Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/4b911c-3d4d-42d5-9234-f288137cb500/1/jDTzV_bETiriajM1hqdYM9h7XYg.roa
File: jDTzV_bETiriajM1hqdYM9h7XYg.roa (raw, json)
Hash identifier: A7ML+C77JY8OSPRXFb9g1Z6kvkVOGlNEfcE1B1hKrK4=
Subject key identifier: 8C:34:F3:57:F6:C4:4E:2A:E2:6A:33:35:86:A7:58:33:D8:7B:5D:88
Certificate issuer: /CN=42b4c79a22a3fe987ef31908cd44ff81e9b1acf4
Certificate serial: 018CC94E488237017B8FA9B7FEB1E2A77C02
Authority key identifier: 42:B4:C7:9A:22:A3:FE:98:7E:F3:19:08:CD:44:FF:81:E9:B1:AC:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QrTHmiKj_ph-8xkIzUT_gemxrPQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/4b911c-3d4d-42d5-9234-f288137cb500/1/jDTzV_bETiriajM1hqdYM9h7XYg.roa
Signing time: Tue 02 Jan 2024 08:33:19 +0000
ROA not before: Tue 02 Jan 2024 08:33:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48293
IP address blocks: 91.194.246.0/24 maxlen: 24
91.194.246.0/23 maxlen: 23
91.194.247.0/24 maxlen: 24
94.228.192.0/20 maxlen: 20
94.228.192.0/24 maxlen: 24
94.228.194.0/24 maxlen: 24
94.228.196.0/24 maxlen: 24
94.228.195.0/24 maxlen: 24
94.228.193.0/24 maxlen: 24
94.228.198.0/24 maxlen: 24
94.228.197.0/24 maxlen: 24
94.228.199.0/24 maxlen: 24
94.228.205.0/24 maxlen: 24
94.228.204.0/24 maxlen: 24
94.228.206.0/24 maxlen: 24
94.228.201.0/24 maxlen: 24
94.228.200.0/24 maxlen: 24
94.228.203.0/24 maxlen: 24
94.228.202.0/24 maxlen: 24
94.228.207.0/24 maxlen: 24
185.108.23.0/24 maxlen: 24
185.108.20.0/22 maxlen: 22
185.108.20.0/25 maxlen: 25
185.108.20.0/24 maxlen: 24
185.108.22.0/24 maxlen: 24
185.108.21.0/24 maxlen: 24
91.212.217.0/24 maxlen: 24
2a06:4180::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/4b911c-3d4d-42d5-9234-f288137cb500/1/QrTHmiKj_ph-8xkIzUT_gemxrPQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/4b911c-3d4d-42d5-9234-f288137cb500/1/QrTHmiKj_ph-8xkIzUT_gemxrPQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/QrTHmiKj_ph-8xkIzUT_gemxrPQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 05:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:48:82:37:01:7b:8f:a9:b7:fe:b1:e2:a7:7c:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42b4c79a22a3fe987ef31908cd44ff81e9b1acf4
Validity
Not Before: Jan 2 08:33:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8c34f357f6c44e2ae26a333586a75833d87b5d88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:37:de:e7:d9:8c:b6:e0:c7:72:71:6a:f0:05:
67:01:32:22:ab:15:e7:3a:ba:7b:8b:4c:e8:08:a7:
41:6d:a4:94:29:09:2d:a4:ed:84:12:9d:96:38:48:
90:fd:4d:ba:f5:24:93:01:32:8c:c0:6f:ab:4e:94:
ab:2a:9e:69:6d:e0:f2:6f:ce:cf:c2:7a:8e:42:a3:
00:8c:58:da:d4:d0:87:17:51:b5:7b:31:70:c6:ca:
94:ca:e1:38:21:0d:db:84:3e:58:7a:05:45:1b:58:
14:e8:b5:5d:cd:d9:e5:4f:e7:1a:0b:98:ac:61:0e:
07:4c:12:2c:09:17:07:ea:4c:92:a9:5d:e5:8e:a9:
88:0c:8f:a7:7e:87:df:75:28:5b:08:f4:2d:cf:6c:
97:92:94:63:82:20:5e:d6:f0:27:f9:e0:3f:e1:25:
1d:42:af:3c:46:13:30:0e:2a:b3:6a:b8:d1:2e:87:
7d:f2:2a:07:51:1e:fc:aa:3d:75:58:a1:b5:04:ee:
f5:ea:06:e2:e9:23:83:5a:0e:3b:df:55:cd:a7:ac:
3b:30:68:84:50:90:18:7c:9e:79:eb:6b:97:e5:93:
84:1d:7c:e6:3b:b3:b9:7f:97:e4:e2:16:bf:48:0c:
2c:57:60:78:2c:8d:14:63:36:43:8d:e1:fc:b0:d7:
08:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:34:F3:57:F6:C4:4E:2A:E2:6A:33:35:86:A7:58:33:D8:7B:5D:88
X509v3 Authority Key Identifier:
keyid:42:B4:C7:9A:22:A3:FE:98:7E:F3:19:08:CD:44:FF:81:E9:B1:AC:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QrTHmiKj_ph-8xkIzUT_gemxrPQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/4b911c-3d4d-42d5-9234-f288137cb500/1/jDTzV_bETiriajM1hqdYM9h7XYg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/4b911c-3d4d-42d5-9234-f288137cb500/1/QrTHmiKj_ph-8xkIzUT_gemxrPQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.194.246.0/23
91.212.217.0/24
94.228.192.0/20
185.108.20.0/22
IPv6:
2a06:4180::/29
Signature Algorithm: sha256WithRSAEncryption
1f:94:91:27:c3:ef:65:6b:43:97:97:74:bb:88:57:9b:be:ad:
31:a0:e3:b0:3c:29:49:99:24:bd:b8:a3:21:92:14:c6:b5:4f:
cf:55:1d:cb:8b:ca:af:b8:ae:aa:6d:05:82:30:d1:65:f1:8f:
47:6a:8d:90:cc:7d:dc:98:fa:10:02:cb:66:dd:2d:ce:48:65:
82:c5:8b:03:00:ab:e4:6f:95:89:71:1a:f1:a8:98:8a:47:32:
d4:09:48:c1:89:47:b7:cd:2f:fa:f5:bb:16:e1:c8:a8:c9:a4:
0f:6e:97:fd:d1:6c:11:20:d9:27:ca:5a:8e:2c:38:bf:43:ba:
e1:5a:8e:05:9c:2e:5d:0c:0d:f0:ee:1a:7a:1c:4d:e8:88:96:
74:26:fa:11:d6:4a:51:0b:29:1c:bb:14:ad:eb:19:b2:a2:cd:
08:49:7c:39:fb:e8:f1:f4:66:89:e0:0b:38:56:69:42:4d:91:
c2:99:4d:a2:61:93:ad:f5:61:1b:48:0b:ee:dd:b2:b4:09:b3:
da:4b:ca:f6:c0:a0:89:ae:7e:c1:bc:90:cd:1e:3b:28:12:db:
01:fd:31:55:bd:4e:35:40:7a:95:a5:03:be:22:62:64:e4:19:
c5:d4:ad:f4:03:fd:58:09:a3:c2:37:92:2e:5e:7b:6b:0d:50:
38:8f:4f:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:00:22 2024 by rpki-client on console-fra.rpki-client.org