Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/fb212a-7a76-42e2-8989-965529f20d11/1/FbESP026SDu4r3vUpGPRdY-0JMo.roa
File: FbESP026SDu4r3vUpGPRdY-0JMo.roa (raw, json)
Hash identifier: B7U28oJRsanxbl0MwYRXBWlYBI0lFvle+m2jCJCjAds=
Subject key identifier: 15:B1:12:3F:4D:BA:48:3B:B8:AF:7B:D4:A4:63:D1:75:8F:B4:24:CA
Certificate issuer: /CN=80f9a24bd26cc8217518a11f598e6372025e8ae9
Certificate serial: 01923E8916B32349DE769277EA3ABB9C6CFF
Authority key identifier: 80:F9:A2:4B:D2:6C:C8:21:75:18:A1:1F:59:8E:63:72:02:5E:8A:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gPmiS9JsyCF1GKEfWY5jcgJeiuk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/fb212a-7a76-42e2-8989-965529f20d11/1/FbESP026SDu4r3vUpGPRdY-0JMo.roa
Signing time: Sun 29 Sep 2024 16:07:04 +0000
ROA not before: Sun 29 Sep 2024 16:07:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3212
IP address blocks: 31.15.128.0/17 maxlen: 17
46.150.32.0/19 maxlen: 19
46.182.224.0/21 maxlen: 21
77.38.0.0/17 maxlen: 17
77.73.104.0/22 maxlen: 22
77.111.0.0/18 maxlen: 18
78.153.32.0/19 maxlen: 19
82.149.0.0/19 maxlen: 19
82.192.32.0/19 maxlen: 19
84.20.224.0/19 maxlen: 19
84.52.128.0/18 maxlen: 18
86.58.0.0/17 maxlen: 17
87.119.128.0/19 maxlen: 19
91.132.208.0/22 maxlen: 22
91.185.192.0/19 maxlen: 19
91.237.132.0/22 maxlen: 22
92.53.128.0/19 maxlen: 19
92.63.16.0/20 maxlen: 20
94.140.64.0/19 maxlen: 19
95.143.144.0/20 maxlen: 20
176.57.92.0/22 maxlen: 22
176.76.0.0/16 maxlen: 16
178.79.64.0/18 maxlen: 18
185.30.136.0/22 maxlen: 22
185.65.228.0/22 maxlen: 22
185.66.148.0/22 maxlen: 22
185.72.60.0/22 maxlen: 22
185.72.60.0/24 maxlen: 24
185.79.228.0/22 maxlen: 22
185.85.148.0/22 maxlen: 22
185.97.68.0/22 maxlen: 22
193.111.220.0/22 maxlen: 22
194.152.0.0/19 maxlen: 19
195.47.228.0/24 maxlen: 24
212.85.160.0/19 maxlen: 19
213.143.64.0/19 maxlen: 19
213.161.0.0/19 maxlen: 19
213.172.224.0/19 maxlen: 19
217.72.64.0/19 maxlen: 19
2001:1688::/29 maxlen: 29
2a00:fc0::/32 maxlen: 32
2a00:13d8::/29 maxlen: 29
2a00:1c80::/29 maxlen: 29
2a00:1da8::/32 maxlen: 32
2a00:b2a0::/32 maxlen: 32
2a02:840::/32 maxlen: 32
2a05:acc0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/fb212a-7a76-42e2-8989-965529f20d11/1/gPmiS9JsyCF1GKEfWY5jcgJeiuk.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/fb212a-7a76-42e2-8989-965529f20d11/1/gPmiS9JsyCF1GKEfWY5jcgJeiuk.mft
rsync://rpki.ripe.net/repository/DEFAULT/gPmiS9JsyCF1GKEfWY5jcgJeiuk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:3e:89:16:b3:23:49:de:76:92:77:ea:3a:bb:9c:6c:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80f9a24bd26cc8217518a11f598e6372025e8ae9
Validity
Not Before: Sep 29 16:07:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=15b1123f4dba483bb8af7bd4a463d1758fb424ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:67:0b:25:f3:0a:ca:db:19:7d:06:66:c1:fa:
2d:ce:ae:eb:7e:5c:bc:50:77:5b:3b:ab:c8:7b:36:
