Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/289b1d-08dd-4d53-b12d-7d4028a1bf59/1/Ld6H9qvu2mlR2NBjvRsZ6zjmfi8.roa
File: Ld6H9qvu2mlR2NBjvRsZ6zjmfi8.roa (raw, json)
Hash identifier: uk02gk6uMo1nx0+/0fwbJJM/68DWBqyTURMNl3fa9XI=
Subject key identifier: 2D:DE:87:F6:AB:EE:DA:69:51:D8:D0:63:BD:1B:19:EB:38:E6:7E:2F
Certificate issuer: /CN=a6f87cf4a15b9e7822455b3aa8af0b5ed3a299f7
Certificate serial: 018EF1497183568665E4FAD8F6ACD6F074EA
Authority key identifier: A6:F8:7C:F4:A1:5B:9E:78:22:45:5B:3A:A8:AF:0B:5E:D3:A2:99:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pvh89KFbnngiRVs6qK8LXtOimfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/289b1d-08dd-4d53-b12d-7d4028a1bf59/1/Ld6H9qvu2mlR2NBjvRsZ6zjmfi8.roa
Signing time: Thu 18 Apr 2024 12:58:25 +0000
ROA not before: Thu 18 Apr 2024 12:58:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42831
IP address blocks: 81.92.192.0/22 maxlen: 22
81.92.217.0/24 maxlen: 24
81.92.218.0/24 maxlen: 24
91.109.112.0/21 maxlen: 21
94.46.184.0/22 maxlen: 22
94.46.192.0/22 maxlen: 22
94.46.207.0/24 maxlen: 24
94.46.220.0/22 maxlen: 22
94.46.244.0/22 maxlen: 22
185.99.252.0/24 maxlen: 24
185.99.253.0/24 maxlen: 24
185.99.254.0/24 maxlen: 24
185.109.168.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/289b1d-08dd-4d53-b12d-7d4028a1bf59/1/pvh89KFbnngiRVs6qK8LXtOimfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/289b1d-08dd-4d53-b12d-7d4028a1bf59/1/pvh89KFbnngiRVs6qK8LXtOimfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/pvh89KFbnngiRVs6qK8LXtOimfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:f1:49:71:83:56:86:65:e4:fa:d8:f6:ac:d6:f0:74:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6f87cf4a15b9e7822455b3aa8af0b5ed3a299f7
Validity
Not Before: Apr 18 12:58:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2dde87f6abeeda6951d8d063bd1b19eb38e67e2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d7:78:c1:96:1f:b5:1f:55:b0:1e:89:da:93:
0c:31:b4:e0:3b:5c:49:6c:80:8c:ee:31:e2:7e:e3:
d7:e8:1e:89:47:4f:1e:f4:49:d9:3f:2b:f3:6c:5e:
38:dd:82:93:5e:2e:38:ad:19:25:7f:69:7f:d7:95:
eb:7f:e3:f0:2b:92:c6:9c:44:92:a1:bb:2b:c3:01:
48:b7:e3:b7:91:d8:2a:8b:f7:94:81:0a:2b:2e:00:
3b:a5:c4:f5:a4:66:7c:c7:ff:cf:93:4b:e5:5e:30:
2f:4e:ac:d6:55:03:4e:7a:53:2d:6b:0a:a3:b2:75:
a5:a4:61:c0:75:1d:7b:d2:ec:84:08:ee:d3:7f:93:
a6:04:10:5d:ed:d2:5b:1a:61:ed:b4:39:0c:72:e4:
ae:59:e0:66:cd:af:6a:ec:f0:fa:cc:f2:f0:a6:cf:
b7:40:f5:48:f7:8c:8d:10:54:87:bf:7c:7c:01:7d:
f0:79:bb:7b:60:8e:d7:ee:f9:14:75:2b:60:88:5c:
4a:31:7b:38:fb:dd:8f:7d:1b:42:0a:2d:09:35:a4:
44:bb:ff:cb:ab:40:17:38:b8:0b:4e:be:85:aa:72:
e6:ba:b1:15:13:67:87:e6:23:8b:09:14:4f:3b:c0:
fb:12:37:b4:2c:c7:8a:cc:dc:4d:49:33:7c:14:ee:
8a:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:DE:87:F6:AB:EE:DA:69:51:D8:D0:63:BD:1B:19:EB:38:E6:7E:2F
X509v3 Authority Key Identifier:
keyid:A6:F8:7C:F4:A1:5B:9E:78:22:45:5B:3A:A8:AF:0B:5E:D3:A2:99:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pvh89KFbnngiRVs6qK8LXtOimfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/289b1d-08dd-4d53-b12d-7d4028a1bf59/1/Ld6H9qvu2mlR2NBjvRsZ6zjmfi8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/289b1d-08dd-4d53-b12d-7d4028a1bf59/1/pvh89KFbnngiRVs6qK8LXtOimfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.92.192.0/22
81.92.217.0-81.92.218.255
91.109.112.0/21
94.46.184.0/22
94.46.192.0/22
94.46.207.0/24
94.46.220.0/22
94.46.244.0/22
185.99.252.0-185.99.254.255
185.109.168.0/22
Signature Algorithm: sha256WithRSAEncryption
13:f3:6b:a7:e6:48:58:b4:d7:c2:44:71:59:e2:58:c3:5c:00:
6b:9f:b3:4a:28:ed:1a:ee:dc:42:f0:ba:36:73:d7:c5:08:2e:
97:2f:41:5f:e1:2d:79:c5:2b:d9:2c:0d:74:5c:5b:79:ee:45:
9b:4c:09:22:42:e5:5e:65:5b:93:cb:12:43:27:b2:c8:7d:fa:
a0:2c:46:65:b5:f8:49:1a:3d:f8:97:45:29:e0:ad:4d:70:f1:
5c:aa:fb:e5:22:bf:e9:a8:02:84:45:96:89:86:bc:e5:95:8f:
22:b9:c4:56:09:27:97:9b:d9:c3:17:67:54:dd:fb:b5:3f:2a:
98:02:5c:3f:06:98:04:49:ac:a8:9b:b3:17:a0:c4:c0:6d:75:
a1:75:62:b4:b8:4e:3b:99:ee:50:3d:23:7e:44:e0:af:0e:9e:
25:87:c2:97:d9:6c:db:b8:c4:2a:2d:8c:58:99:70:1f:38:aa:
3c:0b:bd:9e:25:84:27:76:77:d9:80:58:39:3e:36:35:91:1e:
20:f1:4a:64:ee:ff:35:dc:42:50:70:ac:b4:ce:d4:95:4b:52:
10:16:b1:ae:85:64:c1:53:ad:04:c6:f8:5a:be:14:1f:11:f5:
b8:89:af:a1:63:1d:45:57:a4:db:47:0c:82:07:85:05:df:51:
e5:1b:9f:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 09:15:06 2024 by rpki-client on console-ams.rpki-client.org