Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/V8L9vrdknQFqFQqbor36S9di1so.roa
File: V8L9vrdknQFqFQqbor36S9di1so.roa (raw, json)
Hash identifier: UVsVoz2c7YvSnmSmu+Zxrrt/HdvjyJVt5hFb6reMbTg=
Subject key identifier: 57:C2:FD:BE:B7:64:9D:01:6A:15:0A:9B:A2:BD:FA:4B:D7:62:D6:CA
Certificate issuer: /CN=0b1e72f3d0957f5a6e3bd1b844a12a6147449027
Certificate serial: 01927A3870748CA3C60BD2FA2E0C82BA02F8
Authority key identifier: 0B:1E:72:F3:D0:95:7F:5A:6E:3B:D1:B8:44:A1:2A:61:47:44:90:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cx5y89CVf1puO9G4RKEqYUdEkCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/V8L9vrdknQFqFQqbor36S9di1so.roa
Signing time: Fri 11 Oct 2024 06:16:12 +0000
ROA not before: Fri 11 Oct 2024 06:16:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29119
IP address blocks: 92.246.82.0/24 maxlen: 24
92.246.83.0/24 maxlen: 24
103.226.192.0/24 maxlen: 24
103.229.170.0/24 maxlen: 24
185.145.68.0/22 maxlen: 22
185.145.68.0/24 maxlen: 24
185.145.69.0/24 maxlen: 24
185.223.178.0/24 maxlen: 24
185.237.212.0/22 maxlen: 24
185.237.215.0/24 maxlen: 24
2a07:4640::/29 maxlen: 29
2a0d:c240::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cx5y89CVf1puO9G4RKEqYUdEkCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:7a:38:70:74:8c:a3:c6:0b:d2:fa:2e:0c:82:ba:02:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b1e72f3d0957f5a6e3bd1b844a12a6147449027
Validity
Not Before: Oct 11 06:16:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=57c2fdbeb7649d016a150a9ba2bdfa4bd762d6ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:25:e5:34:35:33:a1:f9:59:57:b9:a5:43:10:
22:07:a4:58:f1:b8:51:3b:10:84:51:db:ea:2a:28:
06:0c:55:4c:fa:90:9d:9c:14:21:1e:96:8f:f9:a2:
79:8d:7e:bf:4d:68:84:30:32:3a:57:8d:57:97:31:
6b:3b:eb:dd:ea:88:89:04:46:52:dc:ac:ac:4d:22:
fc:72:0e:16:c0:25:21:40:12:57:5a:14:da:01:0a:
97:48:a5:1f:b3:d1:7e:68:de:bc:7e:9e:0f:cc:cc:
62:6f:35:8a:95:93:e7:f2:8a:12:de:95:a1:25:74:
59:bc:53:e9:de:69:7d:a2:d5:07:1b:f3:3e:a0:54:
83:4c:f6:90:bc:85:e6:73:ff:cf:d8:22:79:97:37:
b5:9f:a8:83:37:8a:fc:7e:de:28:da:28:67:c5:32:
6d:6b:37:64:6d:8d:26:5d:b4:c3:32:1e:5b:88:5c:
f8:fc:7b:2c:ba:03:92:a8:c0:70:ef:96:f7:c4:19:
51:32:15:7f:9e:1c:04:82:c8:b0:84:89:eb:92:51:
6c:65:94:54:ba:56:d4:e0:7d:8a:f7:ec:e7:bc:b2:
d5:11:53:c3:3b:7e:9a:65:88:43:01:09:01:59:4e:
0c:ea:fa:2d:ee:3c:e3:75:e7:7b:52:1b:2f:7c:79:
58:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:C2:FD:BE:B7:64:9D:01:6A:15:0A:9B:A2:BD:FA:4B:D7:62:D6:CA
X509v3 Authority Key Identifier:
keyid:0B:1E:72:F3:D0:95:7F:5A:6E:3B:D1:B8:44:A1:2A:61:47:44:90:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cx5y89CVf1puO9G4RKEqYUdEkCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/V8L9vrdknQFqFQqbor36S9di1so.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.246.82.0/23
103.226.192.0/24
103.229.170.0/24
185.145.68.0/22
185.223.178.0/24
185.237.212.0/22
IPv6:
2a07:4640::/29
2a0d:c240::/29
Signature Algorithm: sha256WithRSAEncryption
7a:9d:ff:f9:33:d5:51:3f:00:15:81:4e:a5:d0:ea:0f:38:39:
8c:42:da:1a:26:ab:9c:6d:f8:42:34:5a:ca:79:14:be:b4:ce:
60:89:e5:10:39:7b:da:2e:f7:1a:62:e7:93:76:92:57:f2:a5:
5b:95:12:05:48:77:f0:09:1a:5d:88:fc:c4:e6:51:ae:10:eb:
ab:8e:a2:12:ca:d9:89:6e:f4:8e:47:32:3f:60:81:18:73:46:
72:4b:ff:12:6c:0f:87:56:37:f3:12:31:ac:55:3f:e7:b1:4e:
17:04:6f:b9:7c:a2:b0:9e:b5:3a:95:81:4a:91:86:06:53:c1:
ac:9d:4c:22:0c:95:ee:a2:d3:3c:dc:4a:a6:4f:3e:c5:98:2b:
86:fa:b6:aa:35:06:ba:b8:ae:46:64:11:de:7a:00:5a:1c:89:
8d:b0:89:72:49:8f:62:1b:dd:2f:a0:6c:2c:ea:bd:06:0f:7f:
1e:cb:9f:14:62:ac:3e:55:37:bd:64:ae:bb:dd:84:0e:cf:1e:
b6:f3:97:fa:4b:cf:0d:6a:b9:5e:30:f7:3b:a3:63:85:53:a1:
2c:7d:a5:40:de:4a:43:76:96:24:86:ca:64:9d:be:e3:19:5d:
c9:45:99:85:46:58:9b:e7:e2:60:ab:cd:b2:86:49:0d:f6:90:
2f:4e:d5:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:35:28 2024 by rpki-client on console-fra.rpki-client.org