6:99:
fa:fc:97:79:89:cc:aa:f8:79:3e:b6:c2:1c:67:a2:
a1:b3:cf:75:8e:4c:59:2b:c8:a7:a7:6d:bf:49:39:
23:78:d5:ef:73:0d:13:87:fa:af:40:8d:b5:4f:f9:
21:1b:43:70:27:46:de:6e:26:e0:5c:5a:0f:2f:76:
d5:1b:0f:59:d8:3d:5b:ea:1f:54:58:59:18:72:d7:
18:2a:bb:41:2c:6d:28:2e:21:33:f7:5b:3d:7d:db:
b6:6e:c3:69:65:1b:83:e3:b3:df:8a:22:5c:fb:3e:
ea:50:9b:8a:75:68:28:d6:53:36:21:60:86:cb:f9:
8c:9d:04:6c:b9:ee:b9:2d:d6:d9:b3:a5:6d:95:dd:
35:8e:b7:a0:c1:50:44:6c:1c:2f:b7:e9:f5:c4:ad:
68:11:33:fc:a6:ce:6f:51:25:3b:64:d1:21:42:8b:
4a:57:24:b2:43:5c:dc:fb:15:90:e9:ab:3d:8e:e4:
c8:43:78:6b:11:cd:23:47:1c:4d:0e:e2:49:fb:cd:
d3:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:61:32:EF:D6:34:8B:BC:C9:94:7D:5E:6B:09:5E:25:9A:41:30:95
X509v3 Authority Key Identifier:
keyid:68:CC:32:5C:8A:D9:76:9A:1B:54:DA:29:63:05:FE:0C:36:57:37:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMwyXIrZdpobVNopYwX-DDZXN3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/617778-9f31-475b-84fa-74c979a6536e/1/OmEy79Y0i7zJlH1eawleJZpBMJU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/617778-9f31-475b-84fa-74c979a6536e/1/aMwyXIrZdpobVNopYwX-DDZXN3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.88.80.0/20
85.235.128.0/19
93.186.240.0/20
193.254.240.0/23
195.128.234.0/23
195.225.168.0/22
195.234.171.0/24
195.250.34.0/24
212.237.0.0/18
217.61.120.0/21
217.73.224.0/20
IPv6:
2a01:5940::/35
2a02:fd40::/31
2a03:cdc0::/35
Signature Algorithm: sha256WithRSAEncryption
94:bd:ad:02:d2:18:1a:f0:ec:4d:a4:b6:7f:67:ba:09:c6:f0:
a9:7f:78:83:f5:bf:97:d2:d8:89:c4:6a:e0:dd:3a:73:de:ca:
80:be:1a:f6:8d:fd:fa:89:3f:65:29:3d:16:ac:da:d9:3d:16:
3c:c4:b1:0a:65:98:56:94:0d:89:cf:4d:dd:1f:5d:86:a0:df:
98:ee:7c:1b:d8:1b:44:65:c3:b1:84:9b:42:3f:1c:84:c0:21:
d7:35:ea:7a:b9:32:99:5d:fa:6a:02:34:f7:22:3b:27:c8:5a:
20:3a:63:f8:d9:61:00:65:89:39:09:64:34:6c:74:1b:93:fd:
24:f3:55:c7:32:31:92:a8:ad:45:0a:57:c8:66:4b:7d:f5:cb:
11:0a:1a:03:e6:e2:74:5b:00:99:02:88:03:bf:18:5a:83:68:
04:3f:7c:34:ea:85:05:4e:a9:12:9d:3e:c5:c7:34:48:b1:d4:
78:18:53:86:e0:42:db:66:43:f6:d7:93:6c:a4:8f:c0:0b:cf:
4a:95:33:d7:99:ed:6f:ac:49:81:22:42:93:bc:65:06:19:71:
72:ea:3a:8c:c5:e1:c0:95:9e:08:b7:c7:6b:1f:dc:0c:61:73:
36:da:b9:fa:b1:8e:53:69:76:85:39:4d:92:0f:ae:af:f2:6c:
ce:e6:37:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 22:48:35 2024 by rpki-client on console-fra.rpki-client.org