Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/_3tPZpv3Ca2IFe4J3HNt24vXoH4.roa
File: _3tPZpv3Ca2IFe4J3HNt24vXoH4.roa (raw, json)
Hash identifier: q+bE5CsnQ1WQOIo88P+Mk9QZ38e1ms+l6WqsZ1Qbsls=
Subject key identifier: FF:7B:4F:66:9B:F7:09:AD:88:15:EE:09:DC:73:6D:DB:8B:D7:A0:7E
Certificate issuer: /CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2
Certificate serial: 018F854FB6F2B2267F2F8C64B09877C41F78
Authority key identifier: F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/_3tPZpv3Ca2IFe4J3HNt24vXoH4.roa
Signing time: Fri 17 May 2024 06:49:04 +0000
ROA not before: Fri 17 May 2024 06:49:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205964
IP address blocks: 89.42.8.0/24 maxlen: 24
89.43.32.0/24 maxlen: 24
93.118.38.0/24 maxlen: 24
94.176.106.0/24 maxlen: 24
193.36.76.0/24 maxlen: 24
209.35.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:85:4f:b6:f2:b2:26:7f:2f:8c:64:b0:98:77:c4:1f:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2
Validity
Not Before: May 17 06:49:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ff7b4f669bf709ad8815ee09dc736ddb8bd7a07e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ba:7e:ac:5c:a9:58:a9:2a:4c:7c:46:05:f2:
09:0e:1a:53:51:fa:9a:2b:d9:0d:e2:90:7c:d2:71:
56:7d:c5:53:df:8d:5a:01:bb:81:d7:a8:b8:48:d4:
ed:80:5e:b3:2d:f9:fa:92:7a:8d:12:89:a9:fd:c0:
85:87:ec:57:47:ec:a1:17:b0:f2:f1:8f:3f:73:1b:
eb:b5:b8:47:16:41:54:dd:44:2a:13:f5:30:6a:6a:
42:d8:39:45:89:3a:a1:d0:9f:44:eb:1e:6d:47:10:
96:b4:26:ea:76:81:f4:53:41:9c:61:b0:97:d4:49:
b2:50:5d:4e:1f:73:d4:e4:b4:be:7a:66:17:e3:df:
36:59:7f:67:d4:a7:f4:02:7d:b2:3f:16:5f:6e:7d:
db:14:be:8c:67:54:82:ba:1a:1c:8c:a0:d8:1b:c0:
82:2f:25:05:45:43:f8:b9:70:e2:67:13:7d:3a:29:
19:61:39:78:88:30:d2:a2:a0:4a:dc:e3:b7:ff:91:
2e:11:60:88:23:ec:59:70:6a:38:a0:7b:2f:90:ac:
a3:21:0c:44:0f:73:32:ec:21:4b:d2:5e:0a:59:1c:
3b:7a:dc:a4:1a:72:39:01:53:82:7d:55:bd:5d:2d:
de:12:7c:e9:cf:c3:30:99:96:86:6e:cb:42:8d:03:
b9:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:7B:4F:66:9B:F7:09:AD:88:15:EE:09:DC:73:6D:DB:8B:D7:A0:7E
X509v3 Authority Key Identifier:
keyid:F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/_3tPZpv3Ca2IFe4J3HNt24vXoH4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.8.0/24
89.43.32.0/24
93.118.38.0/24
94.176.106.0/24
193.36.76.0/24
209.35.99.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:3b:54:ef:e3:e5:e9:06:20:ab:e6:1b:67:a6:11:1c:ab:3b:
ff:6e:c0:05:06:29:f0:5c:93:35:17:f1:ea:f6:6c:4c:93:c4:
19:d7:1a:84:6e:8d:46:e9:7f:3d:15:ff:cd:54:1d:ed:5a:3e:
3f:46:d6:62:da:f0:89:0c:9e:2e:cd:88:82:b8:04:63:55:13:
92:dc:d4:f3:e1:f4:1c:01:01:ba:f7:77:1b:dc:3c:6a:5d:91:
a4:70:41:16:38:92:e2:37:04:28:d0:29:68:a7:fa:6a:7d:c2:
14:b5:34:bd:06:be:f0:bb:09:ad:02:fe:7d:49:45:17:94:1a:
6c:60:b4:28:c2:7a:b3:f3:34:43:03:9b:1d:29:68:bf:1f:86:
a3:61:3c:76:1a:51:c2:82:4a:88:59:9c:b0:a2:39:06:f1:65:
1c:b9:eb:62:3c:99:ef:6c:5c:1a:c1:72:86:fa:a4:a3:91:24:
07:0e:38:4b:7f:ec:5b:cc:61:a5:0f:c1:0e:cf:2b:09:a1:1d:
00:9c:b8:9e:a9:d0:4f:86:9b:64:81:50:c9:6f:77:46:81:40:
ac:39:a3:c9:7f:a5:e3:c6:cf:dc:5f:a1:7e:80:44:20:c2:40:
5b:8c:23:73:09:55:e7:32:b8:5e:f9:cf:da:52:0e:0a:e0:7c:
d4:10:f6:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:16:53 2024 by rpki-client on console-fra.rpki-client.org