Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/HyFvj0m1I5MzpUqOuzu8U-7Estk.roa
File: HyFvj0m1I5MzpUqOuzu8U-7Estk.roa (raw, json)
Hash identifier: WisIr9mWFTChQrG5sF9lBeDvegSZcaYJquPiPoFZJJc=
Subject key identifier: 1F:21:6F:8F:49:B5:23:93:33:A5:4A:8E:BB:3B:BC:53:EE:C4:B2:D9
Certificate issuer: /CN=0b556acb5f3b961b5cc24a2995f34ee91f79dc16
Certificate serial: 018E2D44C3EA5C09235881CA60E699B4775E
Authority key identifier: 0B:55:6A:CB:5F:3B:96:1B:5C:C2:4A:29:95:F3:4E:E9:1F:79:DC:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/HyFvj0m1I5MzpUqOuzu8U-7Estk.roa
Signing time: Mon 11 Mar 2024 11:27:45 +0000
ROA not before: Mon 11 Mar 2024 11:27:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8708
IP address blocks: 5.2.128.0/17 maxlen: 24
5.12.0.0/14 maxlen: 24
31.14.104.0/21 maxlen: 24
31.14.192.0/21 maxlen: 24
31.14.224.0/22 maxlen: 24
62.231.64.0/18 maxlen: 24
62.231.120.0/24 maxlen: 24
79.112.0.0/13 maxlen: 24
79.112.0.0/14 maxlen: 24
79.117.0.0/16 maxlen: 24
79.118.0.0/15 maxlen: 24
79.118.155.0/24 maxlen: 24
81.18.64.0/19 maxlen: 24
81.196.0.0/16 maxlen: 24
82.76.0.0/14 maxlen: 24
82.79.10.0/24 maxlen: 24
82.137.0.0/18 maxlen: 24
82.137.0.0/21 maxlen: 24
82.137.16.0/20 maxlen: 24
82.137.32.0/19 maxlen: 24
84.232.128.0/17 maxlen: 24
84.232.149.0/24 maxlen: 24
86.120.0.0/13 maxlen: 24
86.121.222.0/24 maxlen: 24
86.127.54.0/24 maxlen: 24
86.127.59.0/24 maxlen: 24
89.43.180.0/23 maxlen: 24
89.46.12.0/22 maxlen: 24
93.113.40.0/22 maxlen: 24
185.129.36.0/22 maxlen: 22
188.24.0.0/15 maxlen: 24
188.26.0.0/17 maxlen: 24
188.26.128.0/18 maxlen: 24
188.26.224.0/19 maxlen: 24
188.27.0.0/16 maxlen: 24
188.27.120.0/24 maxlen: 24
193.111.232.0/24 maxlen: 24
194.102.80.0/24 maxlen: 24
194.102.81.0/24 maxlen: 24
212.54.96.0/19 maxlen: 24
212.54.120.0/24 maxlen: 24
212.54.122.0/24 maxlen: 24
212.54.123.0/24 maxlen: 24
212.93.128.0/19 maxlen: 24
212.93.143.0/24 maxlen: 24
213.154.100.0/24 maxlen: 24
213.157.160.0/19 maxlen: 24
213.157.189.0/24 maxlen: 24
2a02:2f00::/28 maxlen: 48
2a02:2f01:100::/48 maxlen: 48
2a02:2f09:3100::/48 maxlen: 48
2a02:2f0c:8002::/48 maxlen: 48
2a03:9c20::/32 maxlen: 32
2a03:9c20:1000::/48 maxlen: 48
2a03:9c20:f000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.mft
rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 02:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:2d:44:c3:ea:5c:09:23:58:81:ca:60:e6:99:b4:77:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b556acb5f3b961b5cc24a2995f34ee91f79dc16
Validity
