Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/r6W6k5Hvc5HL_z1MdY9fkmRIAvo.roa
File: r6W6k5Hvc5HL_z1MdY9fkmRIAvo.roa (raw, json)
Hash identifier: JJCw5HaQSW3WvSr1m0dmYH8PGEyqYDwjIV1jKatdpXk=
Subject key identifier: AF:A5:BA:93:91:EF:73:91:CB:FF:3D:4C:75:8F:5F:92:64:48:02:FA
Certificate issuer: /CN=9aee15c33de358938d6900a1b3c14480a389e85b
Certificate serial: 018CCA29D68D41371FAFEA4E44E4D2531428
Authority key identifier: 9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/r6W6k5Hvc5HL_z1MdY9fkmRIAvo.roa
Signing time: Tue 02 Jan 2024 12:33:08 +0000
ROA not before: Tue 02 Jan 2024 12:33:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207710
IP address blocks: 185.95.102.0/23 maxlen: 24
185.95.101.0/24 maxlen: 24
185.81.174.0/24 maxlen: 24
185.81.184.0/24 maxlen: 24
185.81.187.0/24 maxlen: 24
185.96.38.0/24 maxlen: 24
185.89.104.0/23 maxlen: 24
185.89.108.0/22 maxlen: 24
185.97.1.0/24 maxlen: 24
185.97.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 May 2024 13:36:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:d6:8d:41:37:1f:af:ea:4e:44:e4:d2:53:14:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aee15c33de358938d6900a1b3c14480a389e85b
Validity
Not Before: Jan 2 12:33:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=afa5ba9391ef7391cbff3d4c758f5f92644802fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9e:38:94:0a:24:30:ba:40:04:44:a6:3c:35:
01:20:4b:e0:c6:51:2b:3f:c0:6e:57:d3:1c:7d:5c:
95:34:c0:21:d6:88:06:50:cc:51:03:dc:60:ef:b9:
97:ad:6d:fb:80:73:d2:55:f1:74:d3:34:3b:5d:96:
70:ce:b8:6d:91:e0:ee:e4:97:35:2b:67:f4:ea:14:
50:8d:c8:5d:3e:52:50:a2:46:2e:42:7e:75:82:11:
66:15:e0:e9:36:81:f3:e1:66:a4:05:0c:db:09:eb:
ff:fd:ac:e0:41:2f:54:3d:da:58:48:96:c8:d0:eb:
68:09:03:e7:ce:96:58:09:ba:1a:da:dd:75:79:32:
21:dc:66:bb:f0:98:24:2b:86:86:e4:21:e9:fe:21:
e0:96:d3:8f:40:2b:3c:d5:7f:b2:fd:77:a3:69:15:
ed:87:88:f5:dc:02:13:36:ac:ec:3a:c9:aa:47:94:
82:e2:c1:e8:11:6d:42:96:97:e6:33:dd:a2:3a:01:
4e:5f:87:f0:6d:bd:14:bf:dc:99:c6:ed:de:00:76:
cc:d8:80:29:c6:a9:a2:03:20:9b:72:a3:b2:65:88:
73:ec:f7:d7:3a:e4:eb:0c:79:f7:2f:7b:61:b3:20:
d7:1a:b6:65:b5:61:27:60:71:34:4a:bc:dd:62:59:
2c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:A5:BA:93:91:EF:73:91:CB:FF:3D:4C:75:8F:5F:92:64:48:02:FA
X509v3 Authority Key Identifier:
keyid:9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/r6W6k5Hvc5HL_z1MdY9fkmRIAvo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.81.174.0/24
185.81.184.0/24
185.81.187.0/24
185.89.104.0/23
185.89.108.0/22
185.95.101.0-185.95.103.255
185.96.38.0/24
185.97.1.0/24
185.97.3.0/24
Signature Algorithm: sha256WithRSAEncryption
85:e7:98:61:9d:10:d1:b4:ba:5c:d1:a4:e3:d2:25:36:da:94:
ec:64:49:a4:2f:89:eb:e7:02:a0:66:2d:a1:38:4d:0f:5f:bb:
de:b1:fb:3b:8d:c0:81:dd:6a:62:92:99:fa:78:4e:99:63:fe:
9f:11:0f:42:6b:e5:c5:16:88:d3:9f:6b:e2:9b:b2:ba:f7:5a:
01:e0:2d:39:4a:7c:72:37:59:7f:d3:d0:e8:7a:5c:a8:ef:d6:
8a:ba:ea:bc:9b:10:8c:ac:b3:8c:b3:43:98:81:26:50:e5:a5:
a5:61:05:bf:0c:58:6d:aa:58:d9:a6:4b:00:db:db:79:76:1c:
81:c7:19:8b:97:f9:2a:04:e3:91:8b:df:bf:77:0e:b6:c0:17:
53:c5:4a:13:22:3b:5e:77:ef:db:98:e1:3e:c8:95:41:dc:99:
7f:23:61:45:6a:12:26:29:5a:6b:48:3d:bc:45:eb:02:6e:48:
9e:fc:ff:75:50:af:e5:6b:d5:fe:5b:0a:a2:05:fa:df:c1:a3:
d6:ff:1a:c7:94:cd:ed:32:32:8f:1d:73:be:33:9b:1f:4a:85:
78:d9:84:8c:5f:66:90:3a:60:20:85:3b:ba:2e:5c:09:53:80:
89:49:93:57:19:b4:3c:6b:f8:d8:5f:99:55:9c:bf:86:eb:da:
e1:74:f0:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 15:47:23 2024 by rpki-client on console-fra.rpki-client.org