Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/2da1ec-aa4b-4d94-98cb-a776e4a63e6f/1/xFIhMo4l79lXQ1yoc-taiB9wrfY.roa
File: xFIhMo4l79lXQ1yoc-taiB9wrfY.roa (raw, json)
Hash identifier: EOOhj/5G9X8D0oGxw1Pmn4dJ4juJH7HQbAy/4InNbx8=
Subject key identifier: C4:52:21:32:8E:25:EF:D9:57:43:5C:A8:73:EB:5A:88:1F:70:AD:F6
Certificate issuer: /CN=afa51165aa5036acda11fee0020e34fcc439ede6
Certificate serial: 018E66740C0116901DAF4D405D34FE28061A
Authority key identifier: AF:A5:11:65:AA:50:36:AC:DA:11:FE:E0:02:0E:34:FC:C4:39:ED:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r6URZapQNqzaEf7gAg40_MQ57eY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/2da1ec-aa4b-4d94-98cb-a776e4a63e6f/1/xFIhMo4l79lXQ1yoc-taiB9wrfY.roa
Signing time: Fri 22 Mar 2024 13:57:45 +0000
ROA not before: Fri 22 Mar 2024 13:57:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25504
IP address blocks: 83.243.56.0/21 maxlen: 24
89.200.168.0/21 maxlen: 24
91.223.141.0/24 maxlen: 24
94.102.208.0/20 maxlen: 24
109.235.56.0/21 maxlen: 24
151.252.48.0/20 maxlen: 24
158.58.144.0/21 maxlen: 24
185.90.232.0/22 maxlen: 24
193.254.184.0/21 maxlen: 24
195.191.92.0/23 maxlen: 24
2001:67c:2394::/48 maxlen: 48
2a00:19e0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/2da1ec-aa4b-4d94-98cb-a776e4a63e6f/1/r6URZapQNqzaEf7gAg40_MQ57eY.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/2da1ec-aa4b-4d94-98cb-a776e4a63e6f/1/r6URZapQNqzaEf7gAg40_MQ57eY.mft
rsync://rpki.ripe.net/repository/DEFAULT/r6URZapQNqzaEf7gAg40_MQ57eY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:66:74:0c:01:16:90:1d:af:4d:40:5d:34:fe:28:06:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afa51165aa5036acda11fee0020e34fcc439ede6
Validity
Not Before: Mar 22 13:57:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c45221328e25efd957435ca873eb5a881f70adf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:79:c4:f4:93:0f:c0:b4:31:79:91:cb:d3:ab:
55:e1:9c:2e:5c:b3:ba:6a:33:e5:75:97:1c:92:e5:
c4:f3:8d:c4:ea:1d:8b:07:7d:7b:f9:8b:77:01:de:
e6:f1:f0:69:b5:38:d8:37:9e:58:be:9c:4e:a1:bf:
cf:4d:7e:be:f2:1d:bb:3b:20:9f:6d:00:87:ad:ae:
d6:6c:d7:de:31:b9:fd:1a:5c:b8:fe:49:7c:5d:cc:
de:43:c5:b7:0e:07:4d:1e:ec:fe:72:f1:74:09:db:
dc:56:65:0a:61:8b:82:d9:b9:12:c6:3c:e2:00:35:
89:90:97:f6:48:92:ba:c1:95:ab:88:a6:1d:2e:6b:
f2:e8:ca:b4:7b:cf:b9:74:8a:30:c5:bf:82:8e:9f:
07:76:2c:fd:a4:8f:2e:b9:2c:39:ca:b1:ca:fe:29:
eb:80:48:e8:3e:89:f5:1f:48:68:62:35:6a:ec:b0:
eb:f8:c2:e4:83:e4:bf:91:7c:06:c3:fa:ee:cd:2f:
38:81:ad:67:29:96:f8:11:7b:bd:90:80:32:57:7c:
b4:f2:52:21:40:cb:52:98:c5:0c:a6:f0:b3:68:84:
90:2d:57:fa:bd:b1:6f:b3:62:f8:74:a6:12:e6:e7:
9f:74:a9:88:2a:84:02:f8:45:ea:1f:e0:81:58:d6:
60:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:52:21:32:8E:25:EF:D9:57:43:5C:A8:73:EB:5A:88:1F:70:AD:F6
X509v3 Authority Key Identifier:
keyid:AF:A5:11:65:AA:50:36:AC:DA:11:FE:E0:02:0E:34:FC:C4:39:ED:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r6URZapQNqzaEf7gAg40_MQ57eY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/2da1ec-aa4b-4d94-98cb-a776e4a63e6f/1/xFIhMo4l79lXQ1yoc-taiB9wrfY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/2da1ec-aa4b-4d94-98cb-a776e4a63e6f/1/r6URZapQNqzaEf7gAg40_MQ57eY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.243.56.0/21
89.200.168.0/21
91.223.141.0/24
94.102.208.0/20
109.235.56.0/21
151.252.48.0/20
158.58.144.0/21
185.90.232.0/22
193.254.184.0/21
195.191.92.0/23
IPv6:
2001:67c:2394::/48
2a00:19e0::/29
Signature Algorithm: sha256WithRSAEncryption
95:6a:fa:c3:1e:22:c8:8f:dc:78:77:ac:7c:ee:95:85:fd:ca:
98:88:6f:c4:10:36:08:61:d8:8b:0a:af:3c:9a:1f:8d:6f:a2:
1b:21:71:e0:7c:e0:a7:b0:d8:d7:8f:c2:c1:4c:f2:9e:b0:05:
8f:09:f7:78:92:1f:79:cf:73:b7:8a:24:19:35:ba:87:f0:35:
f7:67:78:fa:a4:eb:5c:00:12:55:77:1d:e1:95:c9:ce:e2:d0:
cb:24:73:ab:f9:b3:d2:d0:83:b0:1e:a6:8c:e1:42:76:45:9c:
48:a8:86:6e:e8:fe:65:6b:8a:80:9d:de:dd:1d:d0:20:83:d6:
26:c6:37:8b:f2:a8:23:2b:6c:32:c9:2d:08:a2:18:9c:c1:6a:
33:1d:3a:b7:33:6b:99:de:72:da:31:71:57:f7:09:e0:dc:61:
db:dc:db:bf:51:23:1b:2a:f8:07:5b:c8:56:06:8c:9f:ee:f8:
52:de:2d:b6:24:47:bf:d2:0d:b4:fb:08:79:7e:b3:b9:17:6f:
ec:20:0a:8f:ec:21:fb:fa:3b:49:22:e8:e5:13:ab:bd:8a:96:
4b:3a:c9:25:75:86:21:0a:b5:f5:5e:1d:df:4c:d0:2a:82:8b:
58:ee:81:c1:78:0b:11:f5:11:92:ef:4d:a4:5b:9a:6d:39:41:
23:4a:bc:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:21:35 2024 by rpki-client on console-ams.rpki-client.org