Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/9vJiHuBqraaC1qHRwGXYRHNYSMM.roa
File: 9vJiHuBqraaC1qHRwGXYRHNYSMM.roa (raw, json)
Hash identifier: 8UPIx3mkEJ7WjZMcDbMefjuAmT521xWEWJN9fRaxdIU=
Subject key identifier: F6:F2:62:1E:E0:6A:AD:A6:82:D6:A1:D1:C0:65:D8:44:73:58:48:C3
Certificate issuer: /CN=8817aafec61c3a6b024b6a9f54ffb764ca3df922
Certificate serial: 018E093C27D768651E5612F4226B6E30C276
Authority key identifier: 88:17:AA:FE:C6:1C:3A:6B:02:4B:6A:9F:54:FF:B7:64:CA:3D:F9:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/9vJiHuBqraaC1qHRwGXYRHNYSMM.roa
Signing time: Mon 04 Mar 2024 11:32:01 +0000
ROA not before: Mon 04 Mar 2024 11:32:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12654
IP address blocks: 84.205.64.0/24 maxlen: 24
84.205.65.0/24 maxlen: 24
84.205.66.0/24 maxlen: 24
84.205.67.0/24 maxlen: 24
84.205.69.0/24 maxlen: 24
84.205.70.0/24 maxlen: 24
84.205.75.0/24 maxlen: 24
84.205.76.0/24 maxlen: 24
84.205.80.0/24 maxlen: 24
84.205.81.0/24 maxlen: 24
84.205.82.0/24 maxlen: 24
84.205.85.0/24 maxlen: 24
84.205.86.0/24 maxlen: 24
84.205.88.0/24 maxlen: 24
84.205.91.0/24 maxlen: 24
84.205.92.0/24 maxlen: 24
93.175.144.0/24 maxlen: 24
93.175.146.0/24 maxlen: 24
93.175.152.0/24 maxlen: 24
93.175.153.0/24 maxlen: 24
93.175.154.0/25 maxlen: 25
93.175.154.128/28 maxlen: 28
2001:7fb:ef00::/48 maxlen: 48
2001:7fb:ef01::/48 maxlen: 48
2001:7fb:ef02::/48 maxlen: 48
2001:7fb:ef03::/48 maxlen: 48
2001:7fb:ef04::/48 maxlen: 48
2001:7fb:fb01:100::/56 maxlen: 56
2001:7fb:fb01:200::/64 maxlen: 64
2001:7fb:fd02::/48 maxlen: 48
2001:7fb:fd05::/48 maxlen: 48
2001:7fb:fe00::/48 maxlen: 48
2001:7fb:fe01::/48 maxlen: 48
2001:7fb:fe03::/48 maxlen: 48
2001:7fb:fe04::/48 maxlen: 48
2001:7fb:fe05::/48 maxlen: 48
2001:7fb:fe06::/48 maxlen: 48
2001:7fb:fe07::/48 maxlen: 48
2001:7fb:fe0a::/48 maxlen: 48
2001:7fb:fe0b::/48 maxlen: 48
2001:7fb:fe0c::/48 maxlen: 48
2001:7fb:fe0d::/48 maxlen: 48
2001:7fb:fe0e::/48 maxlen: 48
2001:7fb:fe0f::/48 maxlen: 48
2001:7fb:fe10::/48 maxlen: 48
2001:7fb:fe12::/48 maxlen: 48
2001:7fb:fe13::/48 maxlen: 48
2001:7fb:fe14::/48 maxlen: 48
2001:7fb:fe15::/48 maxlen: 48
2001:7fb:fe16::/48 maxlen: 48
2001:7fb:fe17::/48 maxlen: 48
2001:7fb:fe18::/48 maxlen: 48
2001:7fb:ff00::/48 maxlen: 48
2001:7fb:ff01::/48 maxlen: 48
2001:7fb:ff02::/48 maxlen: 48
2001:7fb:ff04::/48 maxlen: 48
2001:7fb:ff05::/48 maxlen: 48
2001:7fb:ff06::/48 maxlen: 48
2001:7fb:ff07::/48 maxlen: 48
2001:7fb:ff0a::/48 maxlen: 48
2001:7fb:ff0b::/48 maxlen: 48
2001:7fb:ff0c::/48 maxlen: 48
2001:7fb:ff0d::/48 maxlen: 48
2001:7fb:ff0e::/48 maxlen: 48
2001:7fb:ff0f::/48 maxlen: 48
2001:7fb:ff10::/48 maxlen: 48
2001:7fb:ff12::/48 maxlen: 48
2001:7fb:ff13::/48 maxlen: 48
2001:7fb:ff14::/48 maxlen: 48
2001:7fb:ff15::/48 maxlen: 48
2001:7fb:ff16::/48 maxlen: 48
2001:7fb:ff17::/48 maxlen: 48
2001:7fb:ff18::/48 maxlen: 48
2001:7fb:ff19::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.mft
rsync://rpki.ripe.net/repository/DEFAULT/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:09:3c:27:d7:68:65:1e:56:12:f4:22:6b:6e:30:c2:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8817aafec61c3a6b024b6a9f54ffb764ca3df922
