Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/CKfPfd6hoC4hwUd8KckxZEmDB3Q.roa
File: CKfPfd6hoC4hwUd8KckxZEmDB3Q.roa (raw, json)
Hash identifier: CxtCeJVWGz1y7sXMjGjTFZSPWBJF0JBmmRGZsh/CaBY=
Subject key identifier: 08:A7:CF:7D:DE:A1:A0:2E:21:C1:47:7C:29:C9:31:64:49:83:07:74
Certificate issuer: /CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03
Certificate serial: 018CC26D1968F51A40F14FD08CB75FE6A3AB
Authority key identifier: EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/CKfPfd6hoC4hwUd8KckxZEmDB3Q.roa
Signing time: Mon 01 Jan 2024 00:29:38 +0000
ROA not before: Mon 01 Jan 2024 00:29:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3316
IP address blocks: 194.85.105.0/24 maxlen: 24
194.85.106.0/24 maxlen: 24
194.85.117.0/24 maxlen: 24
194.85.118.0/24 maxlen: 24
194.85.31.0/24 maxlen: 24
195.208.22.0/23 maxlen: 23
86.62.49.0/24 maxlen: 24
193.232.85.0/24 maxlen: 24
194.85.119.0/24 maxlen: 24
212.193.118.0/24 maxlen: 24
194.190.134.0/24 maxlen: 24
194.190.138.0/24 maxlen: 24
195.209.16.0/24 maxlen: 24
194.190.141.0/24 maxlen: 24
194.190.142.0/24 maxlen: 24
194.190.145.0/24 maxlen: 24
194.190.148.0/24 maxlen: 24
193.232.131.0/24 maxlen: 24
195.209.4.0/24 maxlen: 24
194.190.132.0/24 maxlen: 24
194.190.132.0/22 maxlen: 22
195.209.8.0/24 maxlen: 24
195.209.146.0/24 maxlen: 24
194.226.29.0/24 maxlen: 24
194.226.44.0/24 maxlen: 24
194.226.46.0/23 maxlen: 23
195.19.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.mft
rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 May 2024 04:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:19:68:f5:1a:40:f1:4f:d0:8c:b7:5f:e6:a3:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03
Validity
Not Before: Jan 1 00:29:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=08a7cf7ddea1a02e21c1477c29c9316449830774
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ab:86:51:1a:2e:22:dc:e1:14:64:82:2a:44:
8a:48:ea:2e:c8:9e:3e:7e:93:5c:42:71:32:fb:33:
5f:cf:05:c1:d6:2b:24:75:23:36:b6:78:8e:e7:09:
29:f1:82:77:88:62:ff:b7:36:e1:6a:ed:06:28:c8:
13:77:91:e6:59:92:a9:3c:ae:3a:b9:4d:e5:42:f7:
9c:4b:08:c4:b1:00:71:ba:42:ac:0c:36:a4:4b:13:
f2:30:15:bf:93:cf:63:44:46:7a:43:37:8e:c3:c6:
fb:9c:12:c2:ba:bc:ad:f7:7b:3f:93:12:b7:6b:bc:
79:99:e2:5f:8f:07:54:5b:f3:12:a1:eb:45:54:26:
84:e0:21:3f:d2:35:c6:a3:87:98:d3:79:fa:a9:00:
ed:8b:7f:c5:a3:c1:29:ba:c3:05:f4:32:3d:9d:12:
ea:17:95:86:95:86:ff:98:00:82:6f:50:d7:bc:76:
ad:ba:7f:49:c6:9b:1b:1f:2b:40:6b:a0:8a:c6:9f:
96:84:d1:cf:9a:2c:d6:f4:55:24:59:2f:cf:78:70:
f4:25:c1:2e:fc:65:b3:03:0f:68:ca:42:c5:0d:1b:
43:6b:53:a7:64:57:35:75:37:62:c6:9a:8b:e1:89:
44:9e:67:3b:86:2f:d0:a1:21:ef:fb:21:80:6a:36:
1c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:A7:CF:7D:DE:A1:A0:2E:21:C1:47:7C:29:C9:31:64:49:83:07:74
X509v3 Authority Key Identifier:
keyid:EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/CKfPfd6hoC4hwUd8KckxZEmDB3Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.62.49.0/24
193.232.85.0/24
193.232.131.0/24
194.85.31.0/24
194.85.105.0-194.85.106.255
194.85.117.0-194.85.119.255
194.190.132.0/22
194.190.138.0/24
194.190.141.0-194.190.142.255
194.190.145.0/24
194.190.148.0/24
194.226.29.0/24
194.226.44.0/24
194.226.46.0/23
195.19.26.0/24
195.208.22.0/23
195.209.4.0/24
195.209.8.0/24
195.209.16.0/24
195.209.146.0/24
212.193.118.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:96:70:8f:fe:fd:dd:49:f6:d4:80:0c:38:36:9f:ef:4e:5e:
9d:f4:4d:53:25:6a:fe:2b:da:e8:7c:a7:94:e2:33:aa:86:8e:
ef:54:0a:69:51:66:84:09:6a:dc:da:45:a1:83:a0:ec:e1:48:
51:55:19:d1:a8:31:4e:1c:ca:7f:a8:c7:d9:77:85:01:f8:c7:
d9:2c:2f:36:3e:11:dc:28:46:0d:a6:4c:c8:41:5c:11:ae:ad:
33:fa:df:e0:30:ae:d3:39:98:a6:1f:da:95:c2:37:ce:4e:d3:
9e:2e:0f:c2:33:7e:43:a2:ff:d0:c1:2a:f1:28:2d:51:13:6b:
5e:b1:5c:3b:c6:4f:5d:c0:7e:96:3e:c2:6a:e4:81:b2:d0:45:
83:46:0d:88:39:09:87:2d:2b:f7:a9:59:5d:d4:14:29:36:0e:
de:4e:6e:11:63:86:b6:d8:6d:0c:c4:78:fc:86:a8:2f:98:88:
b4:b4:85:ad:d7:3f:ea:f7:b9:0b:25:45:c6:5c:2e:7f:df:23:
09:0d:1a:ff:1c:5f:d1:31:33:a4:50:63:e4:f8:c7:88:da:aa:
f6:fe:13:70:82:3c:85:d9:66:78:c1:20:dd:77:14:aa:dc:44:
e1:f7:6e:a6:a1:26:af:74:a3:18:fa:67:f6:12:e5:45:28:c5:
83:dd:c7:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 09:07:39 2024 by rpki-client on console-fra.rpki-client.org