Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/294fa1-e938-4cd2-9a89-29062e870b64/1/nPUW_emH6dmFGwKk1Uc_wm81zJ0.roa
File: nPUW_emH6dmFGwKk1Uc_wm81zJ0.roa (raw, json)
Hash identifier: /UjbSEQ9O4o/V2fMtBuQOkwrKZqQyjuuZZ9Cuibi+ec=
Subject key identifier: 9C:F5:16:FD:E9:87:E9:D9:85:1B:02:A4:D5:47:3F:C2:6F:35:CC:9D
Certificate issuer: /CN=f22bed3f37cd72826511c574560deb55542550e4
Certificate serial: 018CC26D1183C2B7A2A09EB71170A91AA287
Authority key identifier: F2:2B:ED:3F:37:CD:72:82:65:11:C5:74:56:0D:EB:55:54:25:50:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/294fa1-e938-4cd2-9a89-29062e870b64/1/nPUW_emH6dmFGwKk1Uc_wm81zJ0.roa
Signing time: Mon 01 Jan 2024 00:29:36 +0000
ROA not before: Mon 01 Jan 2024 00:29:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 24586
IP address blocks: 188.66.16.0/21 maxlen: 24
46.22.180.0/22 maxlen: 24
46.22.184.0/21 maxlen: 24
80.95.160.0/21 maxlen: 24
80.95.168.0/22 maxlen: 24
80.95.172.0/22 maxlen: 24
93.92.96.0/22 maxlen: 24
93.92.100.0/22 maxlen: 24
2001:4c10::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/294fa1-e938-4cd2-9a89-29062e870b64/1/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/294fa1-e938-4cd2-9a89-29062e870b64/1/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:11:83:c2:b7:a2:a0:9e:b7:11:70:a9:1a:a2:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f22bed3f37cd72826511c574560deb55542550e4
Validity
Not Before: Jan 1 00:29:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9cf516fde987e9d9851b02a4d5473fc26f35cc9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:97:a6:7c:af:58:8f:94:45:8f:1d:a9:52:db:
99:f4:4f:8d:56:6d:ca:96:73:f1:46:a0:2c:88:e3:
35:b1:30:9f:86:43:5a:ad:f3:9b:70:c6:ea:c2:32:
2c:cd:d6:87:4e:7f:65:83:ce:75:13:f5:c6:4e:df:
a4:dd:2b:83:56:66:91:f6:f0:3a:75:a5:af:5d:2e:
bb:f4:69:75:92:29:17:44:e4:89:59:17:9c:30:83:
5e:2d:56:8c:81:bc:5a:62:72:a4:b3:9a:ee:27:ac:
3e:07:1b:3d:cc:98:5f:1c:a7:8b:dc:bc:d9:64:54:
bd:0c:66:bf:35:51:44:a3:c5:6f:eb:ea:9e:b3:27:
28:1a:7d:24:82:74:46:88:a2:f6:ac:fc:13:e4:d9:
17:dd:1c:12:8c:1d:a9:96:6e:7f:98:39:b0:f2:1b:
ba:94:d8:6f:08:4a:08:03:bd:e3:90:ba:e1:f4:ef:
2a:cf:47:31:ff:ba:40:8c:0e:6d:eb:19:14:8f:8b:
56:76:13:04:81:79:ab:d9:f6:63:99:33:fa:5a:a7:
c0:a1:6c:90:e5:ab:b7:ad:53:95:39:5d:36:28:99:
fc:d7:e2:95:ff:e9:e7:49:3d:c7:91:d2:b7:2d:87:
04:64:f4:d1:31:b9:37:d2:a4:b5:a3:bf:a0:fc:93:
c5:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:F5:16:FD:E9:87:E9:D9:85:1B:02:A4:D5:47:3F:C2:6F:35:CC:9D
X509v3 Authority Key Identifier:
keyid:F2:2B:ED:3F:37:CD:72:82:65:11:C5:74:56:0D:EB:55:54:25:50:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/294fa1-e938-4cd2-9a89-29062e870b64/1/nPUW_emH6dmFGwKk1Uc_wm81zJ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/294fa1-e938-4cd2-9a89-29062e870b64/1/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.22.180.0-46.22.191.255
80.95.160.0/20
93.92.96.0/21
188.66.16.0/21
IPv6:
2001:4c10::/32
Signature Algorithm: sha256WithRSAEncryption
19:ac:4f:56:37:58:98:b5:70:52:4d:74:94:05:3a:4e:86:0a:
18:74:ae:2a:b6:48:02:d5:ec:64:30:0d:c3:45:59:91:c9:e2:
9a:4e:15:89:a5:7b:1e:37:fd:d1:ac:ad:23:16:11:f0:fd:8a:
7a:12:49:3c:ae:43:b7:d1:24:70:3d:14:53:80:61:ed:86:e6:
d0:1d:24:d1:82:31:7f:07:f3:54:48:83:f7:b5:22:33:a8:44:
df:71:24:2f:a4:bb:e1:8e:2d:b4:26:bd:fb:f5:f6:6d:08:15:
55:5e:28:a1:ec:bc:94:e0:0c:5d:e3:f7:c4:51:2e:7c:92:0c:
90:68:23:f5:da:72:c9:6f:f0:97:48:c0:fb:b1:7a:74:e8:45:
ba:2e:f0:50:f3:6f:20:1c:d1:15:c9:e0:70:0e:e3:4b:07:71:
17:ff:81:10:65:5b:25:44:fc:c3:f6:41:de:28:d5:f2:1c:ce:
49:ed:9e:ae:0c:9b:77:d1:cc:32:d8:81:e5:e1:f6:57:01:b4:
a3:f6:80:f5:37:92:2b:50:09:c1:3c:28:66:ed:c8:11:3f:3a:
ea:e1:27:c2:26:a3:40:7d:20:d4:f3:52:e7:ba:ad:b7:ef:55:
46:24:c6:78:08:36:da:87:35:f5:79:c3:40:8d:2a:38:9e:94:
e0:ea:70:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 15:07:39 2024 by rpki-client on console-fra.rpki-client.org