Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/K7z1hwkkvZPwTW0CqefikmmBiqc.roa
File: K7z1hwkkvZPwTW0CqefikmmBiqc.roa (raw, json)
Hash identifier: EK1uSxTp5YX9HrrLY6GLHquTFYQRG3W1Xk/7L8iQbX8=
Subject key identifier: 2B:BC:F5:87:09:24:BD:93:F0:4D:6D:02:A9:E7:E2:92:69:81:8A:A7
Certificate issuer: /CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2
Certificate serial: 018E418CB9BC4B2D43620DD3F27A87AD1692
Authority key identifier: F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/K7z1hwkkvZPwTW0CqefikmmBiqc.roa
Signing time: Fri 15 Mar 2024 09:58:45 +0000
ROA not before: Fri 15 Mar 2024 09:58:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201341
IP address blocks: 37.153.134.0/24 maxlen: 24
37.156.6.0/24 maxlen: 24
46.102.251.0/24 maxlen: 24
85.204.245.0/24 maxlen: 24
85.204.251.0/24 maxlen: 24
86.105.7.0/24 maxlen: 24
86.105.13.0/24 maxlen: 24
86.107.102.0/24 maxlen: 24
89.33.117.0/24 maxlen: 24
89.33.118.0/24 maxlen: 24
89.34.172.0/24 maxlen: 24
89.35.126.0/24 maxlen: 24
89.36.142.0/24 maxlen: 24
89.36.225.0/24 maxlen: 24
89.37.234.0/24 maxlen: 24
89.39.122.0/24 maxlen: 24
94.177.22.0/24 maxlen: 24
176.223.67.0/24 maxlen: 24
185.77.164.0/22 maxlen: 22
185.77.164.0/24 maxlen: 24
185.77.165.0/24 maxlen: 24
185.77.166.0/24 maxlen: 24
185.77.167.0/24 maxlen: 24
188.208.102.0/24 maxlen: 24
188.211.26.0/24 maxlen: 24
188.213.218.0/24 maxlen: 24
188.215.34.0/24 maxlen: 24
188.240.69.0/24 maxlen: 24
188.240.211.0/24 maxlen: 24
2a05:6300::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:41:8c:b9:bc:4b:2d:43:62:0d:d3:f2:7a:87:ad:16:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2
Validity
Not Before: Mar 15 09:58:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2bbcf5870924bd93f04d6d02a9e7e29269818aa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:8c:2e:0e:a0:61:ad:7f:bc:7c:29:5a:b5:2e:
d9:25:6b:07:08:97:15:4e:b8:f7:93:0f:97:d7:f7:
32:27:e1:0d:bf:ba:a7:67:8e:37:3e:fb:5e:d4:39:
de:d6:d0:d8:a9:d8:62:42:c2:2c:1e:44:3c:15:42:
40:18:63:2e:ff:03:80:ad:69:6b:75:48:e1:3e:1f:
ce:40:68:8d:ae:46:87:47:16:72:79:5a:a5:12:b9:
b7:f1:66:4f:ea:c1:c1:61:bb:e7:f3:6e:e0:22:5d:
68:c8:05:a6:7d:a3:d5:4c:d3:4c:98:6b:02:67:34:
12:66:58:f9:f5:1e:9e:a6:b4:ee:8b:bc:43:c7:7b:
e2:0f:0d:e6:28:a1:ed:97:fb:86:0e:d6:16:33:7a:
a2:ea:36:46:a0:ca:3d:f4:ca:79:01:7a:c4:a0:49:
a1:f5:6c:b1:ea:3d:82:75:56:ba:eb:8f:70:7a:46:
26:18:5d:bf:62:f0:b8:77:a3:09:3e:07:02:85:db:
41:ac:13:45:1d:74:4f:77:2b:34:a0:c1:8e:bf:6f:
22:9f:14:a5:5d:20:9a:54:9c:68:e5:0e:70:d7:68:
34:79:32:17:b1:42:da:4e:33:b0:60:36:04:52:4b:
c2:38:77:2c:b2:28:2e:e7:fd:b8:db:0e:c2:23:2d:
2f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:BC:F5:87:09:24:BD:93:F0:4D:6D:02:A9:E7:E2:92:69:81:8A:A7
X509v3 Authority Key Identifier:
keyid:F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/K7z1hwkkvZPwTW0CqefikmmBiqc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.153.134.0/24
37.156.6.0/24
46.102.251.0/24
85.204.245.0/24
85.204.251.0/24
86.105.7.0/24
86.105.13.0/24
86.107.102.0/24
89.33.117.0-89.33.118.255
89.34.172.0/24
89.35.126.0/24
89.36.142.0/24
89.36.225.0/24
89.37.234.0/24
89.39.122.0/24
94.177.22.0/24
176.223.67.0/24
185.77.164.0/22
188.208.102.0/24
188.211.26.0/24
188.213.218.0/24
188.215.34.0/24
188.240.69.0/24
188.240.211.0/24
IPv6:
2a05:6300::/29
Signature Algorithm: sha256WithRSAEncryption
d5:fc:00:93:9d:83:9e:59:3b:c9:be:a2:f8:05:17:f7:d8:20:
0a:8e:4d:08:42:17:29:23:ea:1f:6d:d6:7c:b5:89:ea:9a:4f:
9b:e0:aa:5e:d5:7b:1f:cd:2d:36:9a:d5:a9:c1:8e:91:5c:fa:
9f:a0:fd:4b:61:3b:aa:47:30:0a:64:61:79:d0:7d:3b:3e:21:
0d:e9:47:07:26:6b:58:f7:69:d2:00:61:54:24:61:7b:e9:86:
12:09:18:08:63:06:29:96:40:cd:e5:bb:ba:f4:e8:30:ec:d2:
0c:1b:ce:2b:26:72:c8:fc:46:27:2a:8a:c0:99:c3:91:83:ef:
c5:f8:a9:f7:6a:2e:98:3a:f4:8c:50:db:d0:17:3f:22:db:44:
01:fe:18:33:fe:16:55:b5:51:6d:f9:a7:ed:66:68:e1:d6:da:
98:88:18:9b:e0:87:d3:c4:38:52:9a:10:c9:95:a7:92:1c:4e:
26:09:86:78:f6:53:b4:ec:78:7d:3b:ff:c1:f0:01:9e:4c:d4:
b3:55:2e:c7:1c:40:4b:b7:05:c7:c8:ff:54:61:df:98:bd:55:
7c:89:d4:80:0f:44:f7:89:dd:00:12:b8:81:36:7a:63:17:7f:
16:f8:3a:b7:d4:bb:8a:67:d6:f7:9f:1a:7c:63:07:80:a9:60:
5b:e8:e4:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:16:40 2024 by rpki-client on console-ams.rpki-client.org