Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/FGB6n3EUCW2arWTfRt93nLZJDlw.roa
File: FGB6n3EUCW2arWTfRt93nLZJDlw.roa (raw, json)
Hash identifier: OoeTCc+KrbDUwl31/Kzx/9WebhTynupRZzvft8SEmOA=
Subject key identifier: 14:60:7A:9F:71:14:09:6D:9A:AD:64:DF:46:DF:77:9C:B6:49:0E:5C
Certificate issuer: /CN=a8e4918fc7fdfb73bba8cf58d4cb5fe449cf83f6
Certificate serial: 0191FB8786FEC949488E3791BFD7C85BF08F
Authority key identifier: A8:E4:91:8F:C7:FD:FB:73:BB:A8:CF:58:D4:CB:5F:E4:49:CF:83:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/FGB6n3EUCW2arWTfRt93nLZJDlw.roa
Signing time: Mon 16 Sep 2024 15:50:48 +0000
ROA not before: Mon 16 Sep 2024 15:50:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20773
IP address blocks: 37.61.208.0/20 maxlen: 24
37.61.212.0/24 maxlen: 24
37.61.214.0/24 maxlen: 24
37.61.215.0/24 maxlen: 24
37.61.221.0/24 maxlen: 24
37.61.223.0/24 maxlen: 24
78.138.96.0/21 maxlen: 24
78.138.97.0/24 maxlen: 24
78.138.104.0/22 maxlen: 24
78.138.126.0/23 maxlen: 24
85.195.64.0/18 maxlen: 24
85.195.75.0/24 maxlen: 24
85.195.76.0/24 maxlen: 24
85.195.82.0/24 maxlen: 24
85.195.83.0/24 maxlen: 24
85.195.85.0/24 maxlen: 24
85.195.86.0/24 maxlen: 24
85.195.88.0/24 maxlen: 24
85.195.89.0/24 maxlen: 24
85.195.90.0/24 maxlen: 24
85.195.91.0/24 maxlen: 24
85.195.92.0/24 maxlen: 24
85.195.93.0/24 maxlen: 24
85.195.95.0/24 maxlen: 24
85.195.96.0/24 maxlen: 24
85.195.98.0/24 maxlen: 24
85.195.99.0/24 maxlen: 24
85.195.100.0/24 maxlen: 24
85.195.102.0/24 maxlen: 24
85.195.103.0/24 maxlen: 24
85.195.107.0/24 maxlen: 24
85.195.109.0/24 maxlen: 24
85.195.110.0/24 maxlen: 24
85.195.114.0/24 maxlen: 24
85.195.115.0/24 maxlen: 24
85.195.116.0/24 maxlen: 24
85.195.119.0/24 maxlen: 24
85.195.120.0/24 maxlen: 24
85.195.124.0/24 maxlen: 24
85.195.127.0/24 maxlen: 24
87.119.195.0/24 maxlen: 24
87.119.220.0/22 maxlen: 24
92.42.104.0/21 maxlen: 24
92.204.160.0/19 maxlen: 24
92.204.162.0/24 maxlen: 24
92.204.186.0/24 maxlen: 24
92.204.194.0/23 maxlen: 24
92.204.240.0/20 maxlen: 24
92.205.32.0/21 maxlen: 24
92.205.112.0/20 maxlen: 24
92.205.152.0/22 maxlen: 24
134.119.182.0/24 maxlen: 24
134.119.207.0/24 maxlen: 24
146.0.224.0/19 maxlen: 24
146.0.226.0/24 maxlen: 24
146.0.227.0/24 maxlen: 24
146.0.228.0/24 maxlen: 24
146.0.230.0/24 maxlen: 24
146.0.232.0/24 maxlen: 24
146.0.234.0/24 maxlen: 24
146.0.235.0/24 maxlen: 24
146.0.236.0/24 maxlen: 24
146.0.237.0/24 maxlen: 24
146.0.245.0/24 maxlen: 24
146.0.247.0/24 maxlen: 24
146.0.249.0/24 maxlen: 24
146.0.250.0/24 maxlen: 24
146.0.251.0/24 maxlen: 24
146.0.255.0/24 maxlen: 24
151.106.14.0/24 maxlen: 24
151.106.31.0/24 maxlen: 24
151.106.57.0/24 maxlen: 24
185.19.216.0/22 maxlen: 24
185.19.216.0/24 maxlen: 24
185.19.217.0/24 maxlen: 24
185.19.218.0/24 maxlen: 24
185.19.219.0/24 maxlen: 24
185.136.156.0/22 maxlen: 24
185.136.158.0/24 maxlen: 24
