Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/96fAu_tBcZF9NlTQA5k-6C7BZDc.roa
File: 96fAu_tBcZF9NlTQA5k-6C7BZDc.roa (raw, json)
Hash identifier: FQTZXX5NTTHiFClKd8ZBfISMp72+ZdMllC3SIOUK1dE=
Subject key identifier: F7:A7:C0:BB:FB:41:71:91:7D:36:54:D0:03:99:3E:E8:2E:C1:64:37
Certificate issuer: /CN=26a5aa918cbfeb3e12997f33890feb258907b343
Certificate serial: 018CC500E2566FF09DD01EDF5A2F492F0D3C
Authority key identifier: 26:A5:AA:91:8C:BF:EB:3E:12:99:7F:33:89:0F:EB:25:89:07:B3:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/96fAu_tBcZF9NlTQA5k-6C7BZDc.roa
Signing time: Mon 01 Jan 2024 12:30:18 +0000
ROA not before: Mon 01 Jan 2024 12:30:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58321
IP address blocks: 185.204.216.0/22 maxlen: 24
195.114.0.0/23 maxlen: 24
193.17.184.0/24 maxlen: 24
178.250.40.0/21 maxlen: 24
185.201.112.0/22 maxlen: 24
194.169.227.0/24 maxlen: 24
185.208.164.0/24 maxlen: 24
195.242.116.0/23 maxlen: 24
195.2.254.0/23 maxlen: 24
193.218.152.0/22 maxlen: 24
91.228.196.0/22 maxlen: 24
185.193.112.0/22 maxlen: 24
94.152.254.0/24 maxlen: 24
91.237.52.0/24 maxlen: 24
94.152.255.0/24 maxlen: 24
185.25.148.0/22 maxlen: 24
185.5.96.0/22 maxlen: 24
91.199.22.0/24 maxlen: 24
91.239.66.0/23 maxlen: 24
185.243.52.0/22 maxlen: 24
185.123.160.0/24 maxlen: 24
185.123.160.0/22 maxlen: 24
185.140.120.0/22 maxlen: 24
195.78.66.0/23 maxlen: 24
91.234.146.0/24 maxlen: 24
185.180.204.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 18:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:e2:56:6f:f0:9d:d0:1e:df:5a:2f:49:2f:0d:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26a5aa918cbfeb3e12997f33890feb258907b343
Validity
Not Before: Jan 1 12:30:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f7a7c0bbfb4171917d3654d003993ee82ec16437
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b2:b9:49:1b:5d:bf:73:7f:06:34:73:ae:ab:
e8:62:5c:25:bd:94:c4:e3:d3:e5:e7:55:0f:6c:7f:
b4:04:f5:8b:2e:d0:93:31:e9:7d:d4:8c:39:95:69:
40:a4:29:52:22:2d:94:f7:ba:08:b8:ed:f1:e3:6c:
58:49:da:c5:18:3b:e6:df:8c:8d:23:b2:11:99:22:
6c:d9:6e:ee:c9:24:94:59:af:de:93:d6:68:ca:1b:
0f:e6:e2:10:15:d5:96:41:3f:8d:ff:59:ff:34:d9:
da:10:d6:95:a0:25:98:5b:3c:95:ce:1e:48:86:6f:
e3:5c:19:a7:b5:f1:97:17:83:c3:c1:86:a0:48:fb:
4f:3a:1d:c5:82:0b:5d:a8:7c:b0:1a:9c:f9:9e:ec:
a7:d1:40:4f:93:63:92:53:a8:10:a9:83:e4:28:aa:
94:fd:e3:9c:7b:9d:92:a1:64:bf:18:36:4c:d6:ea:
6c:30:82:6b:6b:64:0b:ee:ea:bd:0d:5c:47:9c:b5:
ab:24:48:8a:f5:4e:7f:d4:f8:9a:77:a3:87:e8:df:
4d:7d:0e:f0:34:8c:37:5f:b5:d9:26:06:d7:3f:75:
57:b7:64:3d:f2:9d:19:79:1c:aa:7e:9e:ff:f3:ff:
79:ab:a2:c5:91:65:b2:57:67:c5:3a:a0:2d:90:9f:
70:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:A7:C0:BB:FB:41:71:91:7D:36:54:D0:03:99:3E:E8:2E:C1:64:37
X509v3 Authority Key Identifier:
keyid:26:A5:AA:91:8C:BF:EB:3E:12:99:7F:33:89:0F:EB:25:89:07:B3:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/96fAu_tBcZF9NlTQA5k-6C7BZDc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.22.0/24
91.228.196.0/22
91.234.146.0/24
91.237.52.0/24
91.239.66.0/23
94.152.254.0/23
178.250.40.0/21
185.5.96.0/22
185.25.148.0/22
185.123.160.0/22
185.140.120.0/22
185.180.204.0/22
185.193.112.0/22
185.201.112.0/22
185.204.216.0/22
185.208.164.0/24
185.243.52.0/22
193.17.184.0/24
193.218.152.0/22
194.169.227.0/24
195.2.254.0/23
195.78.66.0/23
195.114.0.0/23
195.242.116.0/23
Signature Algorithm: sha256WithRSAEncryption
90:49:28:5c:44:50:86:c6:34:0c:80:ba:35:89:6e:71:c3:6f:
4a:89:e4:d7:1a:d7:07:3c:f2:e0:a1:09:be:7f:31:18:24:80:
c7:b9:b2:9c:77:c1:e4:2f:47:3a:4f:11:60:83:20:14:1f:21:
87:d7:9d:83:78:f6:77:0d:e4:20:ab:b0:54:55:79:22:69:51:
d7:a8:77:a1:d9:a4:ad:3c:c6:8a:3e:da:6f:b0:db:f4:d7:96:
6b:f6:f6:31:d7:79:e0:98:a3:3d:f5:3a:70:e8:99:1a:11:96:
9f:82:b9:4d:c3:67:68:6b:79:44:21:e0:99:19:e3:a0:a8:e7:
61:02:10:fb:b2:f4:c4:65:16:b3:3e:ad:e4:21:ed:49:d9:80:
c5:3b:9d:27:c2:0e:36:03:15:3c:1e:e1:bd:be:78:10:e7:f6:
40:0a:e2:5c:a4:b0:3c:cc:ee:ff:52:78:b8:b7:76:25:91:d4:
d3:b4:74:1d:f2:0e:e4:e7:85:91:a2:d9:4f:b1:84:8d:dd:9f:
08:44:68:47:75:a0:f7:9f:21:ab:1a:76:91:80:05:8f:d2:4e:
82:ef:45:75:2d:a9:f5:39:61:71:85:0f:21:ba:1a:4e:94:1c:
49:b8:fb:44:cd:1b:a1:4f:5c:73:70:9d:76:68:d9:ab:95:c6:
15:25:bb:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 20:26:14 2024 by rpki-client on console-fra.rpki-client.org