Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/f_XfVM969sMICXu62GbYsjLPim8.roa
File: f_XfVM969sMICXu62GbYsjLPim8.roa (raw, json)
Hash identifier: ni5aes3KETp55PgWYE4/iFK6z3gukYc+nfKccQ+5A9o=
Subject key identifier: 7F:F5:DF:54:CF:7A:F6:C3:08:09:7B:BA:D8:66:D8:B2:32:CF:8A:6F
Certificate issuer: /CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Certificate serial: 018E3B977444F27C8DA96403ECBD253FF332
Authority key identifier: 77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/f_XfVM969sMICXu62GbYsjLPim8.roa
Signing time: Thu 14 Mar 2024 06:12:45 +0000
ROA not before: Thu 14 Mar 2024 06:12:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208161
IP address blocks: 87.248.130.0/24 maxlen: 24
87.248.131.0/24 maxlen: 24
87.248.133.0/24 maxlen: 24
87.248.137.0/24 maxlen: 24
87.248.138.0/24 maxlen: 24
87.248.139.0/24 maxlen: 24
87.248.145.0/24 maxlen: 24
87.248.150.0/24 maxlen: 24
87.248.151.0/24 maxlen: 24
87.248.152.0/23 maxlen: 24
87.248.155.0/24 maxlen: 24
87.248.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 15:42:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:3b:97:74:44:f2:7c:8d:a9:64:03:ec:bd:25:3f:f3:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Validity
Not Before: Mar 14 06:12:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7ff5df54cf7af6c308097bbad866d8b232cf8a6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:79:80:4f:3e:f4:3b:66:fe:37:97:73:46:17:
d8:46:49:48:3f:13:9c:ed:4f:84:d1:5b:92:ce:18:
38:0a:f2:f6:f7:fb:d9:6b:67:5a:ad:dc:98:94:4d:
3f:29:26:ca:00:be:7f:74:5f:54:62:04:c0:fc:4b:
3e:2b:56:2b:eb:30:a3:23:0d:9c:90:ad:98:4b:8a:
1e:00:8d:84:e1:eb:06:d1:1c:ef:ed:85:68:07:55:
1e:d0:24:a4:55:07:7a:3f:7e:1d:be:31:1f:00:8d:
c5:dc:a9:1f:62:bc:2e:21:d6:2c:26:de:9d:10:93:
b9:db:82:ba:c0:56:b5:a6:34:7c:f6:36:b8:43:f1:
ae:c3:a5:30:da:2f:d6:27:19:d1:88:fd:9c:62:23:
b6:77:af:e0:53:bb:fc:c0:e5:fa:3d:2f:80:13:5d:
3e:78:4e:ff:0e:2f:8c:5d:0c:bd:73:9c:a5:ef:18:
22:5c:05:00:84:43:88:03:34:67:2b:d5:04:de:ba:
e6:36:31:35:70:16:b6:80:b3:17:56:fe:d3:80:dd:
e5:fb:2c:e3:9a:14:2f:8a:89:01:ff:a6:df:89:23:
fc:8b:b9:03:49:c3:ab:5b:e8:53:e7:8a:35:2b:f2:
d5:a3:01:c6:14:29:8e:48:71:4f:72:4c:d0:56:e0:
4a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:F5:DF:54:CF:7A:F6:C3:08:09:7B:BA:D8:66:D8:B2:32:CF:8A:6F
X509v3 Authority Key Identifier:
keyid:77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/f_XfVM969sMICXu62GbYsjLPim8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.248.130.0/23
87.248.133.0/24
87.248.137.0-87.248.139.255
87.248.145.0/24
87.248.150.0-87.248.153.255
87.248.155.0-87.248.156.255
Signature Algorithm: sha256WithRSAEncryption
51:c7:36:f3:dc:0a:d7:9b:60:aa:bc:af:f2:e4:31:7c:c0:89:
49:9f:31:26:eb:86:e9:88:f4:28:18:48:dd:fa:90:2b:43:0c:
82:f9:05:73:81:4f:c1:9d:1a:e6:e3:f0:70:3a:7a:e5:6f:fd:
c9:5c:71:42:c7:80:0c:71:2f:9d:29:d6:a7:27:8a:c9:94:64:
ff:71:04:b4:64:f1:2b:7a:10:3d:48:56:9e:a0:ca:ab:79:c4:
af:45:c3:e4:84:04:e1:48:6b:59:f6:59:0b:40:5c:80:8e:58:
aa:2e:82:72:89:62:01:31:66:47:3f:6f:2c:cf:3c:34:1d:5f:
ce:08:ae:01:85:ac:00:b5:7c:ad:00:8f:2f:00:e2:88:4c:a7:
65:79:ce:e0:12:dc:30:d2:91:66:a5:29:4b:42:6b:e6:bb:6b:
4f:2c:da:e1:bd:cc:e9:f8:86:c9:06:d2:83:23:4f:2a:fe:4b:
14:df:17:fb:88:d0:14:1b:41:e8:6c:bb:99:2b:a8:bc:6b:ef:
49:33:d9:01:22:6d:6c:c2:26:79:21:9c:60:f4:5f:83:8a:33:
5f:be:06:ab:3d:a6:05:49:3c:4e:cd:a6:d1:d3:6f:60:7a:b6:
10:aa:3b:c5:44:ac:48:c9:aa:df:8a:68:db:0e:d0:eb:b2:ea:
a3:f7:17:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 21:45:31 2024 by rpki-client on console-ams.rpki-client.org