Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/wz9huRjI2vbvpIDHmKpQYgU167E.roa
File: wz9huRjI2vbvpIDHmKpQYgU167E.roa (raw, json)
Hash identifier: nfqeCuVTqAvQHnMjL/tvXM0NV3oCup5BVK8zcqqKhdE=
Subject key identifier: C3:3F:61:B9:18:C8:DA:F6:EF:A4:80:C7:98:AA:50:62:05:35:EB:B1
Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511
Certificate serial: 018CC3B734466E55A1380A7FEDECD5378640
Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/wz9huRjI2vbvpIDHmKpQYgU167E.roa
Signing time: Mon 01 Jan 2024 06:30:12 +0000
ROA not before: Mon 01 Jan 2024 06:30:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 28708
IP address blocks: 194.250.131.0/24 maxlen: 24
193.253.141.0/24 maxlen: 24
193.253.142.0/23 maxlen: 24
80.12.209.0/24 maxlen: 24
193.253.170.0/24 maxlen: 24
80.12.210.0/24 maxlen: 24
193.253.169.0/24 maxlen: 24
193.253.168.0/24 maxlen: 24
80.10.4.0/23 maxlen: 24
90.84.144.0/23 maxlen: 23
81.253.0.0/18 maxlen: 24
90.84.146.0/24 maxlen: 24
193.253.10.0/24 maxlen: 24
90.96.0.0/16 maxlen: 24
80.10.43.0/24 maxlen: 24
80.10.46.0/24 maxlen: 24
193.253.78.0/23 maxlen: 24
80.12.68.0/23 maxlen: 24
80.12.70.0/24 maxlen: 24
80.12.66.0/23 maxlen: 24
193.251.116.0/24 maxlen: 24
80.10.161.0/24 maxlen: 24
80.12.100.0/23 maxlen: 24
80.12.102.0/24 maxlen: 24
81.253.64.0/19 maxlen: 24
2a01:cd00::/31 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:34:46:6e:55:a1:38:0a:7f:ed:ec:d5:37:86:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511
Validity
Not Before: Jan 1 06:30:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c33f61b918c8daf6efa480c798aa50620535ebb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:52:98:34:7d:b3:a3:1a:d4:73:6e:0b:66:e2:
44:6e:0d:f0:a7:ca:09:31:49:7c:a7:b7:b1:d2:63:
28:61:2f:e2:fc:fc:3c:e6:51:0e:54:e0:18:49:97:
10:3f:4e:71:6a:a1:4d:80:cc:52:39:8b:39:92:45:
04:31:b1:c2:cb:3d:6e:66:81:cc:2e:97:7f:be:2c:
be:35:dd:07:8f:46:a0:bb:da:b3:a1:c7:b4:c8:6b:
44:e6:0d:67:89:70:dd:b3:48:15:3c:34:d3:f6:18:
d2:13:4c:79:fa:92:55:62:4c:bb:3c:43:02:0a:7a:
71:5c:1c:fa:b2:2c:1e:0e:63:f5:1c:09:04:01:ba:
07:a2:f5:21:70:1d:b4:81:1a:75:30:0d:46:e6:21:
94:2c:f1:b6:34:fa:37:11:6b:f9:0c:03:e5:fa:55:
17:43:59:de:5e:92:87:0e:74:85:97:a2:b8:57:d2:
47:6b:e5:d6:5d:f8:d1:f6:66:f3:98:3f:2f:ae:0a:
5a:a0:38:de:dd:65:f9:98:ab:ff:ee:05:6c:b5:75:
1d:37:e8:8a:fa:89:41:cd:f3:98:0a:e3:51:34:67:
66:21:f4:34:b3:da:cb:49:33:0b:a5:3c:da:8e:f3:
6a:95:ed:8c:44:1e:93:87:ea:73:eb:4a:e0:75:f2:
4d:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:3F:61:B9:18:C8:DA:F6:EF:A4:80:C7:98:AA:50:62:05:35:EB:B1
X509v3 Authority Key Identifier:
keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/wz9huRjI2vbvpIDHmKpQYgU167E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.10.4.0/23
80.10.43.0/24
80.10.46.0/24
80.10.161.0/24
80.12.66.0-80.12.70.255
80.12.100.0-80.12.102.255
80.12.209.0-80.12.210.255
81.253.0.0-81.253.95.255
90.84.144.0-90.84.146.255
90.96.0.0/16
193.251.116.0/24
193.253.10.0/24
193.253.78.0/23
193.253.141.0-193.253.143.255
193.253.168.0-193.253.170.255
194.250.131.0/24
IPv6:
2a01:cd00::/31
Signature Algorithm: sha256WithRSAEncryption
9c:31:cc:64:4a:93:c5:b4:07:cd:2f:73:be:bc:1c:2b:ac:00:
d6:f0:2a:6c:4b:bb:e7:f7:ea:b0:e8:7e:1c:06:e5:fc:6f:18:
6c:ec:3f:7c:f1:fe:e6:87:a7:e0:f9:46:40:25:db:a6:60:da:
ca:78:b1:e6:c9:e3:54:56:2a:37:e2:4d:2f:01:9a:7d:eb:89:
83:48:0d:22:e3:35:e3:ce:be:71:0c:fd:dd:ae:5f:68:40:b9:
6d:18:17:96:17:e6:4f:a2:04:53:b2:58:54:2d:2f:e4:20:fa:
8b:25:4f:8b:5c:22:aa:4c:1b:3c:1b:b7:ee:58:b5:79:01:52:
35:35:fc:ac:a4:1a:79:66:91:0a:28:b5:d6:89:0d:e6:6a:41:
1d:d1:b8:62:e0:84:9a:7b:85:76:34:ef:cc:43:bf:15:9c:0e:
32:6d:ab:9f:07:c8:9e:33:85:be:07:e0:56:ae:5b:e2:3d:7a:
07:2d:5f:88:11:0a:97:2f:70:d1:ae:45:ff:b6:37:e9:23:d4:
32:7a:bd:dc:b8:f2:f7:7b:6d:c6:17:62:c7:e2:c5:e0:d9:70:
81:b5:92:9e:45:a5:d0:90:00:3f:e2:71:25:9f:e4:f8:a1:9d:
bc:6c:03:04:a0:c1:95:31:e7:f9:25:13:03:2a:f7:7b:e2:3f:
4d:53:f3:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 20:40:49 2024 by rpki-client on console-fra.rpki-client.org