Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/_X4upVdhOr2VrbA-86ky2My40-Q.roa
File: _X4upVdhOr2VrbA-86ky2My40-Q.roa (raw, json)
Hash identifier: lHvB2K8NFPMLhwuqFf023jozNMvuhwUHCWfiuuB0XrM=
Subject key identifier: FD:7E:2E:A5:57:61:3A:BD:95:AD:B0:3E:F3:A9:32:D8:CC:B8:D3:E4
Certificate issuer: /CN=a9807f6d50d97d971dcf2e2e5064e9b907adb3ec
Certificate serial: 019232FD86B26E614BD4E2D302493E69B66C
Authority key identifier: A9:80:7F:6D:50:D9:7D:97:1D:CF:2E:2E:50:64:E9:B9:07:AD:B3:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qYB_bVDZfZcdzy4uUGTpuQets-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/_X4upVdhOr2VrbA-86ky2My40-Q.roa
Signing time: Fri 27 Sep 2024 10:18:48 +0000
ROA not before: Fri 27 Sep 2024 10:18:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 13285
IP address blocks: 2.96.0.0/13 maxlen: 24
62.3.192.0/18 maxlen: 24
62.24.128.0/17 maxlen: 24
62.241.160.0/19 maxlen: 24
78.144.0.0/13 maxlen: 24
81.6.192.0/18 maxlen: 24
82.133.0.0/17 maxlen: 24
89.240.0.0/14 maxlen: 24
91.146.112.0/21 maxlen: 24
92.8.0.0/13 maxlen: 24
92.16.0.0/12 maxlen: 24
185.112.212.0/22 maxlen: 24
185.173.116.0/22 maxlen: 24
185.173.120.0/22 maxlen: 24
185.175.144.0/22 maxlen: 24
193.218.99.0/24 maxlen: 24
195.112.0.0/18 maxlen: 24
195.149.0.0/18 maxlen: 24
212.139.24.0/24 maxlen: 24
212.139.133.0/24 maxlen: 24
212.139.148.0/22 maxlen: 22
213.208.64.0/18 maxlen: 24
217.8.0.0/19 maxlen: 24
217.68.128.0/20 maxlen: 24
2001:7e0::/32 maxlen: 32
2001:4a00::/27 maxlen: 27
2a00:4340::/32 maxlen: 32
2a0b:db00::/29 maxlen: 29
2a0b:e900::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/qYB_bVDZfZcdzy4uUGTpuQets-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:32:fd:86:b2:6e:61:4b:d4:e2:d3:02:49:3e:69:b6:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9807f6d50d97d971dcf2e2e5064e9b907adb3ec
Validity
Not Before: Sep 27 10:18:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fd7e2ea557613abd95adb03ef3a932d8ccb8d3e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:b1:01:58:48:ca:1c:1d:3e:53:10:ab:ea:03:
1d:df:c0:ba:90:96:eb:c5:f5:d2:00:6f:1d:a3:60:
eb:66:c7:65:8f:69:8d:77:76:52:18:39:ce:42:3e:
b2:f6:94:08:97:5b:4f:61:29:27:40:69:d8:db:ce:
b8:b6:fb:d5:f4:a7:c4:51:e2:15:bd:d3:7d:69:1e:
0c:8a:c9:12:08:5f:ce:1f:b9:88:92:f6:08:fc:c4:
6a:3a:84:83:95:48:9b:db:db:07:c3:8d:8d:b5:31:
0a:fa:e7:3a:3d:53:4e:95:ac:2b:d2:ed:a3:29:9a:
33:cc:06:87:36:b6:4f:5f:70:8b:b3:48:09:f1:68:
34:f5:dc:ac:45:39:95:b2:ec:87:08:96:0d:28:2e:
d8:c7:92:22:52:6e:6a:9f:1c:1d:27:6d:52:c9:79:
0f:54:27:4d:55:43:e2:93:17:5b:70:e7:8e:55:7d:
79:f2:a3:90:d7:7b:b0:4d:77:e0:4a:31:82:52:7d:
48:d7:ad:ac:08:81:8e:f4:06:51:f1:a2:26:4b:99:
f3:b4:bb:a2:e8:99:05:71:74:96:3f:ab:19:6e:59:
6e:61:97:12:90:5c:6c:5c:bd:6f:af:e4:72:df:72:
9e:a7:83:d8:63:c4:1b:fc:4c:96:24:2e:fc:24:80:
0f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:7E:2E:A5:57:61:3A:BD:95:AD:B0:3E:F3:A9:32:D8:CC:B8:D3:E4
X509v3 Authority Key Identifier:
keyid:A9:80:7F:6D:50:D9:7D:97:1D:CF:2E:2E:50:64:E9:B9:07:AD:B3:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qYB_bVDZfZcdzy4uUGTpuQets-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/_X4upVdhOr2VrbA-86ky2My40-Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.96.0.0/13
62.3.192.0/18
62.24.128.0/17
62.241.160.0/19
78.144.0.0/13
81.6.192.0/18
82.133.0.0/17
89.240.0.0/14
91.146.112.0/21
92.8.0.0-92.31.255.255
185.112.212.0/22
185.173.116.0-185.173.123.255
185.175.144.0/22
193.218.99.0/24
195.112.0.0/18
195.149.0.0/18
212.139.24.0/24
212.139.133.0/24
212.139.148.0/22
213.208.64.0/18
217.8.0.0/19
217.68.128.0/20
IPv6:
2001:7e0::/32
2001:4a00::/27
2a00:4340::/32
2a0b:db00::/29
2a0b:e900::/29
Signature Algorithm: sha256WithRSAEncryption
8c:6f:0f:e6:41:5c:dd:d0:f4:89:6e:bc:aa:9b:34:86:ba:95:
94:9b:bc:af:32:c9:03:44:9d:29:d2:9b:50:a6:58:b0:75:26:
8b:ae:ee:17:de:65:e8:46:d6:6c:e6:8e:7d:c9:c3:a1:7c:e5:
11:d3:b9:81:76:b3:7a:1d:76:d2:b9:e5:03:33:2a:fb:7a:52:
d8:9c:05:ff:1e:60:5c:33:6b:cc:e1:cd:aa:86:78:3f:34:a6:
a2:ae:0d:b5:cc:5c:da:39:b6:b1:d2:2e:ff:50:5f:32:e6:5a:
2f:9e:8e:3f:3e:b5:54:a2:71:2b:f5:5f:5e:d6:09:1c:c9:c9:
2e:b4:38:a1:e3:20:da:ec:44:42:77:c9:83:6d:1d:00:c0:12:
b1:ec:dd:8e:2c:3b:db:86:f0:39:45:9a:e1:4a:88:20:4d:4e:
64:3d:12:bf:c6:ac:5b:59:d3:e8:47:b0:67:b6:e8:50:64:df:
ca:95:33:03:25:56:08:46:a8:0b:08:49:9b:8b:31:1d:af:ac:
7c:dc:0d:7f:c4:1d:ec:78:d6:66:59:18:19:31:ea:be:bf:5d:
5c:ce:20:a6:75:6c:96:7a:32:7c:eb:82:f6:23:ee:ee:ed:76:
bb:76:41:f7:90:bf:8b:6d:bd:31:06:ec:a3:cc:31:b7:40:f2:
d9:41:6b:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:37:04 2024 by rpki-client on console-ams.rpki-client.org