Validity
Not Before: Mar 4 11:32:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f6f2621ee06aada682d6a1d1c065d844735848c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7c:1c:78:32:62:a4:41:4f:74:87:b5:d2:b5:
87:71:f9:a2:31:5f:9d:a8:c4:e8:e4:18:1f:54:79:
0e:3b:84:f5:90:e5:0e:d3:72:92:c4:81:80:a0:38:
df:94:5e:4a:ea:27:09:c1:e2:ba:d3:19:bb:2f:47:
a5:79:a8:aa:aa:39:4b:19:8b:8c:52:89:84:27:68:
42:ec:ec:e7:45:22:f1:a6:35:c4:6a:68:3f:ab:be:
f9:ab:ad:26:bd:42:7d:50:f7:45:d8:42:9e:59:df:
a7:f4:08:aa:e6:db:83:f4:02:09:48:3c:a4:b0:55:
4b:a2:fb:38:be:4c:dd:3b:25:24:60:00:dc:56:96:
41:66:e1:01:b3:0f:53:cc:39:5d:7a:3c:41:e2:99:
93:44:4f:21:b1:66:6c:66:f0:f4:ec:43:94:e6:24:
36:1d:b7:63:49:ce:23:58:bb:38:16:22:3f:42:c4:
bb:b0:c3:a9:38:98:94:73:4f:c8:ad:08:a6:71:69:
12:8e:37:eb:7e:c4:53:b8:cd:88:f7:82:ca:59:de:
07:36:9b:b5:72:1e:56:53:08:98:ad:9e:ae:82:ec:
19:b5:18:7c:2a:2a:bf:fc:61:56:c9:a7:d5:af:43:
b8:d6:30:38:47:c5:cd:1b:74:46:d3:7b:86:72:7b:
de:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:F2:62:1E:E0:6A:AD:A6:82:D6:A1:D1:C0:65:D8:44:73:58:48:C3
X509v3 Authority Key Identifier:
keyid:88:17:AA:FE:C6:1C:3A:6B:02:4B:6A:9F:54:FF:B7:64:CA:3D:F9:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/9vJiHuBqraaC1qHRwGXYRHNYSMM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.205.64.0/22
84.205.69.0-84.205.70.255
84.205.75.0-84.205.76.255
84.205.80.0-84.205.82.255
84.205.85.0-84.205.86.255
84.205.88.0/24
84.205.91.0-84.205.92.255
93.175.144.0/24
93.175.146.0/24
93.175.152.0-93.175.154.143
IPv6:
2001:7fb:ef00::-2001:7fb:ef04:ffff:ffff:ffff:ffff:ffff
2001:7fb:fb01:100::-2001:7fb:fb01:200:ffff:ffff:ffff:ffff
2001:7fb:fd02::/48
2001:7fb:fd05::/48
2001:7fb:fe00::/47
2001:7fb:fe03::-2001:7fb:fe07:ffff:ffff:ffff:ffff:ffff
2001:7fb:fe0a::-2001:7fb:fe10:ffff:ffff:ffff:ffff:ffff
2001:7fb:fe12::-2001:7fb:fe18:ffff:ffff:ffff:ffff:ffff
2001:7fb:ff00::-2001:7fb:ff02:ffff:ffff:ffff:ffff:ffff
2001:7fb:ff04::/46
2001:7fb:ff0a::-2001:7fb:ff10:ffff:ffff:ffff:ffff:ffff
2001:7fb:ff12::-2001:7fb:ff19:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
4b:0d:23:a8:3b:27:c5:15:de:29:e5:0b:21:87:6c:02:42:00:
fa:b9:76:8e:69:e8:6e:e7:1c:50:07:ab:2e:c8:7b:62:f3:7a:
3e:8c:d2:b8:ed:36:14:53:33:a3:0f:7f:57:6d:b5:bd:a8:73:
d9:cc:22:3e:3e:72:0d:8f:e8:0a:fa:cc:9e:80:25:c6:c6:28:
b4:43:d1:82:15:d6:28:ec:e3:86:be:35:4d:da:a2:27:e5:50:
2b:b8:1e:5b:cd:93:78:67:17:a6:4f:09:d0:aa:41:18:83:3e:
28:22:b2:dc:ce:20:13:de:ad:70:3c:6f:8d:4a:ce:08:7a:34:
fe:68:4d:50:cd:8c:a6:26:2f:10:2d:1e:aa:9a:67:6e:31:b1:
17:43:e8:66:a1:f4:07:56:ce:b0:0c:a3:8b:19:47:12:17:a9:
a5:81:f0:f0:bb:a6:2d:8c:74:1a:8d:d6:b3:67:1e:9c:22:39:
4a:43:b0:d4:17:ab:73:85:1b:ce:68:fe:64:85:4f:99:1a:20:
62:b0:ef:01:d5:41:f2:4e:96:28:8d:a6:2d:f7:ac:a2:0d:dd:
54:02:72:62:35:9b:8e:b3:98:3e:69:3a:b1:c1:b4:86:bb:5a:
69:5e:95:af:34:4b:c0:5c:33:8b:2b:0e:91:37:20:d9:e9:e8:
83:5d:48:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:01:01 2024 by rpki-client on console-ams.rpki-client.org