Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/f3I8CCvLHglNMzB_wr0S5p-dKRU.roa
File: f3I8CCvLHglNMzB_wr0S5p-dKRU.roa (raw, json)
Hash identifier: vnljMGL+5MsSygObfpJ3+p8wHZyRhmVmKPUaIRIc/cs=
Subject key identifier: 7F:72:3C:08:2B:CB:1E:09:4D:33:30:7F:C2:BD:12:E6:9F:9D:29:15
Certificate issuer: /CN=1027a8a61299b80a3e71d1a981427ec00b849d17
Certificate serial: 018E2DBADDE76F49AB81520BA4D47AB666FA
Authority key identifier: 10:27:A8:A6:12:99:B8:0A:3E:71:D1:A9:81:42:7E:C0:0B:84:9D:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ECeophKZuAo-cdGpgUJ-wAuEnRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/f3I8CCvLHglNMzB_wr0S5p-dKRU.roa
Signing time: Mon 11 Mar 2024 13:36:44 +0000
ROA not before: Mon 11 Mar 2024 13:36:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8455
IP address blocks: 31.22.80.0/21 maxlen: 21
31.22.84.0/24 maxlen: 24
45.148.184.0/22 maxlen: 22
95.142.96.0/20 maxlen: 20
130.193.4.0/24 maxlen: 24
178.237.32.0/20 maxlen: 20
178.237.34.0/24 maxlen: 24
178.237.42.0/24 maxlen: 24
178.237.43.0/24 maxlen: 24
185.27.16.0/22 maxlen: 22
193.202.74.0/23 maxlen: 23
193.202.88.0/24 maxlen: 24
2a00:1188::/29 maxlen: 29
2a00:1188:8::/48 maxlen: 48
2a00:1188:9::/48 maxlen: 48
2a00:1188:b::/48 maxlen: 48
2a00:1188:c::/48 maxlen: 48
2a00:1188:d::/48 maxlen: 48
2a00:1188:13::/48 maxlen: 48
2a00:1188:19::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/ECeophKZuAo-cdGpgUJ-wAuEnRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/ECeophKZuAo-cdGpgUJ-wAuEnRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ECeophKZuAo-cdGpgUJ-wAuEnRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 29 Jun 2024 07:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:2d:ba:dd:e7:6f:49:ab:81:52:0b:a4:d4:7a:b6:66:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1027a8a61299b80a3e71d1a981427ec00b849d17
Validity
Not Before: Mar 11 13:36:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7f723c082bcb1e094d33307fc2bd12e69f9d2915
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:21:77:95:e4:34:b6:bd:48:d4:d4:9e:66:9f:
a2:be:b9:25:66:39:8e:63:04:ef:13:83:f0:a0:2e:
c9:69:62:fd:25:77:30:53:90:36:63:3c:38:78:12:
dc:35:c3:93:35:6d:98:5a:85:4d:75:e7:4c:23:cf:
cc:b1:07:19:45:cc:10:f6:85:02:d0:5c:74:87:93:
1b:bf:c8:e8:ec:c2:76:80:fa:d7:2f:a3:8a:3f:6f:
c4:45:30:48:26:ac:14:fc:38:ee:c8:1a:90:4d:c4:
66:a1:46:df:04:46:91:27:76:3f:5e:5d:9f:98:4e:
44:0a:b2:a4:cb:42:94:04:ae:29:1c:0f:d7:9c:38:
d4:c1:95:66:d9:c4:00:04:58:66:6e:af:e8:f3:a7:
a2:fa:c0:21:7e:7f:1c:c5:c4:88:65:96:90:99:ec:
77:9d:3f:38:9e:6b:14:2c:98:7b:31:c1:67:ba:10:
f0:99:bd:1e:84:3f:ea:37:1e:19:75:16:d0:74:66:
87:1d:43:f4:53:8b:e1:04:0b:67:b0:23:97:b6:49:
50:2c:02:02:65:86:7b:b7:54:e1:44:4f:30:c6:c1:
84:09:0d:c9:a9:03:44:36:d7:96:c6:a3:b1:e3:cc:
ac:96:a8:7c:4d:68:06:fa:61:17:0a:20:0e:1c:6e:
37:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:72:3C:08:2B:CB:1E:09:4D:33:30:7F:C2:BD:12:E6:9F:9D:29:15
X509v3 Authority Key Identifier:
keyid:10:27:A8:A6:12:99:B8:0A:3E:71:D1:A9:81:42:7E:C0:0B:84:9D:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ECeophKZuAo-cdGpgUJ-wAuEnRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/f3I8CCvLHglNMzB_wr0S5p-dKRU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/ECeophKZuAo-cdGpgUJ-wAuEnRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.22.80.0/21
45.148.184.0/22
95.142.96.0/20
130.193.4.0/24
178.237.32.0/20
185.27.16.0/22
193.202.74.0/23
193.202.88.0/24
IPv6:
2a00:1188::/29
Signature Algorithm: sha256WithRSAEncryption
ba:3b:d0:f8:32:c9:3f:29:9d:39:a8:f0:69:04:78:16:f7:77:
79:b3:33:e6:3b:29:e5:76:5c:9f:ba:08:76:1b:aa:2c:33:11:
5d:02:f6:e8:be:73:a0:95:74:a3:d5:58:5a:32:e9:c5:73:64:
9a:64:4f:8f:3d:a1:c5:26:d1:60:be:cb:54:8d:c8:89:a8:54:
72:7d:8d:f8:3e:70:ab:b9:30:db:8b:c0:10:64:44:7f:f9:57:
c0:38:7f:70:26:30:72:c9:d8:b8:85:f3:01:2b:70:aa:dc:1a:
90:17:d0:64:58:88:da:65:6f:fb:69:d9:e6:b6:22:11:f3:f5:
17:ba:35:71:c4:52:d6:5d:02:2c:42:2a:5a:89:a1:6a:82:f2:
72:eb:81:cc:0d:fc:36:25:aa:4b:e0:d6:c1:9f:bc:9a:09:55:
45:e0:1f:43:d0:28:04:52:b1:2c:7f:79:ad:0f:c8:8d:8b:2f:
6b:e7:37:64:77:26:96:67:58:1b:6c:1e:2f:b6:bc:78:30:ef:
7e:fa:89:9b:64:3e:c8:d4:c2:75:ed:c6:9a:95:a8:4c:93:fc:
ff:bb:d7:46:df:9c:8f:6b:ac:71:f3:39:55:31:00:56:b6:d0:
37:7d:04:6c:39:f7:a8:08:f7:bd:72:76:82:ec:44:95:7c:3a:
f2:c3:0e:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 14:02:15 2024 by rpki-client on console-ams.rpki-client.org