Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/T5Y_PDzH82fpiNieppcA5Z8n2pw.roa
File: T5Y_PDzH82fpiNieppcA5Z8n2pw.roa (raw, json)
Hash identifier: h8LTNfJVXdjrYGM9nQVlaNa9iM3CZ1A6pq0/xb1cw5s=
Subject key identifier: 4F:96:3F:3C:3C:C7:F3:67:E9:88:D8:9E:A6:97:00:E5:9F:27:DA:9C
Certificate issuer: /CN=94d98e8fec680775a157266e0c6b78b141a34f5e
Certificate serial: 018CC64B2A92451C5F85790BE16E25E21435
Authority key identifier: 94:D9:8E:8F:EC:68:07:75:A1:57:26:6E:0C:6B:78:B1:41:A3:4F:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lNmOj-xoB3WhVyZuDGt4sUGjT14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/T5Y_PDzH82fpiNieppcA5Z8n2pw.roa
Signing time: Mon 01 Jan 2024 18:31:03 +0000
ROA not before: Mon 01 Jan 2024 18:31:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204957
IP address blocks: 195.211.98.0/23 maxlen: 23
195.211.96.0/23 maxlen: 23
82.117.252.0/23 maxlen: 23
45.90.56.0/22 maxlen: 22
82.117.254.0/24 maxlen: 24
195.123.232.0/22 maxlen: 22
82.117.255.0/24 maxlen: 24
195.123.236.0/22 maxlen: 22
195.123.240.0/22 maxlen: 22
195.123.244.0/22 maxlen: 22
85.90.196.0/24 maxlen: 24
62.233.57.0/24 maxlen: 24
2a05:9400::/32 maxlen: 32
2a12:6fc0::/32 maxlen: 32
2a05:9403::/32 maxlen: 32
2a12:6fc2::/32 maxlen: 32
2a05:9405::/32 maxlen: 32
2a05:9406::/32 maxlen: 32
2a05:9402::/32 maxlen: 32
2a05:9401::/32 maxlen: 32
2a12:6fc1::/32 maxlen: 32
2a05:9404::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/lNmOj-xoB3WhVyZuDGt4sUGjT14.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/lNmOj-xoB3WhVyZuDGt4sUGjT14.mft
rsync://rpki.ripe.net/repository/DEFAULT/lNmOj-xoB3WhVyZuDGt4sUGjT14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:2a:92:45:1c:5f:85:79:0b:e1:6e:25:e2:14:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94d98e8fec680775a157266e0c6b78b141a34f5e
Validity
Not Before: Jan 1 18:31:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4f963f3c3cc7f367e988d89ea69700e59f27da9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e5:ed:63:24:40:0c:17:a2:c1:1f:85:71:56:
fa:2f:c4:ef:04:cd:17:4f:c9:e0:91:6d:38:72:52:
4b:c2:bc:05:62:b3:03:40:be:08:4b:9e:88:90:c0:
85:b3:dd:2b:41:2a:c9:ce:a2:97:d7:ab:c6:4b:6c:
30:45:1d:45:a9:9e:c6:91:63:a0:09:b9:11:1c:36:
97:74:8d:e7:6d:68:4f:53:28:15:ff:fc:4f:14:d5:
4d:a2:e6:82:a9:02:cd:32:b4:d9:05:79:5b:9e:7d:
84:0d:cb:ad:83:33:5d:5d:0e:a1:ed:5a:05:a3:d4:
8e:e0:77:79:2c:4c:f2:e1:2d:7f:49:0e:9f:4a:55:
cf:98:8b:1a:06:37:81:1d:22:d1:13:11:c4:08:2a:
47:9d:94:4a:c7:07:69:bb:13:2f:71:e1:90:3b:a3:
09:36:d8:fd:ab:13:2a:11:99:b5:d2:60:9f:59:15:
7b:1a:8f:b9:86:17:6a:2d:59:06:b6:f6:78:07:0c:
d4:46:bb:00:14:2d:eb:f4:4c:a2:7a:29:62:2b:9c:
9f:0b:17:75:0c:2f:df:5d:d7:bf:dd:6d:a1:13:c4:
26:51:7b:66:9e:c6:a9:6b:11:b0:d5:55:01:88:44:
09:7e:33:c1:06:a4:90:45:2f:29:c7:6e:3a:86:8d:
fe:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:96:3F:3C:3C:C7:F3:67:E9:88:D8:9E:A6:97:00:E5:9F:27:DA:9C
X509v3 Authority Key Identifier:
keyid:94:D9:8E:8F:EC:68:07:75:A1:57:26:6E:0C:6B:78:B1:41:A3:4F:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lNmOj-xoB3WhVyZuDGt4sUGjT14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/T5Y_PDzH82fpiNieppcA5Z8n2pw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/lNmOj-xoB3WhVyZuDGt4sUGjT14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.56.0/22
62.233.57.0/24
82.117.252.0/22
85.90.196.0/24
195.123.232.0-195.123.247.255
195.211.96.0/22
IPv6:
2a05:9400::-2a05:9406:ffff:ffff:ffff:ffff:ffff:ffff
2a12:6fc0::-2a12:6fc2:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
6f:86:fc:73:08:2d:2e:01:15:d6:eb:23:6f:82:6e:ae:4d:5a:
0d:6d:b6:2c:ad:12:36:82:6d:9c:e7:9a:4f:08:3f:c2:b1:a6:
0f:52:b6:1b:04:1c:d2:6f:53:60:d5:93:64:72:da:69:e2:31:
e5:26:d6:f3:6d:73:dd:d2:8a:56:aa:ab:d7:6c:aa:4f:3a:22:
04:09:3a:eb:6e:44:2c:b5:00:96:cf:17:63:6c:da:66:e9:bd:
8c:49:cf:99:5d:77:ff:5e:36:a6:37:e7:e3:a0:24:41:63:ae:
4e:79:70:10:6a:fa:d2:37:dc:e7:8a:29:f9:c5:7a:e0:90:9e:
ee:e0:05:f5:2f:2f:b3:02:50:af:99:98:d4:96:96:b1:a2:49:
47:af:10:94:89:d3:5a:c1:79:0f:5f:eb:9b:ba:28:f6:c2:f2:
38:92:fc:3b:1b:d0:9c:c3:b7:f3:a2:20:eb:f4:e1:6b:11:56:
11:c3:23:78:d8:1e:99:9c:de:0c:81:8d:c6:7d:8e:f8:fe:58:
16:c5:35:53:db:08:b4:e1:99:39:db:5b:e5:fa:84:21:a8:34:
d4:8b:fa:4d:65:a8:5d:67:10:dd:85:0c:79:57:0b:d9:16:51:
34:c8:8f:19:0b:bc:ed:0e:c4:a7:45:04:be:d8:f3:11:78:67:
29:fe:5c:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 17:14:00 2024 by rpki-client on console-fra.rpki-client.org