Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/bb9947-172c-48b1-be8e-4c905adbf076/1/mfTnu52ouo5DZoLmZNKgLwZrJYM.roa
File: mfTnu52ouo5DZoLmZNKgLwZrJYM.roa (raw, json)
Hash identifier: rqFzsRLTSRbgcX6vgF1Ho1c+vHpakZNQNOlW2FKKlsg=
Subject key identifier: 99:F4:E7:BB:9D:A8:BA:8E:43:66:82:E6:64:D2:A0:2F:06:6B:25:83
Certificate issuer: /CN=4345d0773c7ade08d44819e3b611bd297a3989d3
Certificate serial: 018CC5DC60A5FDEB2A63A358AB5C379BB78A
Authority key identifier: 43:45:D0:77:3C:7A:DE:08:D4:48:19:E3:B6:11:BD:29:7A:39:89:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q0XQdzx63gjUSBnjthG9KXo5idM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/bb9947-172c-48b1-be8e-4c905adbf076/1/mfTnu52ouo5DZoLmZNKgLwZrJYM.roa
Signing time: Mon 01 Jan 2024 16:30:03 +0000
ROA not before: Mon 01 Jan 2024 16:30:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61430
IP address blocks: 185.237.211.0/24 maxlen: 24
185.237.210.0/24 maxlen: 24
185.237.208.0/23 maxlen: 23
185.126.101.0/24 maxlen: 24
185.126.100.0/22 maxlen: 22
185.126.100.0/24 maxlen: 24
185.126.103.0/24 maxlen: 24
185.126.102.0/24 maxlen: 24
91.213.252.0/24 maxlen: 24
91.228.191.0/24 maxlen: 24
91.228.190.0/23 maxlen: 23
91.228.190.0/24 maxlen: 24
2a06:c040::/32 maxlen: 33
2a06:c041::/32 maxlen: 32
2001:67c:1944::/48 maxlen: 48
2001:67c:2ad4::/48 maxlen: 49
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/bb9947-172c-48b1-be8e-4c905adbf076/1/Q0XQdzx63gjUSBnjthG9KXo5idM.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/bb9947-172c-48b1-be8e-4c905adbf076/1/Q0XQdzx63gjUSBnjthG9KXo5idM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q0XQdzx63gjUSBnjthG9KXo5idM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Jun 2024 03:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:60:a5:fd:eb:2a:63:a3:58:ab:5c:37:9b:b7:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4345d0773c7ade08d44819e3b611bd297a3989d3
Validity
Not Before: Jan 1 16:30:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=99f4e7bb9da8ba8e436682e664d2a02f066b2583
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f0:f0:90:95:a9:a8:2e:75:f9:b2:51:ea:ad:
97:98:7f:53:bf:21:c3:75:df:c4:11:f6:89:6d:f6:
0c:35:b9:da:5a:71:d2:bc:b7:2d:b6:b7:a1:c3:c2:
0c:23:b6:89:1e:a6:70:41:c2:18:8d:6a:b7:a1:01:
83:50:21:ba:2d:57:6b:41:b4:66:0b:a9:52:16:2e:
b4:72:46:d8:ba:c4:d3:0c:c1:57:ed:6a:7a:66:33:
94:b2:e2:ce:ad:eb:de:9c:a3:ce:86:93:ca:85:08:
36:bc:69:05:57:96:23:34:e2:92:2e:3c:06:30:d4:
48:20:c9:86:55:ed:76:fd:78:58:3f:90:5c:50:0c:
16:d5:f9:55:cf:18:34:5f:1e:ff:37:1c:e8:8f:13:
8f:ed:d8:81:01:58:d4:18:7e:a6:b7:94:bf:eb:a5:
b4:73:48:90:e1:6c:6e:d9:c3:d0:61:6a:c7:db:d3:
bb:00:5a:71:35:e7:f2:3c:b9:8c:1e:d6:55:41:54:
f3:40:a5:88:59:be:b4:dc:a2:79:38:c4:14:2b:f7:
f3:db:21:71:fe:9e:b5:54:23:8e:50:6c:02:42:e4:
1a:9e:f7:30:d0:86:b7:05:1c:02:6d:f5:e7:cf:2e:
ea:17:e7:b7:cc:de:9e:19:4c:13:2f:3d:6e:82:52:
05:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:F4:E7:BB:9D:A8:BA:8E:43:66:82:E6:64:D2:A0:2F:06:6B:25:83
X509v3 Authority Key Identifier:
keyid:43:45:D0:77:3C:7A:DE:08:D4:48:19:E3:B6:11:BD:29:7A:39:89:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q0XQdzx63gjUSBnjthG9KXo5idM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/bb9947-172c-48b1-be8e-4c905adbf076/1/mfTnu52ouo5DZoLmZNKgLwZrJYM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/bb9947-172c-48b1-be8e-4c905adbf076/1/Q0XQdzx63gjUSBnjthG9KXo5idM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.252.0/24
91.228.190.0/23
185.126.100.0/22
185.237.208.0/22
IPv6:
2001:67c:1944::/48
2001:67c:2ad4::/48
2a06:c040::/31
Signature Algorithm: sha256WithRSAEncryption
be:d9:db:33:55:80:c4:aa:93:06:76:41:78:f7:6b:12:4a:7b:
62:2b:e3:ac:8c:ee:45:0a:81:88:8f:60:f1:6e:4f:98:a1:cf:
f8:c9:2d:98:d0:24:cc:c4:21:e8:4f:fa:f0:dc:04:9f:fb:b1:
d5:43:aa:ed:bf:6d:b0:53:ec:94:22:4b:a5:38:f5:c2:b2:ef:
ce:6d:80:22:31:3a:7c:02:59:dd:d2:8c:25:3a:04:af:b7:6a:
86:d5:bd:8a:cb:36:da:3f:d7:60:10:6a:e1:4f:3d:4d:db:c7:
b6:f8:ea:06:41:c3:1b:c2:24:a2:55:92:8c:8f:2d:d9:3f:b6:
d6:03:dd:29:de:7c:f5:f8:35:07:7e:43:79:dd:07:3b:a1:d0:
e2:96:c7:b7:59:48:d2:f0:23:e7:83:58:61:1b:94:40:79:41:
18:0f:eb:70:23:46:4b:3f:8c:6f:05:ef:9d:2d:7c:e0:03:bb:
36:f5:38:db:9b:d6:67:08:63:17:77:cb:24:37:c7:bf:c4:7c:
18:49:57:d8:2f:a5:b2:0a:d6:47:e5:e5:53:2c:28:ba:b2:65:
e2:43:bd:01:b4:73:0f:64:88:ad:29:50:3a:0e:28:2e:81:6b:
5d:82:18:28:ca:1d:68:ea:66:9a:07:5f:58:13:bf:a4:2d:83:
95:f0:6d:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 10:59:32 2024 by rpki-client on console-ams.rpki-client.org