Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/5d6255-65c9-4bfa-b9d7-f657519d0233/1/dHE7kYPG4P0iIbvjRIT14Yy64ow.roa
File: dHE7kYPG4P0iIbvjRIT14Yy64ow.roa (raw, json)
Hash identifier: mGNFjttYm0QKdE1gDU9lQA7DFxjIXfreYbi6DUq+xys=
Subject key identifier: 74:71:3B:91:83:C6:E0:FD:22:21:BB:E3:44:84:F5:E1:8C:BA:E2:8C
Certificate issuer: /CN=64dfe26d403141be9059ab2144325b402d4cab7d
Certificate serial: 018F95DBDAAC8ADD5E72A35291E5A10B398F
Authority key identifier: 64:DF:E2:6D:40:31:41:BE:90:59:AB:21:44:32:5B:40:2D:4C:AB:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZN_ibUAxQb6QWashRDJbQC1Mq30.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/5d6255-65c9-4bfa-b9d7-f657519d0233/1/dHE7kYPG4P0iIbvjRIT14Yy64ow.roa
Signing time: Mon 20 May 2024 11:56:04 +0000
ROA not before: Mon 20 May 2024 11:56:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57588
IP address blocks: 176.241.80.0/20 maxlen: 20
176.241.80.0/22 maxlen: 22
176.241.80.0/24 maxlen: 24
176.241.81.0/24 maxlen: 24
176.241.82.0/24 maxlen: 24
176.241.83.0/24 maxlen: 24
176.241.84.0/23 maxlen: 23
176.241.84.0/24 maxlen: 24
176.241.85.0/24 maxlen: 24
176.241.86.0/24 maxlen: 24
176.241.87.0/24 maxlen: 24
176.241.88.0/22 maxlen: 22
176.241.88.0/24 maxlen: 24
176.241.89.0/24 maxlen: 24
176.241.90.0/24 maxlen: 24
176.241.91.0/24 maxlen: 24
176.241.92.0/22 maxlen: 22
176.241.92.0/24 maxlen: 24
176.241.93.0/24 maxlen: 24
176.241.94.0/24 maxlen: 24
176.241.95.0/24 maxlen: 24
185.129.4.0/22 maxlen: 22
185.129.4.0/23 maxlen: 23
185.129.4.0/24 maxlen: 24
185.129.5.0/24 maxlen: 24
185.129.6.0/23 maxlen: 23
185.129.6.0/24 maxlen: 24
185.129.7.0/24 maxlen: 24
2a0d:d680::/29 maxlen: 29
2a0d:d680::/48 maxlen: 48
2a0d:d680:1::/48 maxlen: 48
2a0d:d680:a::/48 maxlen: 48
2a0d:d680:10::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/5d6255-65c9-4bfa-b9d7-f657519d0233/1/ZN_ibUAxQb6QWashRDJbQC1Mq30.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/5d6255-65c9-4bfa-b9d7-f657519d0233/1/ZN_ibUAxQb6QWashRDJbQC1Mq30.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZN_ibUAxQb6QWashRDJbQC1Mq30.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 23:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:95:db:da:ac:8a:dd:5e:72:a3:52:91:e5:a1:0b:39:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64dfe26d403141be9059ab2144325b402d4cab7d
Validity
Not Before: May 20 11:56:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=74713b9183c6e0fd2221bbe34484f5e18cbae28c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a6:b8:6f:fa:8b:de:40:92:f3:7e:4b:bf:83:
54:ae:dc:58:47:8e:80:b5:76:75:25:7e:cd:45:7e:
9a:96:50:87:ea:a3:f7:3b:cd:9e:9b:ca:ba:49:b7:
cf:07:5d:8f:f1:77:32:8f:7e:2f:a2:94:eb:c3:c8:
a8:b9:e7:1b:24:52:1e:9b:d8:c6:4c:74:94:ec:25:
63:36:5c:09:6d:62:10:4f:4a:ab:ad:0d:6b:d6:eb:
c0:1e:90:ac:a9:c6:d8:c3:ed:1d:41:27:0a:48:23:
80:50:08:0e:2c:09:05:cc:0c:34:f7:10:88:95:20:
ab:b0:c5:3b:ff:41:b8:e1:23:a9:01:8e:ed:0a:71:
bf:05:88:bd:21:a7:9b:dc:eb:eb:c0:bf:28:7b:40:
e8:cb:27:c8:bf:86:01:fb:23:a8:e0:87:2d:b1:da:
e5:5a:c3:84:27:58:b8:cb:2c:96:e4:24:f0:54:8c:
4c:1a:e2:7c:91:71:5e:90:18:8e:0b:8c:80:13:a4:
03:6b:c3:de:d4:c2:db:42:28:60:b9:93:da:62:ab:
fc:76:d6:4d:8f:ae:61:25:e6:57:7f:5c:bd:3c:97:
fd:63:4a:05:8f:f1:ec:f3:f6:95:55:e5:14:4b:21:
89:91:b9:97:15:46:55:1d:12:05:99:46:b4:e7:5e:
95:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:71:3B:91:83:C6:E0:FD:22:21:BB:E3:44:84:F5:E1:8C:BA:E2:8C
X509v3 Authority Key Identifier:
keyid:64:DF:E2:6D:40:31:41:BE:90:59:AB:21:44:32:5B:40:2D:4C:AB:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZN_ibUAxQb6QWashRDJbQC1Mq30.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/5d6255-65c9-4bfa-b9d7-f657519d0233/1/dHE7kYPG4P0iIbvjRIT14Yy64ow.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/5d6255-65c9-4bfa-b9d7-f657519d0233/1/ZN_ibUAxQb6QWashRDJbQC1Mq30.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.241.80.0/20
185.129.4.0/22
IPv6:
2a0d:d680::/29
Signature Algorithm: sha256WithRSAEncryption
85:16:cd:a8:f5:66:fe:ce:1d:51:53:9c:67:86:d4:0b:6d:1d:
87:de:57:f7:b5:93:d7:c5:49:d0:9f:ec:f1:fb:f6:95:60:5e:
0b:2f:25:00:c9:09:76:81:8e:27:3a:b1:c2:8a:d6:a0:37:e9:
4d:8b:ee:2a:a0:50:54:14:6d:5c:73:bf:6b:91:8c:f7:1c:0c:
88:5d:7a:cb:dc:65:fa:c3:9b:15:b6:07:35:d9:c8:ca:66:f5:
46:ce:da:35:95:2a:fe:0d:f7:cb:72:91:41:14:57:62:56:07:
06:1e:4e:1e:ad:eb:a9:11:c4:e2:9b:98:f7:c7:c4:1f:88:ac:
b0:d8:98:d3:bc:39:20:8b:29:01:06:74:a1:a2:98:02:a2:f9:
8e:80:d4:76:ce:d7:4e:f0:a6:5a:e3:31:58:67:29:c8:fb:83:
ea:61:d1:a1:23:3e:06:83:6e:3d:27:74:d4:34:af:82:53:5b:
2a:1d:31:f1:bc:b1:9c:2d:15:ce:9d:af:d4:37:19:02:d1:aa:
f5:9f:b7:06:fc:8b:bf:aa:15:ad:7a:de:b9:f5:4f:bd:cb:74:
ae:66:a1:75:0a:8b:1e:1f:ee:d2:56:f9:ad:bb:52:eb:1f:14:
ed:87:a4:82:f4:ce:e0:13:36:cf:c5:c0:c4:a4:7c:6f:79:35:
56:9b:f4:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 05:08:30 2024 by rpki-client on console-fra.rpki-client.org