Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/1-8MtB_IsJbZaPtuZSP3EN_Pe-f8.roa
File: 1-8MtB_IsJbZaPtuZSP3EN_Pe-f8.roa (raw, json)
Hash identifier: wJs4k78bf3DlE4Pmmrn94estyvnaNRYAwjdWEm2Qqno=
Subject key identifier: FB:C3:2D:07:F2:2C:25:B6:5A:3E:DB:99:48:FD:C4:37:F3:DE:F9:FF
Certificate issuer: /CN=962ae3463938b26f83b76f0c4df81dfabb15a4eb
Certificate serial: 01905993397ECD351D5C8DF2C4DA0227A774
Authority key identifier: 96:2A:E3:46:39:38:B2:6F:83:B7:6F:0C:4D:F8:1D:FA:BB:15:A4:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lirjRjk4sm-Dt28MTfgd-rsVpOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/1-8MtB_IsJbZaPtuZSP3EN_Pe-f8.roa
Signing time: Thu 27 Jun 2024 12:02:19 +0000
ROA not before: Thu 27 Jun 2024 12:02:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 40975
IP address blocks: 86.104.254.0/23 maxlen: 23
86.107.192.0/24 maxlen: 24
89.35.6.0/23 maxlen: 23
185.84.64.0/23 maxlen: 23
185.84.66.0/24 maxlen: 24
217.19.14.0/23 maxlen: 23
2a03:6fe0::/32 maxlen: 32
2a03:6fe0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/lirjRjk4sm-Dt28MTfgd-rsVpOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/lirjRjk4sm-Dt28MTfgd-rsVpOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/lirjRjk4sm-Dt28MTfgd-rsVpOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:59:93:39:7e:cd:35:1d:5c:8d:f2:c4:da:02:27:a7:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=962ae3463938b26f83b76f0c4df81dfabb15a4eb
Validity
Not Before: Jun 27 12:02:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fbc32d07f22c25b65a3edb9948fdc437f3def9ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:39:42:33:bd:7a:36:c4:e3:fb:29:17:39:a1:
c8:a4:cf:1f:1b:d4:89:53:b2:8a:cf:60:34:76:59:
96:f6:e6:e1:37:2c:94:6d:e0:49:1c:70:2c:75:8e:
54:98:00:97:6c:07:9c:a2:46:62:2a:6f:53:af:6f:
90:52:23:c1:41:89:af:38:8f:52:61:0c:84:17:3b:
02:c1:e3:37:ed:ac:13:b4:af:ab:a8:e5:c6:e3:5e:
37:04:3e:17:27:2d:f0:f5:17:19:66:99:48:29:b5:
79:8b:52:16:cb:15:bf:17:5c:38:b5:a8:4c:e5:1d:
cf:44:6c:04:db:dd:3e:6b:c3:a1:9b:88:b8:27:1b:
1f:f2:7c:78:cc:e3:91:26:bb:37:c9:2f:f6:66:f8:
29:aa:5a:19:2d:46:71:2f:80:c1:0e:4f:30:12:12:
45:9b:99:dc:9a:46:b8:18:59:d6:52:67:9a:b0:a5:
f2:3f:ce:bc:ed:2d:9b:17:84:f8:ff:bc:79:0e:87:
da:23:40:dd:c9:98:96:f3:f2:55:67:61:be:d6:a6:
af:c2:0e:06:d2:83:15:c0:b8:94:e7:25:ed:5d:b2:
91:d7:80:55:9b:d3:91:76:14:b0:a9:7f:f4:a3:4d:
a7:53:45:d2:74:6f:5b:03:1e:a8:39:ca:99:69:ec:
1f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:C3:2D:07:F2:2C:25:B6:5A:3E:DB:99:48:FD:C4:37:F3:DE:F9:FF
X509v3 Authority Key Identifier:
keyid:96:2A:E3:46:39:38:B2:6F:83:B7:6F:0C:4D:F8:1D:FA:BB:15:A4:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lirjRjk4sm-Dt28MTfgd-rsVpOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/1-8MtB_IsJbZaPtuZSP3EN_Pe-f8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/lirjRjk4sm-Dt28MTfgd-rsVpOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.104.254.0/23
86.107.192.0/24
89.35.6.0/23
185.84.64.0-185.84.66.255
217.19.14.0/23
IPv6:
2a03:6fe0::/32
Signature Algorithm: sha256WithRSAEncryption
6d:da:b1:70:9e:71:04:8e:81:4c:b6:01:8f:6e:f1:eb:3a:a3:
ea:41:33:0f:f1:c4:58:39:80:fe:4e:e2:a0:41:6b:c1:04:e6:
7e:42:f9:5d:d1:4e:4f:eb:69:24:e5:d7:48:b5:4c:cd:7f:1e:
71:15:8c:31:f3:d3:9b:6c:3a:33:55:7b:4f:ef:d8:cf:85:a1:
b7:b2:55:20:63:93:9c:25:dd:92:3f:da:ab:53:11:71:f7:96:
ee:e2:aa:89:64:cf:53:21:75:e9:bf:7d:65:17:b6:eb:a0:d7:
6a:61:d1:ac:bd:30:fb:74:92:8b:fb:18:a8:0f:ea:03:29:37:
cf:fa:b0:e8:cb:0e:a5:bd:44:9f:8c:c0:30:ee:95:9f:d4:ac:
01:4c:f4:2f:12:4d:9b:13:ec:a7:2c:53:ce:ec:62:e6:5f:d1:
5f:98:73:32:cb:c8:dd:a5:76:0e:4a:17:03:ee:a2:8b:28:c5:
4d:4d:eb:6e:41:0b:e1:b1:d1:cb:0b:db:a1:6a:ea:0a:60:c6:
c3:45:66:d2:2d:f0:90:49:18:c3:41:ec:b9:d6:ca:b7:98:49:
bd:fa:69:ef:56:7b:b5:dc:d0:bd:12:ec:b7:6f:3f:b4:ae:33:
b7:c1:f9:a0:03:9f:ef:c5:61:30:4a:17:63:02:c0:3b:f9:0b:
7d:ec:f3:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:03:54 2024 by rpki-client on console-fra.rpki-client.org