Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/xog0vQC1N272F8ARk1hj9czLE2U.roa
File: xog0vQC1N272F8ARk1hj9czLE2U.roa (raw, json)
Hash identifier: +msmGVH3x9gLkU9GRH1kQOt9n3wXMh89Ba8sWY7lLT4=
Subject key identifier: C6:88:34:BD:00:B5:37:6E:F6:17:C0:11:93:58:63:F5:CC:CB:13:65
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0192F6DC3E967FE163847D4B3AFDAACD2679
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/xog0vQC1N272F8ARk1hj9czLE2U.roa
Signing time: Mon 04 Nov 2024 11:08:01 +0000
ROA not before: Mon 04 Nov 2024 11:08:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5511
IP address blocks: 81.168.96.0/24 maxlen: 24
82.153.51.0/24 maxlen: 24
82.153.148.0/24 maxlen: 24
82.163.15.0/24 maxlen: 24
89.213.6.0/24 maxlen: 24
89.213.107.0/24 maxlen: 24
89.213.112.0/24 maxlen: 24
89.213.113.0/24 maxlen: 24
89.213.116.0/24 maxlen: 24
89.213.121.0/24 maxlen: 24
89.213.157.0/24 maxlen: 24
89.213.227.0/24 maxlen: 24
109.176.242.0/24 maxlen: 24
213.130.137.0/24 maxlen: 24
213.130.152.0/24 maxlen: 24
213.130.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:f6:dc:3e:96:7f:e1:63:84:7d:4b:3a:fd:aa:cd:26:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Nov 4 11:08:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c68834bd00b5376ef617c011935863f5cccb1365
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f8:2d:cb:98:96:a5:9b:04:92:83:4b:10:74:
02:3a:6d:11:50:b5:de:03:36:03:b5:8f:ab:84:9e:
ae:bb:2a:01:ab:73:4e:08:f7:6d:c2:95:0f:e7:ef:
43:f4:0d:b5:fa:58:63:f7:e5:ed:0f:de:6c:0b:c0:
81:e7:aa:eb:17:3a:0a:e8:bb:ea:3a:64:23:4f:95:
06:b7:a9:fc:9b:a8:3a:43:b3:cf:d2:6a:5c:7c:8d:
4e:6b:5d:fd:cf:20:51:eb:f6:7d:8e:71:00:eb:70:
6b:73:b9:0f:6c:4a:22:30:d6:40:7b:f3:e9:96:51:
d7:72:5a:1d:ce:01:fb:d4:ce:4a:e8:6a:a5:57:53:
39:ec:92:9a:e1:5b:71:f3:aa:62:9f:97:5b:90:63:
6c:12:45:3a:12:7a:4d:21:21:4e:16:6b:ea:e3:0d:
b9:8d:7c:dd:fb:83:cc:66:de:b3:0a:90:a1:a5:d5:
72:74:54:a9:ca:df:33:18:38:7c:1c:80:47:b8:16:
bb:8e:af:df:dc:4b:3f:dc:10:64:ef:ee:cc:1c:51:
e1:4b:33:06:1d:1a:9a:b5:9a:18:40:b7:aa:29:94:
e8:77:2c:f4:35:9c:b7:37:86:cd:fb:d5:e3:d4:56:
0e:02:3b:97:ea:51:38:be:f8:a9:7d:e9:aa:85:9f:
fe:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:88:34:BD:00:B5:37:6E:F6:17:C0:11:93:58:63:F5:CC:CB:13:65
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/xog0vQC1N272F8ARk1hj9czLE2U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.168.96.0/24
82.153.51.0/24
82.153.148.0/24
82.163.15.0/24
89.213.6.0/24
89.213.107.0/24
89.213.112.0/23
89.213.116.0/24
89.213.121.0/24
89.213.157.0/24
89.213.227.0/24
109.176.242.0/24
213.130.137.0/24
213.130.152.0/24
213.130.154.0/24
Signature Algorithm: sha256WithRSAEncryption
65:9a:e6:bf:1d:64:92:0d:83:22:62:09:df:3d:bc:19:58:85:
23:67:4c:8c:5f:19:ae:3c:e1:30:a1:37:84:91:ca:8b:5f:12:
f5:81:ce:29:73:58:6a:de:c1:5d:38:70:53:81:26:49:d8:9a:
e1:e0:f6:10:90:f5:f9:55:18:26:7c:33:4b:99:c0:bd:9c:bc:
af:72:95:eb:34:4a:40:19:92:1d:18:d8:ff:7b:4a:2c:8f:e5:
df:aa:6a:d3:15:9f:fc:19:fd:af:df:3b:25:fd:82:cc:a1:0d:
b9:d4:bd:4c:c1:03:bc:dd:a1:84:23:c4:16:b2:41:6e:2f:4c:
d7:70:44:74:3c:30:26:7f:02:da:97:d7:21:29:c1:80:bd:77:
71:fc:ed:4b:ca:41:5c:01:eb:1a:b9:f8:d8:9b:95:08:fe:2e:
db:56:62:40:6d:86:8c:06:a8:7e:a6:71:be:c4:8d:0d:90:34:
3c:dc:7f:df:26:f8:d3:af:62:71:38:76:54:36:96:26:2c:5a:
67:de:4c:79:a0:71:77:b2:09:26:62:d0:53:3f:44:4d:14:e7:
96:71:55:62:af:09:34:3e:a5:52:4b:21:d5:27:58:ce:2a:42:
0e:59:e4:07:ea:2c:8b:6b:e2:7e:23:a8:74:d6:90:5e:1e:83:
6d:12:e9:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:30:21 2024 by rpki-client on console-ams.rpki-client.org