Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/Hn2oGCyGlkz8Ez_3EV5_DTmwPAU.roa
File: Hn2oGCyGlkz8Ez_3EV5_DTmwPAU.roa (raw, json)
Hash identifier: hXZJ3/ZI8+14LDBNFdhNojw6/U7Ya3dhuwVdoF6ZMig=
Subject key identifier: 1E:7D:A8:18:2C:86:96:4C:FC:13:3F:F7:11:5E:7F:0D:39:B0:3C:05
Certificate issuer: /CN=5ccdeca171e422c79c938c2732a90d48a8c53c06
Certificate serial: 01904EC1FD62A33698DB111C4DEE2D41DBF9
Authority key identifier: 5C:CD:EC:A1:71:E4:22:C7:9C:93:8C:27:32:A9:0D:48:A8:C5:3C:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XM3soXHkIseck4wnMqkNSKjFPAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/Hn2oGCyGlkz8Ez_3EV5_DTmwPAU.roa
Signing time: Tue 25 Jun 2024 09:37:34 +0000
ROA not before: Tue 25 Jun 2024 09:37:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34397
IP address blocks: 79.172.128.0/18 maxlen: 18
85.129.128.0/17 maxlen: 17
85.129.164.0/22 maxlen: 22
88.213.0.0/18 maxlen: 18
88.213.6.0/24 maxlen: 24
88.213.64.0/18 maxlen: 18
88.213.72.0/21 maxlen: 21
88.213.126.0/23 maxlen: 23
89.4.0.0/15 maxlen: 15
89.5.220.0/23 maxlen: 23
89.5.220.0/24 maxlen: 24
93.98.0.0/16 maxlen: 16
93.98.127.0/24 maxlen: 24
212.71.32.0/19 maxlen: 19
212.71.32.0/24 maxlen: 24
212.71.33.0/24 maxlen: 24
212.71.35.0/24 maxlen: 24
212.71.37.0/24 maxlen: 24
212.71.41.0/24 maxlen: 24
212.71.42.0/24 maxlen: 24
212.71.51.0/24 maxlen: 24
212.71.53.0/24 maxlen: 24
212.107.96.0/19 maxlen: 19
212.107.97.0/24 maxlen: 24
212.107.99.0/24 maxlen: 24
212.107.103.0/24 maxlen: 24
212.107.105.0/24 maxlen: 24
212.107.106.0/24 maxlen: 24
212.118.96.0/19 maxlen: 19
212.118.100.0/24 maxlen: 24
212.118.102.0/24 maxlen: 24
212.118.106.0/24 maxlen: 24
212.118.107.0/24 maxlen: 24
212.118.108.0/22 maxlen: 22
212.118.115.0/24 maxlen: 24
212.118.117.0/24 maxlen: 24
212.118.119.0/24 maxlen: 24
212.118.122.0/24 maxlen: 24
212.118.124.0/24 maxlen: 24
212.119.64.0/20 maxlen: 20
212.119.64.0/24 maxlen: 24
212.119.69.0/24 maxlen: 24
212.119.74.0/24 maxlen: 24
212.119.80.0/21 maxlen: 21
212.119.81.0/24 maxlen: 24
212.119.82.0/24 maxlen: 24
212.119.88.0/22 maxlen: 22
212.119.92.0/23 maxlen: 23
212.119.92.0/24 maxlen: 24
212.119.93.0/24 maxlen: 24
213.181.160.0/19 maxlen: 19
213.181.190.0/24 maxlen: 24
213.210.192.0/18 maxlen: 18
213.210.195.0/24 maxlen: 24
213.210.196.0/24 maxlen: 24
213.210.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/XM3soXHkIseck4wnMqkNSKjFPAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/XM3soXHkIseck4wnMqkNSKjFPAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/XM3soXHkIseck4wnMqkNSKjFPAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 29 Jun 2024 17:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:4e:c1:fd:62:a3:36:98:db:11:1c:4d:ee:2d:41:db:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ccdeca171e422c79c938c2732a90d48a8c53c06