185.136.160.0/21 maxlen: 24
185.136.160.0/22 maxlen: 24
185.136.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:fb:87:86:fe:c9:49:48:8e:37:91:bf:d7:c8:5b:f0:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8e4918fc7fdfb73bba8cf58d4cb5fe449cf83f6
Validity
Not Before: Sep 16 15:50:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=14607a9f7114096d9aad64df46df779cb6490e5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:aa:e7:ed:c1:64:2f:d7:73:54:8c:55:ea:09:
b7:d8:90:3b:fd:b4:31:ac:a6:f0:f5:89:f3:8e:6e:
5a:be:0d:6d:19:f2:9c:2f:c2:94:72:25:82:56:fa:
9f:86:f7:b9:58:8a:bc:93:7c:a2:50:02:d6:2a:d9:
01:05:2b:0b:5b:70:49:c4:10:b9:b7:19:af:f1:42:
08:a3:49:81:29:bf:0b:55:ff:67:a5:d1:1c:21:9f:
0b:e2:c4:46:32:27:77:da:93:c2:71:28:cf:76:1b:
74:7a:37:fb:bb:a3:db:74:21:a6:d6:5d:dc:6f:cb:
af:57:05:7d:c8:93:f5:50:5c:6f:59:7c:6c:98:22:
42:8c:c0:07:a1:fc:62:df:b7:30:3a:2d:fe:1a:a2:
96:9b:38:c4:7e:98:e7:fb:9d:37:c6:13:a4:13:43:
07:c2:5e:8a:9b:63:6d:4c:4e:08:09:71:54:95:79:
46:0e:d9:67:51:cf:22:07:d3:1a:a7:e4:fa:cc:db:
80:ae:ae:52:9e:dd:ca:9a:9d:c7:2f:7b:9a:be:b7:
2d:3f:be:54:2d:9b:13:18:46:96:ff:a1:26:df:8f:
53:db:7d:7e:2f:be:88:19:fd:9b:60:2b:f3:c1:e7:
f2:0e:b6:81:4c:4e:e7:52:06:d7:60:53:1b:68:70:
d8:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:60:7A:9F:71:14:09:6D:9A:AD:64:DF:46:DF:77:9C:B6:49:0E:5C
X509v3 Authority Key Identifier:
keyid:A8:E4:91:8F:C7:FD:FB:73:BB:A8:CF:58:D4:CB:5F:E4:49:CF:83:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/FGB6n3EUCW2arWTfRt93nLZJDlw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.61.208.0/20
78.138.96.0-78.138.107.255
78.138.126.0/23
85.195.64.0/18
87.119.195.0/24
87.119.220.0/22
92.42.104.0/21
92.204.160.0/19
92.204.194.0/23
92.204.240.0/20
92.205.32.0/21
92.205.112.0/20
92.205.152.0/22
134.119.182.0/24
134.119.207.0/24
146.0.224.0/19
151.106.14.0/24
151.106.31.0/24
151.106.57.0/24
185.19.216.0/22
185.136.156.0-185.136.167.255
Signature Algorithm: sha256WithRSAEncryption
7d:cb:1a:86:09:65:33:23:5b:f4:af:a4:55:a8:e8:3a:bb:17:
85:e0:13:74:5a:ba:75:4d:19:9c:08:89:9d:07:4e:19:de:a3:
be:67:82:11:4c:52:52:f0:75:47:3f:b5:ba:e0:4b:38:b9:ba:
ba:97:21:e8:6c:10:f6:91:10:0f:be:4b:e3:d1:03:3b:7c:de:
d9:70:4c:8d:aa:9e:47:a3:d4:d7:8e:aa:73:d6:40:fc:a1:68:
73:c4:2d:19:0f:a3:b7:f0:c9:13:5e:f2:e6:a4:05:18:69:e7:
d2:44:75:9e:ed:93:c6:0c:b3:8e:6c:f4:09:33:50:f6:93:93:
0c:5a:55:29:94:e0:dc:bf:42:09:a3:43:ad:1d:d6:ff:ab:2e:
ea:51:4b:db:f2:16:85:73:44:9a:09:58:3c:d4:f7:6d:f0:f3:
c4:16:18:e7:54:54:b6:12:a3:9a:b6:f4:f7:f1:3c:64:f6:01:
b2:f4:ed:2e:df:8b:6e:d5:21:66:b7:85:e4:0c:e8:8c:73:a4:
a5:06:33:5c:25:04:d5:ec:02:d2:1c:f6:e6:fb:fd:58:15:d2:
13:26:9f:9e:99:f3:4b:56:7b:95:5b:99:99:da:25:0c:85:f4:
47:83:9b:06:e6:d3:62:7e:19:58:4a:85:00:b9:fd:bd:8a:88:
e1:40:fd:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 22:26:15 2024 by rpki-client on console-fra.rpki-client.org