Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/xzscnoo2KqefZ6wW1bGLGJhonAI.roa
File: xzscnoo2KqefZ6wW1bGLGJhonAI.roa (raw, json)
Hash identifier: wrfPop2Q8NokpNpPgAN+Qz6dw0qxNF15SCvDyOZr4FY=
Subject key identifier: C7:3B:1C:9E:8A:36:2A:A7:9F:67:AC:16:D5:B1:8B:18:98:68:9C:02
Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Certificate serial: 018CC94DAD3B1010313F1D90F7CD7A2796A5
Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/xzscnoo2KqefZ6wW1bGLGJhonAI.roa
Signing time: Tue 02 Jan 2024 08:32:40 +0000
ROA not before: Tue 02 Jan 2024 08:32:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50563
IP address blocks: 89.46.140.0/24 maxlen: 24
88.148.115.0/24 maxlen: 24
89.46.140.0/23 maxlen: 23
89.46.141.0/24 maxlen: 24
88.148.53.0/24 maxlen: 24
88.148.52.0/23 maxlen: 23
88.148.52.0/24 maxlen: 24
176.56.116.0/24 maxlen: 24
94.76.171.0/24 maxlen: 24
5.154.44.0/24 maxlen: 24
176.227.145.0/24 maxlen: 24
178.156.121.0/24 maxlen: 24
5.154.0.0/24 maxlen: 24
84.236.143.0/24 maxlen: 24
94.76.141.0/24 maxlen: 24
94.76.146.0/24 maxlen: 24
178.156.57.0/24 maxlen: 24
185.27.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 02:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:ad:3b:10:10:31:3f:1d:90:f7:cd:7a:27:96:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Validity
Not Before: Jan 2 08:32:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c73b1c9e8a362aa79f67ac16d5b18b1898689c02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:cc:01:8b:f8:20:71:b4:4f:fd:24:ce:23:0d:
39:7b:d9:f0:72:bd:77:67:d3:93:fc:f3:41:d0:3c:
b3:40:b3:41:b0:8d:f5:c3:4c:58:3e:9d:1c:1b:cd:
da:c6:e5:cd:60:67:e9:a8:57:17:b9:de:ec:05:40:
ab:e7:dc:a4:da:b2:39:66:b2:28:e8:44:23:8a:48:
47:5b:89:b5:7d:cc:5e:a4:70:18:74:75:78:0a:7b:
b9:87:ab:d4:72:37:3e:ca:57:3f:c8:f2:a3:d4:9c:
52:bf:41:81:bb:1b:1c:ed:3c:45:f8:00:7d:9a:cc:
6c:3e:85:ff:79:83:8b:45:82:f2:99:8f:35:9b:b6:
fa:94:e3:d2:de:70:64:6f:0d:61:21:54:23:90:40:
8f:d5:eb:a8:c5:7d:e5:a0:b0:b7:ef:b7:8d:76:99:
ec:25:44:f5:c2:24:11:1b:35:85:00:dc:bb:f5:82:
8a:58:fe:16:6b:99:94:18:38:23:4d:36:94:23:44:
77:ed:03:e1:53:3e:d1:4b:81:37:84:34:22:80:ec:
ad:b0:17:96:e4:37:75:7b:a9:58:3d:e8:35:ca:e6:
ff:26:b6:ad:c6:60:7d:fd:fb:d8:aa:63:9e:2c:50:
20:33:0f:a2:85:83:df:f8:2e:08:65:98:b4:ef:f5:
ba:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:3B:1C:9E:8A:36:2A:A7:9F:67:AC:16:D5:B1:8B:18:98:68:9C:02
X509v3 Authority Key Identifier:
keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/xzscnoo2KqefZ6wW1bGLGJhonAI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.154.0.0/24
5.154.44.0/24
84.236.143.0/24
88.148.52.0/23
88.148.115.0/24
89.46.140.0/23
94.76.141.0/24
94.76.146.0/24
94.76.171.0/24
176.56.116.0/24
176.227.145.0/24
178.156.57.0/24
178.156.121.0/24
185.27.125.0/24
Signature Algorithm: sha256WithRSAEncryption
98:62:ad:a5:ad:e2:f9:6b:c7:2e:fb:ed:63:4a:25:2b:2b:04:
8e:1e:8d:60:3b:f4:b5:26:72:07:55:a2:55:16:a5:fb:f5:53:
45:40:46:77:51:91:f8:46:c9:c9:90:2d:fa:f8:04:46:50:4e:
98:f6:05:3e:9e:25:d1:95:33:aa:7f:82:2a:56:97:f8:75:66:
c7:fb:41:41:f7:c8:1e:98:89:be:b5:67:c5:93:25:ff:07:6c:
d8:e5:76:0e:ef:81:a4:9b:f1:a5:a6:62:9a:a0:f5:45:bb:23:
82:73:86:29:b9:96:33:64:24:ac:0d:b8:a7:92:b8:45:ee:bd:
40:1b:a7:aa:ec:1e:94:81:76:7f:ca:50:e3:1f:02:c7:72:b4:
e3:4f:fa:a0:84:7b:8d:8d:b1:60:5d:d4:79:07:05:1b:a8:b5:
c7:f9:aa:a5:dc:2c:8a:56:6c:53:7e:78:b3:62:e5:e7:c1:b9:
b8:b1:87:03:ff:48:1b:6a:b9:da:6b:b3:fb:2b:ca:21:22:a3:
95:8c:de:de:4b:83:41:3a:55:0a:dc:67:5e:35:c3:00:18:74:
e7:e1:22:a7:21:5d:69:e8:cf:d9:d7:10:ad:cc:36:ac:92:54:
88:0a:85:ec:20:a0:4d:3f:94:4b:7a:7d:cf:55:b5:91:ca:fe:
fc:ff:23:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 05:34:13 2024 by rpki-client on console-fra.rpki-client.org