Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/YOmuU1mNiJt93-i_otSLQSPWq9A.roa
File: YOmuU1mNiJt93-i_otSLQSPWq9A.roa (raw, json)
Hash identifier: dNZN4VrB8b5CkKfB+HeCKpTO/O3GiDZqIRQePdbOP/w=
Subject key identifier: 60:E9:AE:53:59:8D:88:9B:7D:DF:E8:BF:A2:D4:8B:41:23:D6:AB:D0
Certificate issuer: /CN=a24b48edc7a325d7f1ae0f257c0e2835171bc9ae
Certificate serial: 01919D093512A4EE80BB75784AC0B80B4C1D
Authority key identifier: A2:4B:48:ED:C7:A3:25:D7:F1:AE:0F:25:7C:0E:28:35:17:1B:C9:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oktI7cejJdfxrg8lfA4oNRcbya4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/YOmuU1mNiJt93-i_otSLQSPWq9A.roa
Signing time: Thu 29 Aug 2024 07:28:31 +0000
ROA not before: Thu 29 Aug 2024 07:28:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39704
IP address blocks: 5.22.248.0/21 maxlen: 24
46.182.216.0/21 maxlen: 24
91.192.36.0/22 maxlen: 24
94.124.88.0/21 maxlen: 24
185.94.168.0/24 maxlen: 24
185.103.16.0/22 maxlen: 24
194.50.163.0/24 maxlen: 24
195.216.246.0/24 maxlen: 24
213.132.192.0/19 maxlen: 24
2a00:1bd0::/29 maxlen: 32
2a00:1bd0:1378::/48 maxlen: 48
2a00:1bd0:1398::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/oktI7cejJdfxrg8lfA4oNRcbya4.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/oktI7cejJdfxrg8lfA4oNRcbya4.mft
rsync://rpki.ripe.net/repository/DEFAULT/oktI7cejJdfxrg8lfA4oNRcbya4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Sep 2024 13:50:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:9d:09:35:12:a4:ee:80:bb:75:78:4a:c0:b8:0b:4c:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a24b48edc7a325d7f1ae0f257c0e2835171bc9ae
Validity
Not Before: Aug 29 07:28:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=60e9ae53598d889b7ddfe8bfa2d48b4123d6abd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d8:12:e2:e3:54:d2:cf:83:cb:dd:23:ff:58:
e1:23:49:4d:99:25:65:40:69:78:5a:05:67:4d:cd:
f8:a7:bb:99:b8:cf:7e:f8:db:99:0c:2a:a1:19:6c:
a9:fb:6d:63:f2:a2:d4:a8:25:58:3f:46:db:61:04:
61:d4:0b:f9:2a:8e:5f:47:bb:a8:26:e9:ff:3d:8a:
ee:cb:38:21:bd:0c:00:21:80:82:a5:91:17:bc:09:
5a:7e:c8:cf:a6:11:6b:4a:f8:96:25:fe:0a:3c:cb:
a0:c2:1f:99:40:5b:ed:67:b7:15:02:3e:6d:14:bd:
60:af:73:f3:9b:f8:ba:11:39:b1:e9:96:61:d1:68:
de:19:d4:3e:98:59:be:85:32:ae:25:d9:69:b3:75:
4b:8f:2f:84:87:20:a0:c0:2a:af:cc:ec:33:02:49:
3a:ca:7a:7f:be:f2:2e:42:5f:b3:ba:d7:c4:c5:13:
2c:9e:eb:f6:7c:00:b2:d3:91:9f:77:43:ea:23:7d:
51:6d:6c:fd:d7:3d:ee:8a:04:f9:03:c2:4b:90:db:
0a:82:66:dd:fc:2e:0e:bb:1a:80:de:a2:62:26:0c:
a8:38:0e:4c:cd:4f:ef:a5:4b:c2:34:37:ee:ba:f0:
a3:14:29:c7:15:16:98:ac:fc:69:51:10:9b:18:2b:
78:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:E9:AE:53:59:8D:88:9B:7D:DF:E8:BF:A2:D4:8B:41:23:D6:AB:D0
X509v3 Authority Key Identifier:
keyid:A2:4B:48:ED:C7:A3:25:D7:F1:AE:0F:25:7C:0E:28:35:17:1B:C9:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oktI7cejJdfxrg8lfA4oNRcbya4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/YOmuU1mNiJt93-i_otSLQSPWq9A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/oktI7cejJdfxrg8lfA4oNRcbya4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.22.248.0/21
46.182.216.0/21
91.192.36.0/22
94.124.88.0/21
185.94.168.0/24
185.103.16.0/22
194.50.163.0/24
195.216.246.0/24
213.132.192.0/19
IPv6:
2a00:1bd0::/29
Signature Algorithm: sha256WithRSAEncryption
70:05:b0:30:06:5d:81:35:cd:44:72:fd:d3:0e:8f:a7:31:e6:
99:7f:f8:06:63:24:16:5c:02:3e:71:92:f3:0f:5f:ed:d6:56:
51:39:a7:fe:ed:51:bc:75:3d:31:54:e9:5a:86:d5:c4:e1:e6:
34:de:e1:7b:33:22:94:d1:c1:20:2b:cc:9e:e2:88:f7:17:77:
aa:a8:3c:0e:1e:9d:10:37:b1:2f:c8:8c:c0:7e:83:a6:a4:cb:
13:c8:2e:b1:3c:2c:3a:80:17:ca:8b:74:7c:69:a6:e6:84:be:
a4:e2:33:9f:98:ad:75:29:6e:86:ac:23:83:73:58:7d:4e:f5:
48:39:6c:87:34:db:df:c3:a0:1f:82:d4:54:95:52:dd:9e:10:
14:19:6a:47:f2:66:a6:ea:ae:d2:91:ef:c5:23:3c:49:d2:1c:
85:84:27:90:68:8b:f5:1d:93:e9:fd:b7:61:68:5f:d5:3c:a3:
4c:cc:cb:15:c8:b7:0f:02:c0:aa:28:66:98:0e:34:e8:ab:f4:
7b:cd:72:0f:6e:9d:2a:8d:bd:76:4f:e5:d9:e0:9c:8e:36:b7:
83:88:40:09:b0:cc:63:7b:63:ae:3d:c3:fe:1d:92:0f:9a:e1:
81:14:04:56:7e:94:10:bf:65:e1:62:ee:ba:ac:2b:4e:53:b6:
83:28:3d:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 20:12:39 2024 by rpki-client on console-ams.rpki-client.org