Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/c34150-5912-490c-b35b-f54fbf6917bc/1/haPnv0nDqp_2GeuILRcMQ3Nudk4.roa
File: haPnv0nDqp_2GeuILRcMQ3Nudk4.roa (raw, json)
Hash identifier: AEdtukaIkAdvCWWx1eOWXNg/A6l4XP3/hAPkcQjKWI0=
Subject key identifier: 85:A3:E7:BF:49:C3:AA:9F:F6:19:EB:88:2D:17:0C:43:73:6E:76:4E
Certificate issuer: /CN=1ecb9bd5ed96e69dda8fc2a1fe02147adae8f713
Certificate serial: 018FAAF9B4B6F4E3D51C72B9CEDD378ACC98
Authority key identifier: 1E:CB:9B:D5:ED:96:E6:9D:DA:8F:C2:A1:FE:02:14:7A:DA:E8:F7:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hsub1e2W5p3aj8Kh_gIUetro9xM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/c34150-5912-490c-b35b-f54fbf6917bc/1/haPnv0nDqp_2GeuILRcMQ3Nudk4.roa
Signing time: Fri 24 May 2024 14:20:42 +0000
ROA not before: Fri 24 May 2024 14:20:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 19229
IP address blocks: 77.95.80.0/21 maxlen: 21
77.95.80.0/23 maxlen: 23
77.95.82.0/23 maxlen: 23
77.95.84.0/23 maxlen: 23
77.95.86.0/23 maxlen: 23
176.32.232.0/21 maxlen: 24
176.32.232.0/24 maxlen: 24
176.32.233.0/24 maxlen: 24
176.32.234.0/24 maxlen: 24
176.32.235.0/24 maxlen: 24
176.32.236.0/24 maxlen: 24
176.32.237.0/24 maxlen: 24
176.32.238.0/24 maxlen: 24
176.32.239.0/24 maxlen: 24
185.148.132.0/22 maxlen: 22
185.148.132.0/23 maxlen: 23
185.148.134.0/23 maxlen: 23
217.64.224.0/20 maxlen: 20
217.64.224.0/23 maxlen: 23
217.64.226.0/23 maxlen: 23
217.64.228.0/23 maxlen: 23
217.64.230.0/23 maxlen: 23
217.64.232.0/23 maxlen: 23
217.64.234.0/23 maxlen: 23
217.64.236.0/23 maxlen: 23
217.64.238.0/23 maxlen: 23
217.147.64.0/20 maxlen: 20
217.147.64.0/23 maxlen: 23
217.147.66.0/23 maxlen: 23
217.147.68.0/23 maxlen: 23
217.147.70.0/23 maxlen: 23
217.147.72.0/23 maxlen: 23
217.147.74.0/23 maxlen: 23
217.147.76.0/23 maxlen: 23
217.147.78.0/23 maxlen: 23
2a02:5f00::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/c34150-5912-490c-b35b-f54fbf6917bc/1/Hsub1e2W5p3aj8Kh_gIUetro9xM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/c34150-5912-490c-b35b-f54fbf6917bc/1/Hsub1e2W5p3aj8Kh_gIUetro9xM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hsub1e2W5p3aj8Kh_gIUetro9xM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Sep 2024 14:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:aa:f9:b4:b6:f4:e3:d5:1c:72:b9:ce:dd:37:8a:cc:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ecb9bd5ed96e69dda8fc2a1fe02147adae8f713
Validity
