Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/9e2f8a-960d-4479-a058-4e3ce3301979/1/IGeYY24TxwY2HbUg8dyBqGMaPHA.roa
File: IGeYY24TxwY2HbUg8dyBqGMaPHA.roa (raw, json)
Hash identifier: LvDSZvgz00p+biglcZQHqkm8kFMcWll3NpXYC617iyg=
Subject key identifier: 20:67:98:63:6E:13:C7:06:36:1D:B5:20:F1:DC:81:A8:63:1A:3C:70
Certificate issuer: /CN=53937087814b435825470069db9e723dbe728f3b
Certificate serial: 018CC50114004EAC90942904019FEEDB5B46
Authority key identifier: 53:93:70:87:81:4B:43:58:25:47:00:69:DB:9E:72:3D:BE:72:8F:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U5Nwh4FLQ1glRwBp255yPb5yjzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/9e2f8a-960d-4479-a058-4e3ce3301979/1/IGeYY24TxwY2HbUg8dyBqGMaPHA.roa
Signing time: Mon 01 Jan 2024 12:30:31 +0000
ROA not before: Mon 01 Jan 2024 12:30:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25579
IP address blocks: 185.124.120.0/22 maxlen: 22
213.146.225.0/24 maxlen: 24
213.146.226.0/24 maxlen: 24
213.146.224.0/24 maxlen: 24
213.146.230.0/24 maxlen: 24
213.146.231.0/24 maxlen: 24
213.146.229.0/24 maxlen: 24
213.146.227.0/24 maxlen: 24
213.146.228.0/24 maxlen: 24
213.146.232.0/24 maxlen: 24
213.146.233.0/24 maxlen: 24
213.146.239.0/24 maxlen: 24
213.146.240.0/24 maxlen: 24
213.146.237.0/24 maxlen: 24
213.146.238.0/24 maxlen: 24
213.146.235.0/24 maxlen: 24
213.146.236.0/24 maxlen: 24
213.146.234.0/24 maxlen: 24
213.146.244.0/24 maxlen: 24
213.146.245.0/24 maxlen: 24
213.146.242.0/24 maxlen: 24
213.146.243.0/24 maxlen: 24
213.146.241.0/24 maxlen: 24
213.146.246.0/24 maxlen: 24
213.146.253.0/24 maxlen: 24
213.146.251.0/24 maxlen: 24
213.146.252.0/24 maxlen: 24
213.146.249.0/24 maxlen: 24
213.146.250.0/24 maxlen: 24
213.146.248.0/24 maxlen: 24
213.146.247.0/24 maxlen: 24
213.146.255.0/24 maxlen: 24
213.146.254.0/24 maxlen: 24
2a06:2800::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/9e2f8a-960d-4479-a058-4e3ce3301979/1/U5Nwh4FLQ1glRwBp255yPb5yjzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/9e2f8a-960d-4479-a058-4e3ce3301979/1/U5Nwh4FLQ1glRwBp255yPb5yjzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/U5Nwh4FLQ1glRwBp255yPb5yjzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:14:00:4e:ac:90:94:29:04:01:9f:ee:db:5b:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53937087814b435825470069db9e723dbe728f3b
Validity
Not Before: Jan 1 12:30:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=206798636e13c706361db520f1dc81a8631a3c70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:02:42:f8:4d:69:bb:36:e2:f8:a8:39:fd:ff:
88:02:0d:1c:e2:0f:6f:42:7d:5b:fe:69:25:d2:7d:
4b:d6:3a:ee:84:34:fd:85:62:86:6d:a6:c9:f2:6a:
cf:44:79:fe:07:86:93:fb:a0:07:0e:35:31:73:b2:
0d:31:ca:cd:46:b9:c1:0c:94:a1:13:22:8a:e2:29:
8e:b7:cc:3c:d5:8c:c5:98:fb:9f:4c:54:f7:38:79:
f9:63:dc:83:fa:49:6c:ac:e0:9a:f1:73:86:03:3a:
e7:b1:98:bc:2d:59:b3:7d:1a:88:df:de:46:42:a6:
c0:c7:ae:89:fc:27:bd:34:d8:c2:af:9f:c0:5f:5e:
f3:41:f1:08:79:e7:f3:8a:90:a2:83:db:09:a0:f5:
44:f2:9b:67:82:cd:24:e0:b7:90:f8:eb:f5:4f:16:
42:9e:cb:99:76:9a:38:64:2e:6d:c6:d3:6b:22:62:
19:ae:f9:b1:7f:2c:d6:8f:e9:a8:af:2a:c6:83:40:
bf:5a:3a:df:02:85:e7:3b:0e:07:7f:e8:83:ff:dc:
9c:93:83:a7:d4:a9:03:66:f3:59:d6:ea:4e:36:68:
fb:38:c9:83:d1:4e:c3:b8:90:7b:a4:9b:ab:90:55:
5c:e2:b2:b0:a8:c5:91:d1:93:de:1d:5c:3f:0d:d5:
26:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:67:98:63:6E:13:C7:06:36:1D:B5:20:F1:DC:81:A8:63:1A:3C:70
X509v3 Authority Key Identifier:
keyid:53:93:70:87:81:4B:43:58:25:47:00:69:DB:9E:72:3D:BE:72:8F:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U5Nwh4FLQ1glRwBp255yPb5yjzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/9e2f8a-960d-4479-a058-4e3ce3301979/1/IGeYY24TxwY2HbUg8dyBqGMaPHA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/9e2f8a-960d-4479-a058-4e3ce3301979/1/U5Nwh4FLQ1glRwBp255yPb5yjzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.124.120.0/22
213.146.224.0/19
IPv6:
2a06:2800::/29
Signature Algorithm: sha256WithRSAEncryption
c3:68:ca:fb:59:1e:6c:5d:a8:63:a9:22:dd:26:c2:de:e6:04:
ce:15:ad:cb:2d:75:e2:54:8a:57:97:8a:5f:72:12:9e:18:59:
6c:91:25:51:17:2a:6f:71:e3:a2:70:80:6b:01:6f:cc:b2:88:
b1:e3:68:b7:60:c3:02:11:e9:71:fc:7c:93:f0:22:1d:52:2e:
69:2b:a4:3d:a8:60:16:51:92:3b:5d:52:5f:05:90:6c:f0:ff:
f8:67:fd:6c:0a:5f:19:1d:db:44:e1:c7:fd:e3:b7:c6:e2:66:
11:8c:b5:9f:dd:4b:66:d4:22:62:72:d5:89:5d:7f:b3:28:f5:
21:d6:6c:d3:4c:74:74:e7:33:f6:8f:93:49:de:00:4f:6b:8a:
2e:a7:9b:49:6a:bb:37:14:3c:a4:ad:60:0b:72:60:7d:79:c4:
c4:0f:69:a0:8e:d9:34:90:02:d9:30:ec:c2:f1:74:6d:81:21:
9a:f3:51:7a:a4:81:77:1c:77:ef:d7:21:93:04:46:d2:8f:47:
04:de:86:88:df:dc:ab:5d:16:bd:3b:ca:65:18:af:c8:d3:63:
c3:1e:10:28:c0:60:ae:15:7a:1e:58:d6:c1:4c:cb:9b:c7:08:
95:95:85:40:7b:63:5d:f3:61:dc:67:26:73:86:2d:2a:b4:e7:
ed:3a:3f:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 04:43:59 2024 by rpki-client on console-ams.rpki-client.org