Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/_z4SUbobR9EzIPluCoQ75LAT_-w.roa
File: _z4SUbobR9EzIPluCoQ75LAT_-w.roa (raw, json)
Hash identifier: MCoSGPYhTPcOHjLLoa4ThHJflL6uoRKSbo/IASqxlG0=
Subject key identifier: FF:3E:12:51:BA:1B:47:D1:33:20:F9:6E:0A:84:3B:E4:B0:13:FF:EC
Certificate issuer: /CN=64fa66fb84a781a0584fd0d1c2df39bda4760519
Certificate serial: 018CC4933AA9F529D6F107ED6FE3F6824971
Authority key identifier: 64:FA:66:FB:84:A7:81:A0:58:4F:D0:D1:C2:DF:39:BD:A4:76:05:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/_z4SUbobR9EzIPluCoQ75LAT_-w.roa
Signing time: Mon 01 Jan 2024 10:30:32 +0000
ROA not before: Mon 01 Jan 2024 10:30:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12874
IP address blocks: 89.39.200.0/23 maxlen: 23
188.215.94.0/24 maxlen: 24
193.169.20.0/24 maxlen: 24
94.177.21.0/24 maxlen: 24
37.153.135.0/24 maxlen: 24
89.43.192.0/24 maxlen: 24
86.107.110.0/24 maxlen: 24
185.36.72.0/22 maxlen: 22
89.40.142.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:3a:a9:f5:29:d6:f1:07:ed:6f:e3:f6:82:49:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64fa66fb84a781a0584fd0d1c2df39bda4760519
Validity
Not Before: Jan 1 10:30:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ff3e1251ba1b47d13320f96e0a843be4b013ffec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:03:82:c8:a0:c7:f6:9c:ff:03:b9:81:1c:10:
40:e9:ab:e8:05:fe:73:96:30:ce:4c:ae:70:71:5a:
82:b4:5e:8e:c4:a3:c4:cf:d2:6a:3d:d4:7e:9a:24:
76:10:b4:3d:3c:0e:83:eb:50:3a:3a:b1:45:be:35:
c2:a5:71:9b:68:ab:db:8f:59:a8:40:0d:7b:b5:a0:
20:67:e1:a3:90:28:41:92:ec:70:44:c9:35:9a:ec:
0b:71:63:d3:46:26:d6:f5:03:60:b0:9c:99:1e:d1:
c1:51:cb:9e:57:ae:4b:7b:3a:af:68:dc:22:9c:a0:
fd:e9:05:44:d0:92:f7:ce:c7:1a:ff:12:bb:f0:f2:
0d:03:1d:a8:d7:97:65:ba:1f:bf:e7:42:38:12:a0:
61:20:e6:78:63:ad:fb:7e:a1:51:56:53:e5:00:13:
be:53:80:59:15:66:41:77:79:a3:64:36:cc:87:ff:
fe:1b:87:93:08:51:d8:0d:0f:fc:0c:9c:d4:52:7f:
6f:6c:ae:0f:e3:0c:00:ff:39:f3:d1:46:84:16:f2:
53:c4:9e:f3:7f:db:f4:4e:83:ad:57:dc:c0:45:35:
09:45:12:d7:4f:a2:12:ad:c5:dd:d6:07:db:af:48:
7b:20:21:34:e8:ee:73:2f:2a:70:a9:7d:8b:25:07:
7a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:3E:12:51:BA:1B:47:D1:33:20:F9:6E:0A:84:3B:E4:B0:13:FF:EC
X509v3 Authority Key Identifier:
keyid:64:FA:66:FB:84:A7:81:A0:58:4F:D0:D1:C2:DF:39:BD:A4:76:05:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/_z4SUbobR9EzIPluCoQ75LAT_-w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.153.135.0/24
86.107.110.0/24
89.39.200.0/23
89.40.142.0/23
89.43.192.0/24
94.177.21.0/24
185.36.72.0/22
188.215.94.0/24
193.169.20.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:16:f8:21:f2:8b:f4:17:27:24:ec:a4:87:a7:f5:34:d6:f6:
cb:99:fb:05:34:cf:dd:a4:ba:74:f9:68:12:b7:aa:4b:73:3c:
45:61:2e:8c:05:98:1e:40:10:39:eb:72:fc:63:a2:4c:71:b1:
62:36:8e:b4:5d:70:a1:40:c6:6c:fc:d9:c3:75:38:fa:ea:c0:
76:ab:9d:f5:b1:c8:39:53:71:18:aa:30:33:d8:4a:91:65:0f:
a6:1c:e7:2c:aa:6a:dd:dd:da:69:a9:55:4d:68:7e:ec:aa:ca:
67:3f:ff:dd:3d:91:bf:a0:01:01:25:a5:99:d1:d7:cc:db:a6:
21:39:53:69:0a:55:2d:f8:2f:24:e3:de:53:53:03:7a:15:c6:
dc:82:0b:a1:6c:e4:2a:d0:6f:7d:c6:57:07:88:f3:4c:8b:e6:
44:71:30:5f:6c:52:10:50:52:11:81:42:76:e6:dc:0c:ae:48:
c8:24:1b:6a:56:d3:d5:00:b3:b8:d2:b2:4d:c9:1b:7e:73:86:
09:d8:fb:6a:fd:87:39:cf:ec:38:04:18:3e:e3:9a:34:81:c3:
3b:77:f4:41:6a:02:a6:6c:bb:e3:5d:c3:38:ad:50:a3:08:92:
7e:b6:dd:a0:04:01:44:b9:c0:d1:5d:fd:f8:2c:65:0d:94:af:
10:8e:eb:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 18:16:30 2024 by rpki-client on console-ams.rpki-client.org