2e:e9:de:18:54:6c:fe:ae:f0:e1:81:23:01:48:8e:
8f:05:26:7d:40:bd:39:4e:cc:4e:51:0e:1d:a1:a9:
05:e7:22:58:45:e5:cf:93:a1:97:a1:0f:15:18:8c:
5b:68:96:b4:06:44:73:d8:bc:d6:64:2b:a3:96:9d:
b2:7f:be:1b:a9:f3:5f:71:e1:18:68:65:08:19:8b:
bd:44:30:52:70:ad:ef:a4:1e:24:11:d2:87:9f:e2:
6d:34:ad:ce:c8:b3:21:bc:d9:be:5f:f6:6f:a7:11:
6c:9b:b5:9e:46:02:d9:21:b9:62:01:d2:cc:4b:fa:
f2:f9:17:a7:62:c7:ad:3f:d1:8a:5f:47:cf:8d:74:
92:5c:6b:20:a5:9b:21:99:0e:e2:60:d6:49:80:36:
4e:a5:b5:2b:c6:4b:83:60:f0:2a:8c:41:18:9f:06:
cc:f2:1d:fd:8d:48:d5:69:5c:1e:65:01:8f:ab:22:
6c:a7:2a:c9:d8:61:6c:be:ae:fc:c2:b9:ce:ca:0e:
f1:cc:50:ad:45:e8:ff:4d:fd:71:84:b2:30:29:3a:
7d:ed:e3:39:2e:87:95:3d:fb:0f:df:fe:fe:00:e3:
61:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:B1:12:3F:4D:BA:48:3B:B8:AF:7B:D4:A4:63:D1:75:8F:B4:24:CA
X509v3 Authority Key Identifier:
keyid:80:F9:A2:4B:D2:6C:C8:21:75:18:A1:1F:59:8E:63:72:02:5E:8A:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gPmiS9JsyCF1GKEfWY5jcgJeiuk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/fb212a-7a76-42e2-8989-965529f20d11/1/FbESP026SDu4r3vUpGPRdY-0JMo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/fb212a-7a76-42e2-8989-965529f20d11/1/gPmiS9JsyCF1GKEfWY5jcgJeiuk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.15.128.0/17
46.150.32.0/19
46.182.224.0/21
77.38.0.0/17
77.73.104.0/22
77.111.0.0/18
78.153.32.0/19
82.149.0.0/19
82.192.32.0/19
84.20.224.0/19
84.52.128.0/18
86.58.0.0/17
87.119.128.0/19
91.132.208.0/22
91.185.192.0/19
91.237.132.0/22
92.53.128.0/19
92.63.16.0/20
94.140.64.0/19
95.143.144.0/20
176.57.92.0/22
176.76.0.0/16
178.79.64.0/18
185.30.136.0/22
185.65.228.0/22
185.66.148.0/22
185.72.60.0/22
185.79.228.0/22
185.85.148.0/22
185.97.68.0/22
193.111.220.0/22
194.152.0.0/19
195.47.228.0/24
212.85.160.0/19
213.143.64.0/19
213.161.0.0/19
213.172.224.0/19
217.72.64.0/19
IPv6:
2001:1688::/29
2a00:fc0::/32
2a00:13d8::/29
2a00:1c80::/29
2a00:1da8::/32
2a00:b2a0::/32
2a02:840::/32
2a05:acc0::/29
Signature Algorithm: sha256WithRSAEncryption
32:5a:5e:a1:e4:ff:b8:37:4e:43:35:31:b7:59:e5:af:92:a4:
70:1a:f9:25:13:4f:23:a4:c6:87:42:f2:b4:90:ef:0c:79:3b:
c4:90:d2:ef:af:8f:5a:a4:97:b5:eb:33:a2:35:3f:1b:1f:a8:
b3:5e:7e:3c:f9:3d:42:69:73:ef:e0:1d:f1:ce:c0:bf:47:e6:
b5:32:4c:66:b7:a4:91:71:db:f2:ba:64:1d:91:12:0c:5f:4d:
67:7a:16:22:cc:3c:ce:6d:65:d1:55:96:91:a0:c4:e7:cf:18:
8f:9b:cf:b6:23:d8:ac:61:a7:27:19:bb:d2:9a:9a:8f:6e:66:
8d:d0:a4:32:81:66:ae:47:1d:e7:09:06:4e:ce:bf:24:6b:3f:
d0:c8:7e:19:77:d7:ce:d0:48:f2:7e:86:1f:d1:4e:39:f8:41:
65:d0:98:b6:b8:fa:48:d3:8d:8b:2e:49:fc:83:02:b4:07:18:
b3:16:2c:20:41:d4:00:ff:68:8f:a4:80:a4:f0:53:df:e5:a2:
46:e2:e4:b9:e9:53:52:1a:e9:b8:97:96:e3:62:5a:39:3c:a0:
47:6b:c9:d5:c7:e4:10:4a:7b:1b:f3:5b:f8:45:2d:cc:c4:5e:
d2:46:96:04:6c:aa:82:3b:5a:9d:51:f2:e3:69:08:f1:b1:9e:
54:61:28:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 12:02:46 2024 by rpki-client on console-fra.rpki-client.org