Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/m0ZQwnF9zYYp2SxcvMJr3-WU9gY.roa
File: m0ZQwnF9zYYp2SxcvMJr3-WU9gY.roa (raw, json)
Hash identifier: JSbToSZJly2SYlpwaxwXw9ITfEP5DvJE1AN731ZPER4=
Subject key identifier: 9B:46:50:C2:71:7D:CD:86:29:D9:2C:5C:BC:C2:6B:DF:E5:94:F6:06
Certificate issuer: /CN=0d4ee193b301665b56f6780f225fd44d144093af
Certificate serial: 018CCA2B02E827C0B2A96CA949DB5D44AB98
Authority key identifier: 0D:4E:E1:93:B3:01:66:5B:56:F6:78:0F:22:5F:D4:4D:14:40:93:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DU7hk7MBZltW9ngPIl_UTRRAk68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/m0ZQwnF9zYYp2SxcvMJr3-WU9gY.roa
Signing time: Tue 02 Jan 2024 12:34:25 +0000
ROA not before: Tue 02 Jan 2024 12:34:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1930
IP address blocks: 194.210.0.0/16 maxlen: 24
194.117.16.0/21 maxlen: 21
193.236.160.0/20 maxlen: 20
193.236.178.0/23 maxlen: 23
193.236.180.0/22 maxlen: 22
193.236.184.0/21 maxlen: 21
194.117.40.0/21 maxlen: 21
193.236.192.0/18 maxlen: 18
194.117.48.0/23 maxlen: 23
192.122.240.0/23 maxlen: 23
192.122.238.0/23 maxlen: 23
193.136.0.0/15 maxlen: 24
193.236.0.0/20 maxlen: 20
192.122.242.0/24 maxlen: 24
193.236.112.0/21 maxlen: 21
193.236.124.0/22 maxlen: 22
194.117.0.0/20 maxlen: 20
193.236.153.0/24 maxlen: 24
193.236.157.0/24 maxlen: 24
193.236.158.0/23 maxlen: 23
193.236.154.0/23 maxlen: 23
139.83.0.0/16 maxlen: 16
185.175.184.0/22 maxlen: 22
193.236.97.0/24 maxlen: 24
193.236.98.0/23 maxlen: 23
193.236.104.0/21 maxlen: 21
193.236.102.0/23 maxlen: 23
2001:690::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.mft
rsync://rpki.ripe.net/repository/DEFAULT/DU7hk7MBZltW9ngPIl_UTRRAk68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:02:e8:27:c0:b2:a9:6c:a9:49:db:5d:44:ab:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d4ee193b301665b56f6780f225fd44d144093af
Validity
Not Before: Jan 2 12:34:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9b4650c2717dcd8629d92c5cbcc26bdfe594f606
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:e7:f7:5d:7f:48:6f:19:79:3c:6d:88:f5:de:
68:d0:38:bc:3c:0a:90:82:62:6c:a2:cf:9a:e9:c9:
8f:1c:7d:12:d0:a8:71:73:fa:6f:d3:2c:1b:63:7d:
ec:73:92:88:1a:69:76:70:91:24:13:79:2e:b1:f0:
c9:77:ed:4d:4d:be:71:8e:64:fa:ef:c1:d6:41:57:
fa:95:d5:19:f0:85:04:ca:5c:7b:79:61:b8:3a:e1:
df:fa:5f:9c:ca:5c:42:37:f8:9e:95:f2:06:1f:89:
17:42:60:8f:41:48:61:08:1b:a6:f0:cd:15:1c:d3:
d6:b3:bd:18:59:4c:22:24:98:96:1e:e4:f4:9a:ee:
e7:52:bf:02:c7:a1:f0:46:5e:48:39:f4:7c:2a:98:
6e:18:ee:f0:5e:d4:a3:3b:d9:ee:7b:1d:08:85:ed:
ce:8c:52:09:27:ad:9e:00:1d:80:90:6c:b5:5e:eb:
f5:dd:3f:2b:99:36:3a:76:6e:7a:d2:43:4f:31:58:
11:32:8d:de:d9:7c:53:42:41:e1:41:59:21:74:f6:
48:0c:b1:fa:ef:38:91:d2:a5:c5:2f:c9:3b:d5:73:
d3:2f:e0:8e:fa:3e:f4:2f:58:aa:15:d3:f5:d0:ae:
85:7e:64:58:b1:4d:28:0d:91:d4:23:d7:0e:38:32:
21:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:46:50:C2:71:7D:CD:86:29:D9:2C:5C:BC:C2:6B:DF:E5:94:F6:06
X509v3 Authority Key Identifier:
keyid:0D:4E:E1:93:B3:01:66:5B:56:F6:78:0F:22:5F:D4:4D:14:40:93:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DU7hk7MBZltW9ngPIl_UTRRAk68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/m0ZQwnF9zYYp2SxcvMJr3-WU9gY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.83.0.0/16
185.175.184.0/22
192.122.238.0-192.122.242.255
193.136.0.0/15
193.236.0.0/20
193.236.97.0-193.236.99.255
193.236.102.0-193.236.119.255
193.236.124.0/22
193.236.153.0-193.236.155.255
193.236.157.0-193.236.175.255
193.236.178.0-193.236.255.255
194.117.0.0-194.117.23.255
194.117.40.0-194.117.49.255
194.210.0.0/16
IPv6:
2001:690::/32
Signature Algorithm: sha256WithRSAEncryption
26:55:df:3f:b8:2a:29:11:33:c7:2b:6b:1f:9f:48:83:27:28:
dd:56:36:12:e9:ba:2d:a6:f6:30:1f:62:d7:1f:b3:34:c0:b1:
51:70:1a:ad:13:f3:b7:aa:07:34:35:1a:1e:37:39:6d:2e:cc:
ef:0a:7e:38:f7:63:d8:88:3a:0f:85:27:84:cc:5a:c5:48:49:
73:ee:61:01:e9:50:66:c3:f9:77:70:fa:81:80:69:b2:f3:bb:
bb:05:cb:84:69:67:dd:b0:41:08:01:89:10:d7:ef:23:b1:7d:
97:ed:01:f7:da:d4:99:b8:65:32:02:ac:49:32:32:32:a5:bf:
52:6b:f8:e7:94:dc:91:b6:8a:bc:5d:fd:6c:1c:4d:cd:df:af:
51:32:09:93:1b:60:aa:b8:ef:e7:2d:fd:ff:e0:1e:5a:d3:36:
4c:7c:cb:e0:8c:c7:51:98:d9:66:15:ef:a8:04:81:29:39:28:
48:b8:70:c7:9f:07:5d:6b:12:2d:d4:3e:99:86:7e:e9:8b:b2:
6e:25:89:e7:23:fb:a7:49:38:b8:e5:be:8b:22:9b:a9:12:ca:
dd:2c:7d:ab:78:0f:a6:b9:fb:ec:43:0f:61:79:d7:63:a5:52:
bd:14:e1:f0:cd:ea:83:eb:53:22:a6:3f:a9:6e:16:38:3a:45:
22:09:4f:7e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Nov 23 04:42:09 2024 by rpki-client on console-ams.rpki-client.org