Validity
Not Before: Jun 25 09:37:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1e7da8182c86964cfc133ff7115e7f0d39b03c05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:cd:1f:a3:2b:0d:a6:63:e2:e7:64:d3:63:c9:
bd:34:b3:d2:a4:07:0a:6c:59:af:91:00:32:8d:58:
e8:10:3a:20:1e:cf:93:e1:59:2a:96:5f:de:d6:a2:
b6:46:57:b6:ca:de:a2:33:0a:d4:ac:1d:03:b1:21:
9a:d4:87:4f:1d:8b:55:a4:af:30:7b:bd:ef:7b:82:
56:60:ff:13:45:f0:da:7d:c5:8a:db:36:e4:82:41:
46:0f:b8:08:71:74:76:a6:65:85:1c:a4:ed:7e:1a:
b6:51:9c:f1:ad:35:4a:40:8f:65:97:0e:ca:61:01:
44:93:fd:b3:70:9b:1b:08:6b:d2:f5:ae:cc:f9:12:
5b:23:3c:67:2a:7d:0d:a7:bd:33:9c:8a:94:9a:84:
34:5a:a0:95:c8:7c:08:35:93:95:85:9c:0c:84:2e:
a9:6b:35:58:e8:fd:46:59:a9:1f:7b:51:d3:25:72:
bf:6b:f5:39:78:3d:0b:ab:37:56:d1:36:08:69:f6:
9b:59:68:b5:9b:a7:bf:23:bd:88:41:d0:f4:3b:e4:
0b:8c:e7:e0:4e:47:b6:ec:34:ab:bd:8f:ee:81:24:
34:73:9d:53:44:9a:cd:a1:06:ff:6c:27:5f:09:5f:
2e:f3:72:14:79:a9:7f:ad:78:8a:72:43:53:44:03:
3a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:7D:A8:18:2C:86:96:4C:FC:13:3F:F7:11:5E:7F:0D:39:B0:3C:05
X509v3 Authority Key Identifier:
keyid:5C:CD:EC:A1:71:E4:22:C7:9C:93:8C:27:32:A9:0D:48:A8:C5:3C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XM3soXHkIseck4wnMqkNSKjFPAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/Hn2oGCyGlkz8Ez_3EV5_DTmwPAU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/XM3soXHkIseck4wnMqkNSKjFPAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.172.128.0/18
85.129.128.0/17
88.213.0.0/17
89.4.0.0/15
93.98.0.0/16
212.71.32.0/19
212.107.96.0/19
212.118.96.0/19
212.119.64.0-212.119.93.255
213.181.160.0/19
213.210.192.0/18
Signature Algorithm: sha256WithRSAEncryption
52:38:c1:0d:4f:8c:d7:c4:a7:55:6f:84:a3:cf:ac:d7:30:eb:
af:23:2d:70:2c:9e:68:5e:61:3d:38:62:61:b7:b6:3d:57:f5:
50:80:44:cb:ec:7c:93:3c:59:3f:6b:60:5f:bc:9f:5b:5c:4b:
f2:5d:8c:81:1a:a7:be:01:08:f1:18:40:e7:0f:34:11:7a:2f:
19:97:3a:20:eb:0f:d2:94:ef:cc:36:df:fe:c6:74:a4:91:15:
c4:8f:5b:14:ee:53:2f:1c:84:10:31:f8:c4:e0:b8:84:60:11:
77:1f:ae:11:d8:ee:8c:4f:f4:62:e7:06:16:0b:af:e2:c8:5f:
df:ae:20:8b:06:3f:4c:5a:cc:61:16:61:1f:e4:78:40:72:ba:
2d:f9:03:9d:58:23:44:67:09:fe:d6:5f:3f:54:e4:8e:ca:4e:
27:c9:04:40:26:0d:53:82:13:58:43:9d:82:b6:63:38:da:46:
e8:41:cb:ba:fb:9d:cb:44:d7:d8:39:e4:07:57:bd:32:49:7e:
ac:05:1e:12:7c:a1:86:d6:98:06:d6:79:6b:a1:90:9d:d5:06:
19:ef:8d:3e:27:64:8d:e2:49:97:ef:78:0c:2d:79:56:86:ba:
39:a1:ad:c8:39:dc:13:18:de:04:6b:39:3f:21:20:32:1a:f8:
ef:c4:ee:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 00:28:26 2024 by rpki-client on console-fra.rpki-client.org