Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/z_9gXWNFkj28zBKUiwUu2A2fFro.roa
File: z_9gXWNFkj28zBKUiwUu2A2fFro.roa (raw, json)
Hash identifier: AtVvvnoSFk+CuYxGGKK/3/clfokycbjVkWR1Oqw04iY=
Subject key identifier: CF:FF:60:5D:63:45:92:3D:BC:CC:12:94:8B:05:2E:D8:0D:9F:16:BA
Certificate issuer: /CN=622ecc6cc5903aea0db61200f4ccd4f824cdd54f
Certificate serial: 018F0B122282E6D5299F09F69498B650A04F
Authority key identifier: 62:2E:CC:6C:C5:90:3A:EA:0D:B6:12:00:F4:CC:D4:F8:24:CD:D5:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yi7MbMWQOuoNthIA9MzU-CTN1U8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/z_9gXWNFkj28zBKUiwUu2A2fFro.roa
Signing time: Tue 23 Apr 2024 13:08:08 +0000
ROA not before: Tue 23 Apr 2024 13:08:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8683
IP address blocks: 149.20.96.0/22 maxlen: 22
149.20.100.0/22 maxlen: 22
149.20.104.0/22 maxlen: 22
149.20.108.0/22 maxlen: 22
213.248.196.0/23 maxlen: 23
213.248.198.0/23 maxlen: 23
213.248.228.0/23 maxlen: 23
213.248.230.0/23 maxlen: 23
213.248.232.0/21 maxlen: 21
213.248.240.0/21 maxlen: 21
213.248.249.0/24 maxlen: 24
213.248.252.0/23 maxlen: 23
2a01:618:8000::/33 maxlen: 33
2a01:618:8000::/40 maxlen: 40
2a01:61c:1000::/40 maxlen: 40
2a01:61c:1100::/40 maxlen: 40
2a01:61c:1900::/40 maxlen: 40
2a01:61c:1a00::/40 maxlen: 40
2a01:61c:1d00::/40 maxlen: 40
2a01:61c:1f00::/40 maxlen: 40
2a01:61c:2000::/40 maxlen: 40
2a01:61c:2100::/40 maxlen: 40
2a01:61c:2a00::/40 maxlen: 40
2a01:61c:2f00::/40 maxlen: 40
2a01:61c:ffff::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/Yi7MbMWQOuoNthIA9MzU-CTN1U8.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/Yi7MbMWQOuoNthIA9MzU-CTN1U8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yi7MbMWQOuoNthIA9MzU-CTN1U8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 04:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:0b:12:22:82:e6:d5:29:9f:09:f6:94:98:b6:50:a0:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=622ecc6cc5903aea0db61200f4ccd4f824cdd54f
Validity
Not Before: Apr 23 13:08:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cfff605d6345923dbccc12948b052ed80d9f16ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:41:ce:bb:26:75:b4:21:1e:5c:56:e8:a8:d6:
b1:f7:bd:d2:55:0d:be:fe:48:11:88:e4:f5:56:4c:
67:bf:e0:20:96:e3:13:f1:de:96:e9:3c:de:47:58:
ec:e1:ed:91:ed:32:81:bd:cf:4c:1d:0b:48:7e:ef:
6f:68:34:15:02:ab:71:5b:04:a1:d8:b9:aa:44:d8:
6c:3c:c6:2d:ef:83:e5:c1:37:6b:a7:b2:a7:43:83:
be:f1:c7:9f:99:1e:64:a4:1d:84:cb:be:f9:60:60:
a0:9c:f1:17:f3:bc:ec:86:cd:ae:6a:14:a0:cd:9a:
c6:f3:85:bd:9a:dd:bb:64:b8:a4:dc:93:00:91:8c:
4d:13:c2:d8:d8:e9:e2:20:ed:bf:90:79:c9:f0:40:
10:15:90:db:0b:85:b5:e3:67:c8:e8:67:6e:37:94:
70:d4:44:a9:30:0c:98:9f:0e:c3:77:09:6d:c3:bf:
6a:b8:a6:2f:9e:a7:2f:80:d6:99:d8:f4:22:11:e1:
f5:8f:55:83:ab:08:54:01:2d:2b:ee:8d:bf:bf:4b:
12:d4:2c:1a:f8:70:bb:c0:cc:dc:d6:f4:d9:07:8d:
d1:2d:65:8f:79:37:a4:e9:13:b2:53:3a:2f:54:fc:
19:aa:a1:fd:41:1e:6b:29:c4:84:d7:53:89:33:d1:
46:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:FF:60:5D:63:45:92:3D:BC:CC:12:94:8B:05:2E:D8:0D:9F:16:BA
X509v3 Authority Key Identifier:
keyid:62:2E:CC:6C:C5:90:3A:EA:0D:B6:12:00:F4:CC:D4:F8:24:CD:D5:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yi7MbMWQOuoNthIA9MzU-CTN1U8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/z_9gXWNFkj28zBKUiwUu2A2fFro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/Yi7MbMWQOuoNthIA9MzU-CTN1U8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.20.96.0/20
213.248.196.0/22
213.248.228.0-213.248.247.255
213.248.249.0/24
213.248.252.0/23
IPv6:
2a01:618:8000::/33
2a01:61c:1000::/39
2a01:61c:1900::-2a01:61c:1aff:ffff:ffff:ffff:ffff:ffff
2a01:61c:1d00::/40
2a01:61c:1f00::-2a01:61c:21ff:ffff:ffff:ffff:ffff:ffff
2a01:61c:2a00::/40
2a01:61c:2f00::/40
2a01:61c:ffff::/48
Signature Algorithm: sha256WithRSAEncryption
55:63:65:82:c4:19:bb:f7:49:a9:5a:3c:f2:dd:7d:b3:27:2e:
55:82:3f:2b:df:ac:da:77:05:2a:d6:d8:86:7e:be:f3:a1:e7:
a9:60:fd:d5:c9:83:a7:c1:b1:40:e1:9a:28:2e:11:26:e1:cf:
3b:b1:22:3f:9a:6a:58:32:71:ee:c8:ad:8e:63:bb:9a:c3:cb:
30:f1:77:3b:bc:8b:62:60:9a:15:57:7a:71:8d:d6:a0:b6:7f:
da:8c:1f:93:44:e3:e3:30:d9:cc:30:68:35:10:d9:40:03:ae:
d6:ff:14:53:9f:55:d0:c8:0a:74:85:36:ce:82:bd:8b:eb:17:
fc:8d:a8:57:e4:8d:e6:ad:41:9e:f6:62:79:2c:f6:ea:60:a7:
d3:60:35:de:b9:39:0d:58:a6:4c:82:a8:02:68:5f:d7:d5:f7:
1b:70:55:1b:ed:64:91:de:be:0c:c8:00:a0:47:87:94:75:c9:
9a:46:08:68:61:7a:3b:fd:c2:8b:72:9c:f9:df:db:62:37:7a:
16:64:fc:fe:2e:d7:e1:9d:7f:fc:9a:08:33:fc:4d:22:04:71:
2a:ea:21:15:ff:3e:25:19:59:d9:83:47:a9:8d:64:82:0b:cd:
2d:ed:6f:a2:76:1f:e5:a0:24:4a:cf:a5:3f:8a:1f:39:06:05:
e9:53:4a:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:36:55 2024 by rpki-client on console-ams.rpki-client.org