Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/NAvwr_AApmniIROZjQEBsLKZAFQ.roa
File: NAvwr_AApmniIROZjQEBsLKZAFQ.roa (raw, json)
Hash identifier: xhENKkwpDxle7AC51Z8mfH3UGJIvK2JuqLTmGfm0gGI=
Subject key identifier: 34:0B:F0:AF:F0:00:A6:69:E2:21:13:99:8D:01:01:B0:B2:99:00:54
Certificate issuer: /CN=f84128146b7bec8bd1185bbe0c3b9340aaf5b714
Certificate serial: 018CC56EAEC6C966F0400CAF8CFBDF41ECFA
Authority key identifier: F8:41:28:14:6B:7B:EC:8B:D1:18:5B:BE:0C:3B:93:40:AA:F5:B7:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-EEoFGt77IvRGFu-DDuTQKr1txQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/NAvwr_AApmniIROZjQEBsLKZAFQ.roa
Signing time: Mon 01 Jan 2024 14:30:14 +0000
ROA not before: Mon 01 Jan 2024 14:30:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39608
IP address blocks: 91.216.165.0/24 maxlen: 24
185.53.76.0/23 maxlen: 24
185.53.78.0/24 maxlen: 24
176.39.0.0/16 maxlen: 16
176.39.34.0/23 maxlen: 24
176.39.36.0/23 maxlen: 24
194.33.189.0/24 maxlen: 24
86.111.64.0/19 maxlen: 19
193.107.224.0/22 maxlen: 22
176.38.0.0/16 maxlen: 17
193.93.160.0/22 maxlen: 22
86.111.88.0/21 maxlen: 22
194.50.85.0/24 maxlen: 24
91.194.81.0/24 maxlen: 24
176.36.0.0/16 maxlen: 17
176.36.0.0/14 maxlen: 14
176.37.0.0/16 maxlen: 17
176.36.160.0/24 maxlen: 24
194.60.69.0/24 maxlen: 24
2a01:bf20::/32 maxlen: 32
2a01:5800::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/1-EEoFGt77IvRGFu-DDuTQKr1txQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/1-EEoFGt77IvRGFu-DDuTQKr1txQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-EEoFGt77IvRGFu-DDuTQKr1txQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 31 May 2024 13:21:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:ae:c6:c9:66:f0:40:0c:af:8c:fb:df:41:ec:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f84128146b7bec8bd1185bbe0c3b9340aaf5b714
Validity
Not Before: Jan 1 14:30:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=340bf0aff000a669e22113998d0101b0b2990054
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:8c:8a:0c:bf:1c:20:d9:84:39:60:b4:c1:d8:
b8:60:d9:c8:64:bc:81:f6:2b:58:25:f1:5e:3a:bf:
36:1e:a6:5e:e3:58:3c:9e:7f:a5:3f:73:cd:40:c6:
70:c9:ff:03:ef:5e:54:84:47:56:84:62:e3:66:20:
fc:6c:38:c9:a4:db:26:3e:28:37:c3:05:7e:09:ae:
e8:36:1c:68:7b:bb:04:41:17:8f:c5:dd:e9:26:48:
2f:fb:88:83:62:5b:2a:b3:18:de:b9:ec:60:81:4c:
22:92:7b:28:5a:ea:b8:23:17:33:93:e7:84:70:3e:
89:9f:95:18:15:74:c5:d5:4d:e9:6f:13:b9:56:d9:
85:63:2d:d9:6c:77:bd:ef:c5:27:0f:99:c0:20:c6:
de:7a:cd:d9:ec:37:41:6d:fa:95:d4:75:9b:ae:99:
93:b1:17:6e:9f:29:29:ff:40:de:67:b6:81:ac:61:
03:c0:a5:54:95:d6:a8:d0:a6:97:10:4c:49:3f:3d:
10:26:50:a5:b6:57:db:0c:77:db:40:bd:b8:8a:66:
df:69:fa:e7:40:3a:37:9f:69:29:3d:4a:5f:39:8b:
46:82:f1:61:b2:cc:df:92:a7:c1:01:a9:52:4f:dd:
55:ea:77:e0:75:a9:53:99:96:b1:40:09:53:c8:18:
a8:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:0B:F0:AF:F0:00:A6:69:E2:21:13:99:8D:01:01:B0:B2:99:00:54
X509v3 Authority Key Identifier:
keyid:F8:41:28:14:6B:7B:EC:8B:D1:18:5B:BE:0C:3B:93:40:AA:F5:B7:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-EEoFGt77IvRGFu-DDuTQKr1txQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/NAvwr_AApmniIROZjQEBsLKZAFQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/1-EEoFGt77IvRGFu-DDuTQKr1txQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.111.64.0/19
91.194.81.0/24
91.216.165.0/24
176.36.0.0/14
185.53.76.0-185.53.78.255
193.93.160.0/22
193.107.224.0/22
194.33.189.0/24
194.50.85.0/24
194.60.69.0/24
IPv6:
2a01:5800::/32
2a01:bf20::/32
Signature Algorithm: sha256WithRSAEncryption
39:b0:34:d2:06:b0:76:12:d7:ae:08:4a:21:bb:76:77:a2:e7:
6d:92:30:34:1d:ac:36:91:d1:84:c4:81:b0:e1:32:b8:d3:73:
7a:d8:32:0c:fa:aa:a0:09:7b:32:1b:f0:42:2a:d3:f8:2b:f0:
dd:bc:e0:b1:e0:59:a8:5b:fd:f0:65:da:2c:3d:88:1c:fb:04:
bb:3d:a7:39:2d:67:ca:f6:d7:e3:7f:6d:21:e5:70:ed:47:1f:
59:32:e7:b3:b2:d6:5d:06:71:ab:a7:5e:d9:a1:db:40:00:de:
c0:7a:95:94:bc:2c:c7:ad:2a:ef:15:c0:f2:92:e4:1e:c2:a2:
b3:8f:9d:93:c1:78:e8:50:7e:1e:c0:4b:9b:c9:13:a6:0a:da:
77:77:b9:2e:0a:e0:14:48:d6:17:d9:a1:57:c8:8d:59:ce:dd:
46:7b:fe:4a:82:6c:4e:9a:68:db:f4:22:b9:f5:64:e9:81:8e:
92:d9:60:01:8c:11:07:10:48:e1:6a:d6:1f:01:c6:89:d6:76:
a7:a4:15:cc:47:65:71:a9:55:0c:87:58:6f:09:ee:d2:89:3d:
2d:56:c8:0a:61:70:56:4e:a7:4d:1d:17:dc:74:83:97:46:f8:
c6:7d:b8:a0:22:b4:a0:86:03:9c:85:01:f7:2b:9c:24:28:77:
b0:bf:f2:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 16:52:43 2024 by rpki-client on console-fra.rpki-client.org