Not Before: May 24 14:20:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=85a3e7bf49c3aa9ff619eb882d170c43736e764e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:e2:15:c1:c2:e6:5d:73:6f:87:c2:d2:d1:a0:
72:99:a7:f9:e3:90:e4:c9:a7:e1:4b:fe:e0:e5:f2:
9a:9e:4f:7c:a6:42:ac:99:f1:95:3f:06:ed:19:fc:
9b:34:c4:f0:08:74:7f:f1:0b:bf:54:b4:ab:02:d9:
86:43:43:5c:ce:59:b7:d3:e3:1e:0f:1a:ba:0d:f0:
e8:52:30:21:75:b1:eb:59:7a:34:27:ba:6a:b7:f1:
90:2f:5c:d2:ef:e3:b6:e2:ba:8d:13:f2:b3:52:54:
a4:de:b5:c7:f6:1f:9b:4a:36:dd:1c:47:12:b0:0d:
17:aa:85:9f:11:0b:52:3a:12:87:64:0e:5e:e3:2a:
78:4e:76:0f:8b:76:c5:28:bb:e2:4a:97:d4:98:5d:
12:3c:87:76:12:50:6e:86:19:98:c7:cc:0c:87:dc:
68:9b:f8:3f:9d:f0:2b:45:5b:4f:88:ea:5a:d9:e0:
7b:c6:8e:10:1f:2a:c5:47:cf:0c:f9:ec:2e:07:23:
d1:b0:1e:07:69:fc:57:a4:af:ad:4e:37:e7:74:0a:
7c:a7:9c:ae:56:e5:05:93:c8:ab:3f:9d:4f:7d:19:
aa:e0:b3:80:87:9f:af:31:c6:a4:de:9c:4d:2a:11:
a5:73:c0:c9:23:af:57:db:e5:71:b6:49:47:c4:97:
ce:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:A3:E7:BF:49:C3:AA:9F:F6:19:EB:88:2D:17:0C:43:73:6E:76:4E
X509v3 Authority Key Identifier:
keyid:1E:CB:9B:D5:ED:96:E6:9D:DA:8F:C2:A1:FE:02:14:7A:DA:E8:F7:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hsub1e2W5p3aj8Kh_gIUetro9xM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/c34150-5912-490c-b35b-f54fbf6917bc/1/haPnv0nDqp_2GeuILRcMQ3Nudk4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/c34150-5912-490c-b35b-f54fbf6917bc/1/Hsub1e2W5p3aj8Kh_gIUetro9xM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.95.80.0/21
176.32.232.0/21
185.148.132.0/22
217.64.224.0/20
217.147.64.0/20
IPv6:
2a02:5f00::/32
Signature Algorithm: sha256WithRSAEncryption
a5:9a:79:7d:8e:26:fd:3a:a1:4b:fe:54:7d:28:bb:67:cf:c1:
ad:dc:88:df:93:80:62:19:69:20:1a:18:23:3a:c2:8a:aa:d7:
cd:fb:66:81:17:63:62:e7:5e:42:3d:a7:78:2f:ba:6a:7f:78:
d3:a3:13:69:79:c4:8e:b4:34:0d:f0:88:72:0b:e3:da:f3:0f:
7f:36:1a:56:e0:93:25:34:d0:1d:47:58:f4:9e:0a:02:c7:8c:
42:2e:55:e2:85:79:6b:3f:86:4a:70:6e:d2:e4:b2:9a:55:17:
68:53:bc:e8:36:75:79:3a:44:8f:1e:81:1a:40:fb:49:a9:19:
1f:49:59:f7:30:f4:7f:eb:5e:eb:7d:c8:17:c5:e8:72:70:b4:
7a:d4:99:5c:03:c1:4d:8c:4f:8b:7f:7a:4e:e9:26:a2:60:f1:
2a:04:40:20:f4:02:7f:20:83:69:e1:88:5b:26:cc:e9:1e:ac:
ab:1e:22:ac:8f:b4:0f:b8:9d:15:b4:3b:1b:2f:6f:e1:e3:ee:
e6:cf:05:0e:88:53:d7:c8:33:fd:66:83:3e:45:da:12:98:7b:
f7:21:04:38:d4:63:ee:c8:40:82:cd:b5:4c:f6:e9:f4:ea:8e:
e7:8f:23:b1:0b:5f:16:54:af:d1:ff:88:41:f5:d1:c1:4d:f5:
9f:74:45:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 23:19:44 2024 by rpki-client on console-ams.rpki-client.org