Not Before: Mar 11 11:27:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1f216f8f49b5239333a54a8ebb3bbc53eec4b2d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:fd:78:e2:50:6f:3c:39:5b:af:93:15:62:fb:
5d:94:21:3d:ce:a6:8e:e2:64:e3:c4:3b:d8:3b:cf:
b3:f7:32:ae:43:92:e5:9e:91:ed:96:f9:f2:07:39:
46:3c:c2:b9:9c:6e:1a:ca:d7:1b:d0:36:75:f5:c4:
6f:58:93:a1:af:b9:1a:e2:64:2a:2b:e1:0f:3d:5c:
c3:a4:5f:d6:10:c3:54:c4:1b:68:0b:f6:aa:5b:6f:
66:83:70:de:8d:bd:a8:a1:97:1f:9d:94:b0:79:02:
dc:b7:af:b9:f1:91:fe:7f:a2:00:e3:33:10:46:b5:
88:77:4d:a6:3f:c1:4b:49:c0:4d:fa:ae:bd:43:00:
4a:bd:3a:7e:59:c8:bc:9f:db:92:97:f0:d9:e5:d7:
b1:1e:d1:02:fc:95:96:6b:17:fe:e4:41:d9:92:b6:
88:9c:8f:cb:1a:31:0b:91:a0:8f:d7:5d:d3:1a:ba:
72:eb:bf:ca:75:9d:ca:97:7c:e2:fb:a1:dd:e6:67:
17:ed:61:a8:01:8d:98:6e:ae:6c:35:35:2f:55:b6:
31:76:49:a5:98:f3:1d:db:c6:b1:9e:0b:9c:d1:61:
a6:0e:fd:0f:21:ca:fc:5e:05:c4:5b:36:63:cb:aa:
4d:38:2f:60:82:51:32:8d:7d:cb:54:c6:f4:46:93:
0e:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:21:6F:8F:49:B5:23:93:33:A5:4A:8E:BB:3B:BC:53:EE:C4:B2:D9
X509v3 Authority Key Identifier:
keyid:0B:55:6A:CB:5F:3B:96:1B:5C:C2:4A:29:95:F3:4E:E9:1F:79:DC:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/HyFvj0m1I5MzpUqOuzu8U-7Estk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.2.128.0/17
5.12.0.0/14
31.14.104.0/21
31.14.192.0/21
31.14.224.0/22
62.231.64.0/18
79.112.0.0/13
81.18.64.0/19
81.196.0.0/16
82.76.0.0/14
82.137.0.0/18
84.232.128.0/17
86.120.0.0/13
89.43.180.0/23
89.46.12.0/22
93.113.40.0/22
185.129.36.0/22
188.24.0.0-188.26.191.255
188.26.224.0-188.27.255.255
193.111.232.0/24
194.102.80.0/23
212.54.96.0/19
212.93.128.0/19
213.154.100.0/24
213.157.160.0/19
IPv6:
2a02:2f00::/28
2a03:9c20::/32
Signature Algorithm: sha256WithRSAEncryption
3b:aa:23:eb:01:4d:99:6b:9b:1a:ae:60:54:ad:68:fb:dc:b6:
43:29:39:c1:43:9e:70:47:86:ba:b8:64:85:c0:1e:67:71:2e:
70:1c:06:7d:d0:f2:a8:01:7c:8b:04:f2:59:14:3a:cc:c2:86:
1c:9a:10:1f:ee:74:2b:5c:c5:13:34:08:4b:48:c5:b5:de:b8:
99:4f:0f:b6:ec:1f:2c:96:f4:11:1c:33:16:60:08:4c:9e:7f:
d1:12:f0:ff:da:ba:87:4b:87:0c:e4:f4:cf:ff:73:42:33:95:
bb:fa:ca:e3:6b:9b:1b:a2:3d:36:1c:a2:fd:e4:d6:39:74:c8:
cf:40:ee:aa:52:8b:27:4a:f1:01:7f:cd:03:9f:b9:6f:19:c1:
50:0e:84:be:c5:b1:a0:91:2f:7f:d4:70:62:d9:2f:d9:b2:48:
91:c3:49:47:f2:09:e8:eb:55:ee:f4:c4:26:3d:f3:5b:2c:29:
97:70:93:6f:70:2b:80:96:11:42:cb:a4:1f:48:b3:dc:45:71:
d5:0f:f5:d6:bb:72:73:8a:31:bf:28:71:7b:79:fc:5f:21:89:
3f:41:41:4f:1b:b7:0a:6b:06:37:97:1c:30:f1:75:8f:86:d3:
9e:b5:a3:03:e1:f5:fa:28:72:3f:35:e7:e0:81:3f:09:0b:61:
46:25:b3:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 05:42:14 2024 by rpki-client on console-fra.rpki-client.org