Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/AIKzjtnyf9PYt7rN9uFhOi7701w.roa
File: AIKzjtnyf9PYt7rN9uFhOi7701w.roa (raw, json)
Hash identifier: KMUO7QLzVB5FzyR5Rb6lHz4hobw6OqO4jbn5mAMr/LA=
Subject key identifier: 00:82:B3:8E:D9:F2:7F:D3:D8:B7:BA:CD:F6:E1:61:3A:2E:FB:D3:5C
Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Certificate serial: 01933F014C5228497E7291751CD38CB5F503
Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/AIKzjtnyf9PYt7rN9uFhOi7701w.roa
Signing time: Mon 18 Nov 2024 11:21:09 +0000
ROA not before: Mon 18 Nov 2024 11:21:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34450
IP address blocks: 85.204.125.0/24 maxlen: 24
86.106.80.0/24 maxlen: 24
86.106.104.0/24 maxlen: 24
89.34.8.0/21 maxlen: 21
89.37.136.0/24 maxlen: 24
89.43.45.0/24 maxlen: 24
89.43.46.0/24 maxlen: 24
89.44.209.0/24 maxlen: 24
93.113.158.0/24 maxlen: 24
93.114.55.0/24 maxlen: 24
93.114.99.0/24 maxlen: 24
93.114.171.0/24 maxlen: 24
188.213.18.0/24 maxlen: 24
188.215.72.0/23 maxlen: 24
188.215.73.0/24 maxlen: 24
188.215.95.0/24 maxlen: 24
188.240.14.0/24 maxlen: 24
2a05:b680:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 23:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:3f:01:4c:52:28:49:7e:72:91:75:1c:d3:8c:b5:f5:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Validity
Not Before: Nov 18 11:21:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0082b38ed9f27fd3d8b7bacdf6e1613a2efbd35c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:e3:fc:99:52:76:9f:ce:d3:6f:99:48:03:e0:
26:b9:6f:29:40:60:e2:6a:34:b1:b7:80:30:53:a9:
7c:31:fc:61:48:23:8f:7c:29:0f:6b:5e:6b:b8:b0:
da:54:2e:ab:46:ea:01:66:92:58:62:a5:6b:b8:dd:
52:bc:0f:ec:7c:35:91:ca:82:d3:18:c5:00:8c:4f:
db:9c:91:a3:a2:45:6c:3a:97:30:d1:18:2f:86:7c:
b5:63:88:e9:d9:71:4b:db:f3:89:48:1a:d7:ca:ef:
15:3b:5b:35:4a:11:47:5f:c1:3a:29:82:72:bf:3a:
81:0c:e3:20:2c:f9:cc:e1:d1:47:49:3c:bb:be:f2:
65:92:83:20:08:78:b4:a3:69:53:92:1d:8f:e4:29:
a6:8c:6d:0d:70:7b:d2:27:52:ee:96:f7:b8:2b:96:
b2:a1:a4:60:af:f6:34:7d:f0:82:b0:cf:d3:25:37:
68:94:22:36:9a:c5:4c:90:12:70:7f:18:61:8f:3d:
89:0f:4a:6e:7b:ea:13:d7:4d:32:d5:31:e4:3c:12:
99:d3:ba:4e:36:db:74:2a:8e:82:5f:e6:97:a6:53:
98:cf:a9:26:26:97:8e:67:e3:ad:5b:4a:96:40:13:
f5:f6:7f:8d:ed:66:e9:a7:65:61:8e:2a:69:f8:70:
91:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:82:B3:8E:D9:F2:7F:D3:D8:B7:BA:CD:F6:E1:61:3A:2E:FB:D3:5C
X509v3 Authority Key Identifier:
keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/AIKzjtnyf9PYt7rN9uFhOi7701w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.204.125.0/24
86.106.80.0/24
86.106.104.0/24
89.34.8.0/21
89.37.136.0/24
89.43.45.0-89.43.46.255
89.44.209.0/24
93.113.158.0/24
93.114.55.0/24
93.114.99.0/24
93.114.171.0/24
188.213.18.0/24
188.215.72.0/23
188.215.95.0/24
188.240.14.0/24
IPv6:
2a05:b680:1::/48
Signature Algorithm: sha256WithRSAEncryption
33:5d:4f:a0:46:ed:e0:96:19:17:17:bc:4f:4d:07:1f:2e:c4:
f5:9e:0e:f0:64:e5:ea:37:5f:de:a6:59:75:5c:bd:74:6d:87:
e6:a9:bc:b3:fb:88:d5:48:a5:f8:4e:12:70:52:99:fb:e0:b5:
8a:aa:af:74:fc:eb:b3:95:19:ac:22:04:e9:2b:35:aa:c6:a4:
d6:54:4f:cc:f6:3b:91:67:91:a6:9c:bd:cb:72:69:af:c4:1c:
c4:14:b9:18:2c:54:17:8a:75:a8:fd:9c:d3:68:5e:a3:0a:d8:
06:10:53:69:82:cc:81:6e:be:bf:3e:5f:32:96:fa:8b:95:55:
1a:77:ff:ae:65:90:de:37:b1:5d:ad:7d:0e:2a:64:2a:45:67:
a9:c1:ef:17:f0:18:f2:a6:bc:26:1d:35:a5:d5:67:d7:2b:28:
f4:22:f4:90:86:08:ee:74:3b:5b:40:05:54:a7:54:75:b6:0c:
90:9c:dc:71:4a:d3:63:89:3f:36:6d:68:16:0a:30:b4:f7:b1:
ef:c1:eb:68:1f:f9:6f:aa:b3:ab:bf:5a:b2:bb:46:c3:9b:7a:
c8:89:80:a4:60:74:c7:16:43:52:49:9b:92:6d:26:b9:a1:66:
fe:ed:82:f3:bf:50:a3:cb:80:ad:1f:37:9b:10:04:27:f5:e2:
7a:3e:8e:73
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Nov 26 02:54:46 2024 by rpki-client on console-fra.rpki-client.org