Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/96wO8g7v8gxNe_4T3eVvQ2qj7Pk.roa
File: 96wO8g7v8gxNe_4T3eVvQ2qj7Pk.roa (raw, json)
Hash identifier: Fq8WtnXQuqPxQ1KmsK8tDzLPJqQSAnm6/ikWWD6178k=
Subject key identifier: F7:AC:0E:F2:0E:EF:F2:0C:4D:7B:FE:13:DD:E5:6F:43:6A:A3:EC:F9
Certificate issuer: /CN=666034ca6a16bbd0144abdf5cf2458f968b1589c
Certificate serial: 019107E74CC27ED0E5DCBB6C300D2EAAFB4F
Authority key identifier: 66:60:34:CA:6A:16:BB:D0:14:4A:BD:F5:CF:24:58:F9:68:B1:58:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZmA0ymoWu9AUSr31zyRY-WixWJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/96wO8g7v8gxNe_4T3eVvQ2qj7Pk.roa
Signing time: Wed 31 Jul 2024 08:28:04 +0000
ROA not before: Wed 31 Jul 2024 08:28:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34170
IP address blocks: 80.69.48.0/24 maxlen: 24
80.69.49.0/24 maxlen: 24
80.69.50.0/24 maxlen: 24
80.69.51.0/24 maxlen: 24
80.69.53.0/24 maxlen: 24
80.69.56.0/24 maxlen: 24
80.69.57.0/24 maxlen: 24
80.69.60.0/24 maxlen: 24
91.135.240.0/24 maxlen: 24
91.135.241.0/24 maxlen: 24
91.135.242.0/24 maxlen: 24
91.135.243.0/24 maxlen: 24
91.135.244.0/24 maxlen: 24
91.135.252.0/24 maxlen: 24
91.135.253.0/24 maxlen: 24
92.39.90.0/24 maxlen: 24
92.39.91.0/24 maxlen: 24
92.39.92.0/24 maxlen: 24
92.39.93.0/24 maxlen: 24
92.39.94.0/24 maxlen: 24
158.181.34.0/24 maxlen: 24
158.181.37.0/24 maxlen: 24
158.181.38.0/24 maxlen: 24
158.181.39.0/24 maxlen: 24
158.181.44.0/23 maxlen: 23
158.181.46.0/23 maxlen: 23
185.92.224.0/24 maxlen: 24
185.105.196.0/24 maxlen: 24
185.105.197.0/24 maxlen: 24
185.105.198.0/24 maxlen: 24
185.105.199.0/24 maxlen: 24
212.47.154.0/24 maxlen: 24
212.47.155.0/24 maxlen: 24
212.47.157.0/24 maxlen: 24
212.47.158.0/24 maxlen: 24
2a05:8200::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/ZmA0ymoWu9AUSr31zyRY-WixWJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/ZmA0ymoWu9AUSr31zyRY-WixWJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZmA0ymoWu9AUSr31zyRY-WixWJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 02:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:07:e7:4c:c2:7e:d0:e5:dc:bb:6c:30:0d:2e:aa:fb:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=666034ca6a16bbd0144abdf5cf2458f968b1589c
Validity
Not Before: Jul 31 08:28:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f7ac0ef20eeff20c4d7bfe13dde56f436aa3ecf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:57:d0:a4:e1:95:df:26:2f:d8:7a:db:b3:48:
