Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/9cc39c-dd7b-4892-94bf-ee46ac018600/1/fCmZ2FJN1nKOioZi5I3N2ZVkrXU.roa
File: fCmZ2FJN1nKOioZi5I3N2ZVkrXU.roa (raw, json)
Hash identifier: 3DEbFUGRAX9tZ6C+aWYztr0T+vnKLb3Ge5Sf22AvSxc=
Subject key identifier: 7C:29:99:D8:52:4D:D6:72:8E:8A:86:62:E4:8D:CD:D9:95:64:AD:75
Certificate issuer: /CN=b0b6a49bcc10de340e39d203f56658bd7d648ddf
Certificate serial: 018CC349106986D69475DE80C6B5225CA43C
Authority key identifier: B0:B6:A4:9B:CC:10:DE:34:0E:39:D2:03:F5:66:58:BD:7D:64:8D:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sLakm8wQ3jQOOdID9WZYvX1kjd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/9cc39c-dd7b-4892-94bf-ee46ac018600/1/fCmZ2FJN1nKOioZi5I3N2ZVkrXU.roa
Signing time: Mon 01 Jan 2024 04:29:54 +0000
ROA not before: Mon 01 Jan 2024 04:29:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31225
IP address blocks: 83.219.224.0/19 maxlen: 19
83.219.227.0/24 maxlen: 24
83.219.228.0/24 maxlen: 24
83.219.233.0/24 maxlen: 24
83.219.231.0/24 maxlen: 24
83.219.232.0/24 maxlen: 24
83.219.229.0/24 maxlen: 24
83.219.230.0/24 maxlen: 24
83.219.234.0/24 maxlen: 24
83.219.235.0/24 maxlen: 24
83.219.240.0/24 maxlen: 24
83.219.238.0/24 maxlen: 24
83.219.239.0/24 maxlen: 24
83.219.236.0/24 maxlen: 24
83.219.237.0/24 maxlen: 24
83.219.241.0/24 maxlen: 24
83.219.242.0/24 maxlen: 24
83.219.246.0/24 maxlen: 24
83.219.244.0/24 maxlen: 24
83.219.248.0/24 maxlen: 24
83.219.249.0/24 maxlen: 24
83.219.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/9cc39c-dd7b-4892-94bf-ee46ac018600/1/sLakm8wQ3jQOOdID9WZYvX1kjd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/9cc39c-dd7b-4892-94bf-ee46ac018600/1/sLakm8wQ3jQOOdID9WZYvX1kjd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/sLakm8wQ3jQOOdID9WZYvX1kjd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:10:69:86:d6:94:75:de:80:c6:b5:22:5c:a4:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0b6a49bcc10de340e39d203f56658bd7d648ddf
Validity
Not Before: Jan 1 04:29:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7c2999d8524dd6728e8a8662e48dcdd99564ad75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:2e:b4:fc:90:cf:5c:1b:71:bf:e6:b8:63:2e:
8d:d2:22:ed:94:f8:44:4e:2e:65:48:2c:7f:02:db:
d0:5f:1f:15:63:2f:df:cc:ba:51:1f:8d:4b:c1:32:
c3:c5:98:af:8d:27:13:bc:57:33:eb:0b:20:3b:d1:
c0:95:33:12:25:88:78:47:80:52:0c:6b:46:c7:2c:
67:d3:0e:45:0e:0f:cc:8a:f6:b0:de:e7:a2:26:fc:
36:a4:a8:35:ff:7d:27:f1:83:f5:96:7d:ee:96:de:
ba:ac:b8:e6:17:72:0a:c2:16:52:e9:db:2f:a7:43:
4f:d3:f1:67:7c:15:d4:8e:15:cc:18:d3:6e:37:5f:
7d:4c:93:9c:4a:c3:8b:71:07:48:fd:10:09:5e:2a:
04:36:4f:90:58:1a:02:0a:ed:31:9f:e7:fc:fb:a1:
16:5f:36:38:e1:14:2f:f2:93:36:20:03:7b:8d:c3:
61:a5:75:3a:64:c0:f3:b2:18:bd:be:90:ce:8d:27:
a5:c5:9f:77:f1:e3:fe:00:c2:4d:be:20:43:71:c0:
84:bc:cf:6c:c0:21:f5:19:90:cb:9c:e6:63:2d:55:
81:8e:86:db:93:0b:bc:1e:90:e5:49:29:7a:e6:85:
9e:45:da:f3:b3:d3:76:85:de:1d:3a:5f:60:84:dd:
ce:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:29:99:D8:52:4D:D6:72:8E:8A:86:62:E4:8D:CD:D9:95:64:AD:75
X509v3 Authority Key Identifier:
keyid:B0:B6:A4:9B:CC:10:DE:34:0E:39:D2:03:F5:66:58:BD:7D:64:8D:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sLakm8wQ3jQOOdID9WZYvX1kjd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/9cc39c-dd7b-4892-94bf-ee46ac018600/1/fCmZ2FJN1nKOioZi5I3N2ZVkrXU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/9cc39c-dd7b-4892-94bf-ee46ac018600/1/sLakm8wQ3jQOOdID9WZYvX1kjd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.219.224.0/19
Signature Algorithm: sha256WithRSAEncryption
61:72:6c:2e:ae:8c:de:88:7a:50:60:20:f1:17:ed:19:3a:3d:
ac:3f:1c:52:40:3e:2c:e4:71:28:46:1b:b5:4b:66:b0:c9:24:
6b:2b:3d:24:67:18:0d:bb:83:9a:7a:f9:5a:40:7d:6b:c6:40:
24:37:f6:32:b2:dd:30:c3:41:97:a8:ee:c6:1b:1c:38:89:07:
40:1e:4f:3c:fd:9e:0e:b3:5f:a2:3f:6b:69:13:b9:5b:f4:0e:
96:e2:fb:40:a4:50:3d:26:95:10:96:a0:73:74:85:9c:15:41:
2d:52:70:6b:57:bb:69:45:9f:2f:e6:e6:40:38:da:25:e8:d4:
b5:e8:21:9f:96:42:49:43:03:7f:24:ab:dc:0c:96:da:ab:4e:
41:2e:ca:cf:60:6e:1a:d5:ae:ac:38:38:02:0b:e6:c5:ad:d2:
92:68:20:d2:23:0b:8f:d8:44:8b:f2:b1:57:a6:42:c9:4e:1d:
81:c4:ab:57:24:24:b1:44:d1:23:25:9e:b8:29:2f:22:f2:8d:
ab:6c:3d:e8:17:91:ed:31:be:88:5c:54:ea:95:e3:09:e8:86:
87:0e:1e:bf:46:94:08:e2:0c:42:b0:d9:e4:cc:e9:3e:92:40:
7f:b4:14:9d:5d:89:a0:8d:3c:e3:c2:08:c9:1c:f5:ba:fe:7d:
62:7f:c4:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 17:39:30 2024 by rpki-client on console-ams.rpki-client.org