Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/bIfvUxUzof8dthHzsCuQ83NlkA8.roa
File: bIfvUxUzof8dthHzsCuQ83NlkA8.roa (raw, json)
Hash identifier: 2uz0NpTY6EFRzBNoKfoqbIczVo94rrNJp42YEkEc6d8=
Subject key identifier: 6C:87:EF:53:15:33:A1:FF:1D:B6:11:F3:B0:2B:90:F3:73:65:90:0F
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 018CC2DB402027296C22ADF1B9BA3A9EF910
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/bIfvUxUzof8dthHzsCuQ83NlkA8.roa
Signing time: Mon 01 Jan 2024 02:29:57 +0000
ROA not before: Mon 01 Jan 2024 02:29:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 399130
IP address blocks: 193.31.104.0/22 maxlen: 24
195.138.109.0/24 maxlen: 24
195.138.110.0/24 maxlen: 24
195.138.117.0/24 maxlen: 24
195.138.115.0/24 maxlen: 24
195.138.113.0/24 maxlen: 24
195.138.125.0/24 maxlen: 24
195.138.123.0/24 maxlen: 24
195.138.124.0/24 maxlen: 24
195.138.119.0/24 maxlen: 24
195.138.121.0/24 maxlen: 24
195.138.126.0/24 maxlen: 24
195.138.127.0/24 maxlen: 24
45.151.196.0/22 maxlen: 24
45.150.168.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft
rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:40:20:27:29:6c:22:ad:f1:b9:ba:3a:9e:f9:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Jan 1 02:29:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6c87ef531533a1ff1db611f3b02b90f37365900f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:23:ec:c3:4a:7a:40:c2:64:1c:a9:d2:c1:fc:
a3:2a:01:11:cc:8e:22:e6:f2:b1:b9:91:00:0c:9a:
06:50:db:5a:37:ba:38:01:15:13:f5:4e:83:a2:f4:
f9:0f:35:40:d9:7a:30:00:42:9e:1c:8d:06:f9:a6:
15:63:11:39:c3:62:c4:30:83:0f:96:89:7b:87:06:
6c:39:5f:8f:46:06:b7:34:bf:74:f8:e7:de:1e:d7:
aa:8a:1f:a4:fd:e8:5b:79:b9:ad:05:89:0c:71:6c:
c2:ae:2d:fc:5d:31:0d:bb:26:0c:d8:82:b1:ac:b3:
0d:f7:74:a1:10:66:87:af:e2:0b:68:1e:9f:d9:13:
5f:b9:fd:5e:c6:ed:3a:de:57:07:2c:0e:57:87:c7:
c2:8f:f3:57:ed:6c:2c:cf:0a:f5:4a:40:71:bf:33:
de:32:57:71:e5:27:ca:75:1a:52:66:53:04:a7:79:
f8:0d:80:4d:f6:c6:b7:63:fa:19:b3:25:c5:da:f2:
3d:b6:9b:4e:68:d5:7a:b4:dd:7b:30:a3:43:92:5a:
c6:01:bc:ab:bf:93:f0:a9:d0:3e:e0:2e:62:62:a9:
3c:e1:4c:98:13:bf:2d:4c:29:dd:12:91:ad:f7:bf:
5e:8e:cb:53:cc:45:59:5e:0e:83:63:4b:8d:66:b3:
e6:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:87:EF:53:15:33:A1:FF:1D:B6:11:F3:B0:2B:90:F3:73:65:90:0F
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/bIfvUxUzof8dthHzsCuQ83NlkA8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.168.0/22
45.151.196.0/22
193.31.104.0/22
195.138.109.0-195.138.110.255
195.138.113.0/24
195.138.115.0/24
195.138.117.0/24
195.138.119.0/24
195.138.121.0/24
195.138.123.0-195.138.127.255
Signature Algorithm: sha256WithRSAEncryption
48:4e:b6:ed:59:f1:7f:16:0f:03:b4:c7:a0:5c:bf:dc:e1:f4:
05:4c:6e:75:36:ad:ca:b2:42:bb:07:b3:6d:85:71:0f:c0:18:
d6:91:45:d7:88:e4:9d:5a:76:e7:9a:97:93:7b:a6:62:88:30:
b9:3b:a0:b2:df:b7:70:9f:b6:16:2c:64:4c:ed:72:57:34:5c:
ce:8e:bf:c1:ce:d2:e3:48:1a:cc:c3:33:69:7b:4d:1b:02:02:
52:f1:4e:ee:2c:2b:64:32:c0:29:fb:a3:c7:78:c3:1d:5e:29:
39:c0:87:d2:70:e0:da:ae:69:19:af:31:8e:58:b2:34:72:a2:
69:d4:35:5a:7a:7d:50:26:d4:b8:b7:35:0e:a4:6c:36:af:2b:
87:7f:4b:a1:7c:3f:51:b7:8c:03:62:d9:86:5f:69:2b:4a:e9:
68:dc:04:62:33:2c:b7:59:c1:b4:b7:63:1d:50:b3:f4:0d:42:
d9:47:94:df:47:70:e6:f7:d7:9d:04:4b:3b:59:02:17:96:87:
79:1b:0d:08:7f:31:29:23:9a:b7:e9:d9:4b:00:63:eb:e6:e8:
99:27:54:d6:e3:46:49:66:f8:8b:84:c5:78:50:b4:c4:c5:d4:
61:a9:cf:30:5f:be:87:07:61:75:f5:00:3b:0a:ca:c4:9f:86:
dc:fc:49:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 12:54:50 2024 by rpki-client on console-fra.rpki-client.org