Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/31c267-f2e3-4fa9-9d41-336e5b3dd071/1/yMmMFrSnUERcIPwq3MP1tEXcZng.roa
File: yMmMFrSnUERcIPwq3MP1tEXcZng.roa (raw, json)
Hash identifier: 8e/p5Zu/4JObFQnscawFep83wG4Ov+k3I3wiiCa92R4=
Subject key identifier: C8:C9:8C:16:B4:A7:50:44:5C:20:FC:2A:DC:C3:F5:B4:45:DC:66:78
Certificate issuer: /CN=679252b9e21df8176cc538027895f7f4585666ab
Certificate serial: 0191926ADD5490188DBE4F55C7C208BCE2BE
Authority key identifier: 67:92:52:B9:E2:1D:F8:17:6C:C5:38:02:78:95:F7:F4:58:56:66:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5JSueId-BdsxTgCeJX39FhWZqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/31c267-f2e3-4fa9-9d41-336e5b3dd071/1/yMmMFrSnUERcIPwq3MP1tEXcZng.roa
Signing time: Tue 27 Aug 2024 05:59:22 +0000
ROA not before: Tue 27 Aug 2024 05:59:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51468
IP address blocks: 46.30.208.0/21 maxlen: 21
77.111.240.0/22 maxlen: 22
91.198.169.0/24 maxlen: 24
91.221.196.0/23 maxlen: 23
104.37.32.0/21 maxlen: 21
185.10.8.0/22 maxlen: 22
185.10.8.0/23 maxlen: 23
185.10.10.0/24 maxlen: 24
185.10.11.0/24 maxlen: 24
185.164.12.0/22 maxlen: 22
193.202.110.0/24 maxlen: 24
195.47.247.0/24 maxlen: 24
195.206.121.0/24 maxlen: 24
2001:67c:3c0::/48 maxlen: 48
2001:67c:28cc::/48 maxlen: 48
2a02:2350::/32 maxlen: 32
2a03:53c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/31c267-f2e3-4fa9-9d41-336e5b3dd071/1/Z5JSueId-BdsxTgCeJX39FhWZqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/31c267-f2e3-4fa9-9d41-336e5b3dd071/1/Z5JSueId-BdsxTgCeJX39FhWZqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z5JSueId-BdsxTgCeJX39FhWZqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:92:6a:dd:54:90:18:8d:be:4f:55:c7:c2:08:bc:e2:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=679252b9e21df8176cc538027895f7f4585666ab
Validity
Not Before: Aug 27 05:59:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c8c98c16b4a750445c20fc2adcc3f5b445dc6678
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:43:87:a1:3c:11:21:9c:59:8e:56:da:c5:13:
36:ee:f5:fd:75:90:0c:b9:39:a1:da:79:5e:e8:11:
03:4e:06:bb:35:b6:ff:53:67:65:07:4e:9d:e2:3d:
ce:be:0a:b7:86:28:73:e3:3f:06:4b:30:12:16:2d:
32:af:17:a4:45:61:4a:27:19:4b:f2:84:95:04:86:
bd:5e:ea:0a:00:b3:c7:ab:a0:b1:42:fc:25:6c:00:
71:17:d3:1a:58:ae:50:ab:bb:70:c2:c5:95:bf:ea:
a9:69:55:10:35:f2:fe:43:e4:c7:86:19:85:8a:d3:
1b:ea:ad:26:b2:43:a8:2e:d9:25:d8:8a:cd:b3:8d:
81:0c:a3:b9:38:d9:6b:41:a0:e8:af:33:d6:d3:f7:
a0:58:e0:c6:69:c0:2e:c6:ce:36:93:c1:b2:89:19:
e4:82:2d:19:2e:c3:b1:43:dd:ed:12:39:7b:ab:89:
e1:fc:05:6e:fe:ca:c8:25:9f:ff:ed:7c:c1:a8:a0:
42:66:4e:b4:f9:3d:a4:0e:5e:2e:d7:22:35:80:6e:
e3:38:4d:94:05:f0:ad:2b:1f:9c:df:30:ab:b8:7e:
c2:cb:6e:12:27:4e:38:50:6b:5f:22:25:71:d3:dc:
d1:33:0a:49:48:b4:bb:f5:36:b8:27:65:5f:3d:0f:
79:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:C9:8C:16:B4:A7:50:44:5C:20:FC:2A:DC:C3:F5:B4:45:DC:66:78
X509v3 Authority Key Identifier:
keyid:67:92:52:B9:E2:1D:F8:17:6C:C5:38:02:78:95:F7:F4:58:56:66:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5JSueId-BdsxTgCeJX39FhWZqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/31c267-f2e3-4fa9-9d41-336e5b3dd071/1/yMmMFrSnUERcIPwq3MP1tEXcZng.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/31c267-f2e3-4fa9-9d41-336e5b3dd071/1/Z5JSueId-BdsxTgCeJX39FhWZqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.30.208.0/21
77.111.240.0/22
91.198.169.0/24
91.221.196.0/23
104.37.32.0/21
185.10.8.0/22
185.164.12.0/22
193.202.110.0/24
195.47.247.0/24
195.206.121.0/24
IPv6:
2001:67c:3c0::/48
2001:67c:28cc::/48
2a02:2350::/32
2a03:53c0::/32
Signature Algorithm: sha256WithRSAEncryption
9d:59:c1:9c:f3:47:5b:d5:77:4a:d2:d3:f4:65:85:7a:6c:f1:
68:9a:30:2f:96:7e:70:c4:e3:08:ba:f2:ce:8b:55:70:9a:df:
db:53:c1:2a:b1:8e:4f:96:48:9d:fa:dd:a2:d1:90:52:c2:54:
09:ad:b2:42:1d:94:3c:50:27:31:7d:63:56:05:b8:89:1d:36:
e3:2d:87:6e:44:80:1d:8b:f4:6a:15:f2:7a:a4:51:13:03:83:
36:b3:92:1e:28:4c:5b:3f:44:2f:3a:f5:b8:71:c9:d7:8c:6b:
9d:61:e1:27:a4:b6:e2:1b:4e:97:66:ee:61:e3:4e:6d:44:fe:
80:a6:ed:fa:38:6e:5d:17:8a:9c:25:9d:14:04:9a:1d:a9:c9:
cb:ca:67:0e:38:3e:43:fa:9b:c8:1a:12:9e:64:a5:0c:c0:39:
63:64:b5:6f:b0:87:a9:86:b5:34:0f:39:28:09:f6:ca:ea:a8:
b5:38:c0:c6:81:63:f8:13:35:38:9d:68:e0:d3:0a:f0:04:b1:
e3:95:a8:f6:88:be:b7:14:a5:54:cc:cc:43:17:2a:cc:9d:ae:
c6:be:57:70:9f:86:8c:cb:b8:30:42:a8:4e:15:68:6b:c3:ad:
74:60:91:fa:83:d3:e1:59:3e:63:87:66:5a:c2:5d:06:3c:77:
51:63:a0:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:42:33 2024 by rpki-client on console-ams.rpki-client.org