c6:9c:6e:fc:24:6f:55:4d:12:bc:74:27:23:50:d2:
b1:56:ae:46:f9:45:58:7e:26:25:6f:8a:e1:12:ab:
cc:8e:3c:c0:64:77:49:f1:63:6e:4c:06:09:8d:bd:
2b:4d:c9:a5:1d:70:34:6a:79:dc:87:0e:32:ed:d5:
74:ea:97:61:0a:02:aa:cf:37:fa:67:1b:3b:a3:6d:
35:da:91:14:5d:ce:be:f3:3a:cc:52:6c:97:81:e9:
7f:9e:7a:72:9a:a5:d8:4f:11:43:d8:55:01:26:c3:
c8:82:8f:e5:c0:3d:9c:84:f7:87:ad:7b:a6:a6:1f:
6c:5f:4f:c1:18:c9:5a:9f:b5:11:c1:bf:69:2c:c7:
04:87:b1:49:fb:28:b2:08:d1:81:8b:ee:f6:20:87:
68:c3:31:92:d6:37:e0:ef:19:0b:4c:30:b4:c0:c5:
40:9c:a0:83:46:0e:e2:63:ec:0a:db:85:81:97:85:
33:f1:ed:92:27:ed:0d:de:fa:91:c5:8f:65:44:b1:
0d:52:0d:63:ba:4b:f3:85:0b:81:ba:9c:e8:35:a3:
92:ac:5f:58:68:bf:e3:f2:86:5a:9d:09:ff:ca:2d:
e2:63:62:0f:e7:07:a9:32:fb:cb:e6:d2:dd:93:47:
69:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:AC:0E:F2:0E:EF:F2:0C:4D:7B:FE:13:DD:E5:6F:43:6A:A3:EC:F9
X509v3 Authority Key Identifier:
keyid:66:60:34:CA:6A:16:BB:D0:14:4A:BD:F5:CF:24:58:F9:68:B1:58:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZmA0ymoWu9AUSr31zyRY-WixWJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/96wO8g7v8gxNe_4T3eVvQ2qj7Pk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/ZmA0ymoWu9AUSr31zyRY-WixWJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.69.48.0/22
80.69.53.0/24
80.69.56.0/23
80.69.60.0/24
91.135.240.0-91.135.244.255
91.135.252.0/23
92.39.90.0-92.39.94.255
158.181.34.0/24
158.181.37.0-158.181.39.255
158.181.44.0/22
185.92.224.0/24
185.105.196.0/22
212.47.154.0/23
212.47.157.0-212.47.158.255
IPv6:
2a05:8200::/29
Signature Algorithm: sha256WithRSAEncryption
90:90:04:d6:74:2f:a1:18:7c:f9:0e:d9:f1:dd:b3:a4:2f:55:
02:3f:5c:79:cc:47:17:93:c3:15:fb:ea:d0:8d:1b:ad:ae:67:
37:c7:66:d2:cd:51:a4:b0:4c:b6:a4:25:88:b9:66:25:35:d2:
9f:ac:a8:f6:df:45:11:d4:6d:21:41:2a:9f:14:9f:03:7f:02:
bd:83:b5:d2:8b:46:30:3d:a3:f1:6a:39:2c:8d:3d:35:72:77:
f4:4f:1b:ab:97:de:12:bf:3c:d2:73:15:ea:fd:45:db:bc:d9:
38:da:c5:9b:13:5e:9c:3b:19:a4:53:d4:d2:fb:19:02:48:a5:
e1:48:93:76:d2:cc:64:54:de:1c:2a:e3:d4:5b:a4:08:5b:d9:
19:db:27:48:01:ec:27:6e:12:5c:82:f6:d3:20:a1:cc:92:0a:
69:a4:6e:56:3d:94:96:bc:d4:7a:05:fa:6b:2c:3c:53:f7:d8:
ac:c5:8d:76:e7:d8:61:21:af:be:fd:33:7d:9f:ef:ad:87:c8:
c1:3b:43:ed:e0:e3:85:6b:4a:ff:37:c2:95:8a:a4:12:fb:8f:
d3:78:ca:cb:fb:7e:80:20:40:21:63:2a:1c:c8:8d:61:9b:a0:
7e:e2:4c:6d:7f:2c:5e:28:b5:4e:91:58:d8:68:bf:a3:23:ff:
fe:d3:d0:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:58:04 2024 by rpki-client on console-fra.rpki-client.org