Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/59bcd1-1e0b-485d-9510-096af478f04b/1/uD5O_ISTQ1mMQASsbpudrc3AjkA.roa
File: uD5O_ISTQ1mMQASsbpudrc3AjkA.roa (raw, json)
Hash identifier: ztPdFaMjci6xVaAohWmqm3MD2Kgs7okjJmlHUvHATI0=
Subject key identifier: B8:3E:4E:FC:84:93:43:59:8C:40:04:AC:6E:9B:9D:AD:CD:C0:8E:40
Certificate issuer: /CN=ffbcae2b290c801d57d09d025a9348e16706f182
Certificate serial: 018FED12423F731E263DCD4BE598C6E8EA7B
Authority key identifier: FF:BC:AE:2B:29:0C:80:1D:57:D0:9D:02:5A:93:48:E1:67:06:F1:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_7yuKykMgB1X0J0CWpNI4WcG8YI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/59bcd1-1e0b-485d-9510-096af478f04b/1/uD5O_ISTQ1mMQASsbpudrc3AjkA.roa
Signing time: Thu 06 Jun 2024 10:22:27 +0000
ROA not before: Thu 06 Jun 2024 10:22:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198537
IP address blocks: 37.221.100.0/22 maxlen: 24
45.159.236.0/22 maxlen: 24
77.83.40.0/22 maxlen: 24
91.209.115.0/24 maxlen: 24
91.209.149.0/24 maxlen: 24
91.236.32.0/22 maxlen: 24
185.146.52.0/22 maxlen: 24
194.53.1.0/24 maxlen: 24
194.53.2.0/24 maxlen: 24
194.53.61.0/24 maxlen: 24
2a07:4bc0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/59bcd1-1e0b-485d-9510-096af478f04b/1/_7yuKykMgB1X0J0CWpNI4WcG8YI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/59bcd1-1e0b-485d-9510-096af478f04b/1/_7yuKykMgB1X0J0CWpNI4WcG8YI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_7yuKykMgB1X0J0CWpNI4WcG8YI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Jun 2024 07:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:ed:12:42:3f:73:1e:26:3d:cd:4b:e5:98:c6:e8:ea:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffbcae2b290c801d57d09d025a9348e16706f182
Validity
Not Before: Jun 6 10:22:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b83e4efc849343598c4004ac6e9b9dadcdc08e40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:aa:87:1f:fe:bb:fc:8e:33:84:39:f3:fc:29:
7f:80:26:90:f3:15:47:9b:2d:7e:01:01:f5:d7:17:
26:0c:ea:8d:5f:03:b2:dc:25:07:2e:38:82:a9:93:
1d:2b:eb:2e:e1:2c:f9:23:60:20:80:09:ba:02:5d:
6d:06:33:cc:f3:e8:80:f3:21:d5:36:72:ab:b8:bd:
a9:e5:1c:bb:1c:5a:e7:69:1a:ff:3e:f7:c4:e3:92:
e0:8d:68:f7:d0:db:9f:f5:24:b3:ba:50:16:c5:5f:
a4:2e:58:07:5d:5a:f1:5a:1d:b0:61:58:ef:56:05:
5f:63:d2:84:40:37:55:bb:cf:8d:d1:13:a7:28:ee:
42:d6:50:24:97:dd:3d:62:99:e8:e5:bd:b5:84:18:
18:00:30:e8:4c:f9:45:e2:ce:7b:fa:ba:a4:2c:49:
dd:4b:4b:de:30:9c:53:c1:05:7e:24:d0:a0:36:ad:
7a:a6:e3:f0:09:09:f9:7e:ab:02:39:69:bf:b9:6d:
dc:87:6c:86:b8:ec:b8:57:99:a1:41:1c:f3:cc:78:
6b:9d:2c:28:b7:f4:c5:c3:68:37:84:47:08:60:f6:
33:cf:7d:16:5d:e2:47:d6:08:93:4a:8c:49:1b:fb:
a8:87:8d:b0:89:cb:8e:66:56:25:23:71:99:64:5a:
dc:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:3E:4E:FC:84:93:43:59:8C:40:04:AC:6E:9B:9D:AD:CD:C0:8E:40
X509v3 Authority Key Identifier:
keyid:FF:BC:AE:2B:29:0C:80:1D:57:D0:9D:02:5A:93:48:E1:67:06:F1:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_7yuKykMgB1X0J0CWpNI4WcG8YI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/59bcd1-1e0b-485d-9510-096af478f04b/1/uD5O_ISTQ1mMQASsbpudrc3AjkA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/59bcd1-1e0b-485d-9510-096af478f04b/1/_7yuKykMgB1X0J0CWpNI4WcG8YI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.221.100.0/22
45.159.236.0/22
77.83.40.0/22
91.209.115.0/24
91.209.149.0/24
91.236.32.0/22
185.146.52.0/22
194.53.1.0-194.53.2.255
194.53.61.0/24
IPv6:
2a07:4bc0::/29
Signature Algorithm: sha256WithRSAEncryption
20:40:8b:b2:9a:57:85:90:4b:80:f0:f2:40:87:0a:aa:ea:eb:
27:32:7a:f2:7a:15:d2:2c:2b:28:e2:e6:2c:c3:1b:ff:33:29:
d5:e1:86:7f:0b:17:2a:42:29:40:6b:20:39:0a:e1:2f:c9:57:
b6:79:9f:07:e8:53:df:85:4b:1b:1c:3e:9a:eb:08:6b:fd:e0:
ac:ae:ba:ee:5f:b8:c1:dc:11:c8:d8:fe:dd:33:75:00:0b:96:
2b:57:3b:a6:2a:4e:82:4d:78:fa:cc:1f:98:e7:23:bd:71:7e:
5c:90:fe:5d:f7:1a:54:47:7f:27:36:6d:69:26:74:3f:f2:20:
e3:b4:4f:50:00:4f:37:d9:75:b6:78:9b:0c:29:6d:25:9c:48:
80:09:a0:8e:35:20:af:62:db:42:39:f9:e1:d8:18:b9:0a:d4:
16:fe:8d:dd:ec:c1:e3:98:b7:dc:54:3f:be:86:10:76:5d:bb:
f9:6f:ed:ac:1c:98:4c:cf:86:a7:62:5e:d6:a8:49:a1:f8:fa:
ff:8c:bc:93:d1:2f:d5:1e:73:86:a5:10:b8:f4:20:de:57:0e:
cf:86:d8:17:b3:c2:db:47:0d:a6:b6:e4:9c:a0:32:b7:3f:67:
85:02:d4:63:e6:4a:e6:51:0a:6f:50:ae:e4:3c:f3:f2:68:13:
27:2e:94:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 10:26:01 2024 by rpki-client on console-fra.rpki-client.org