Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/f6ee9d-756f-437e-bc03-e703e94b7beb/1/s_IKb76R_scFap3sgPLce4shG0o.roa
File: s_IKb76R_scFap3sgPLce4shG0o.roa (raw, json)
Hash identifier: 0g28ekMRcD0uogMC0saXmFDug/xZKqsoRHKHV4VG4FM=
Subject key identifier: B3:F2:0A:6F:BE:91:FE:C7:05:6A:9D:EC:80:F2:DC:7B:8B:21:1B:4A
Certificate issuer: /CN=74b33fb20dd557cd0b14edfe10880f0e0d21c529
Certificate serial: 018CC8DEFEA981FBC06513D661F24C7D08E0
Authority key identifier: 74:B3:3F:B2:0D:D5:57:CD:0B:14:ED:FE:10:88:0F:0E:0D:21:C5:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dLM_sg3VV80LFO3-EIgPDg0hxSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/f6ee9d-756f-437e-bc03-e703e94b7beb/1/s_IKb76R_scFap3sgPLce4shG0o.roa
Signing time: Tue 02 Jan 2024 06:31:46 +0000
ROA not before: Tue 02 Jan 2024 06:31:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199484
IP address blocks: 195.142.133.0/24 maxlen: 24
195.142.134.0/24 maxlen: 24
185.28.2.0/24 maxlen: 24
185.28.3.0/24 maxlen: 24
185.28.0.0/22 maxlen: 24
195.142.135.0/24 maxlen: 24
185.28.0.0/24 maxlen: 24
185.28.1.0/24 maxlen: 24
37.75.11.0/24 maxlen: 24
195.142.104.0/24 maxlen: 24
37.75.9.0/24 maxlen: 24
195.142.105.0/24 maxlen: 24
37.75.10.0/24 maxlen: 24
37.75.8.0/24 maxlen: 24
37.75.8.0/21 maxlen: 21
195.142.106.0/24 maxlen: 24
37.75.12.0/24 maxlen: 24
37.75.15.0/24 maxlen: 24
195.142.109.0/24 maxlen: 24
195.142.110.0/24 maxlen: 24
37.75.13.0/24 maxlen: 24
195.142.107.0/24 maxlen: 24
37.75.14.0/24 maxlen: 24
195.142.108.0/24 maxlen: 24
195.142.111.0/24 maxlen: 24
195.142.132.0/24 maxlen: 24
195.142.1.0/24 maxlen: 24
195.142.2.0/24 maxlen: 24
195.142.0.0/24 maxlen: 24
195.142.3.0/24 maxlen: 24
2a03:c040:1::/48 maxlen: 48
2a03:c040::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/f6ee9d-756f-437e-bc03-e703e94b7beb/1/dLM_sg3VV80LFO3-EIgPDg0hxSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/f6ee9d-756f-437e-bc03-e703e94b7beb/1/dLM_sg3VV80LFO3-EIgPDg0hxSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dLM_sg3VV80LFO3-EIgPDg0hxSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 18:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:fe:a9:81:fb:c0:65:13:d6:61:f2:4c:7d:08:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74b33fb20dd557cd0b14edfe10880f0e0d21c529
Validity
Not Before: Jan 2 06:31:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b3f20a6fbe91fec7056a9dec80f2dc7b8b211b4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:aa:c7:2c:80:64:1f:8a:fc:a4:14:94:09:c8:
ae:19:df:da:9e:b8:03:9e:15:4d:92:7a:c7:9e:b6:
90:53:94:92:d2:cb:3d:4b:f4:24:1d:73:89:12:68:
0d:ab:ec:6c:19:ab:b4:f4:ce:06:fe:61:37:6f:e7:
cc:9c:4d:ae:22:76:46:4f:89:c3:ae:5f:53:4f:f9:
f2:ab:3e:a9:99:49:89:58:b0:ed:8e:ea:2f:15:09:
57:6b:09:98:1e:0a:f6:3f:c7:d5:ff:1d:54:e7:a2:
49:09:23:34:40:69:03:53:63:d7:08:e3:66:06:48:
3e:3b:b8:fb:9e:2a:87:3c:63:24:93:36:d5:d0:7f:
15:df:fe:b2:97:4e:22:b7:10:8e:c0:16:b7:fd:a3:
55:eb:f2:cb:5f:4f:15:37:e8:38:c6:4f:61:e2:fd:
b9:50:6d:b7:89:f8:a5:69:68:97:49:9a:88:87:0d:
cb:f9:a2:ac:53:3e:75:fe:f0:ab:48:8e:ed:f5:6d:
8e:f1:c6:9d:cc:75:c0:68:2b:2f:1f:4b:9b:9d:1d:
9a:73:d7:19:bd:96:aa:28:3b:4e:00:c1:08:f7:24:
a7:68:bb:77:48:04:21:b5:8c:a8:ac:40:6d:66:92:
06:fc:25:2f:9a:40:82:a8:6d:0b:3e:75:14:d5:4e:
7c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:F2:0A:6F:BE:91:FE:C7:05:6A:9D:EC:80:F2:DC:7B:8B:21:1B:4A
X509v3 Authority Key Identifier:
keyid:74:B3:3F:B2:0D:D5:57:CD:0B:14:ED:FE:10:88:0F:0E:0D:21:C5:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLM_sg3VV80LFO3-EIgPDg0hxSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f6ee9d-756f-437e-bc03-e703e94b7beb/1/s_IKb76R_scFap3sgPLce4shG0o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f6ee9d-756f-437e-bc03-e703e94b7beb/1/dLM_sg3VV80LFO3-EIgPDg0hxSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.75.8.0/21
185.28.0.0/22
195.142.0.0/22
195.142.104.0/21
195.142.132.0/22
IPv6:
2a03:c040::/32
Signature Algorithm: sha256WithRSAEncryption
87:e1:6b:e2:3e:d4:e7:9e:9c:3d:30:30:9d:8c:98:ae:b5:47:
d4:b0:98:e8:6f:17:1f:b2:06:86:4e:cf:24:17:a9:3d:f8:53:
24:29:f8:69:5a:70:92:ff:1a:e7:cc:70:9c:9a:56:96:22:ba:
b5:df:16:8a:5f:20:98:3c:fd:5f:00:21:0b:c6:8b:c7:cb:a0:
b9:f9:57:51:43:e2:f8:fb:77:c7:42:e5:05:70:45:ce:74:34:
c1:26:ec:b4:4e:83:b7:93:3e:4f:6a:ae:f1:8b:6f:a9:27:02:
95:7c:92:2d:38:ff:94:81:1d:a1:ef:c7:36:a4:65:a6:23:94:
dc:83:41:34:68:6f:66:60:80:30:2f:99:45:ca:4e:c2:8f:ac:
3c:e1:d8:04:9e:1a:cc:01:8a:3e:b7:f3:e6:ef:96:35:ab:f8:
2d:f8:90:8e:d6:92:d8:c3:a3:ff:ff:ae:8b:a0:8d:24:5e:d7:
92:ba:66:0f:a2:f2:e6:71:13:37:71:97:21:80:67:1f:1f:6c:
06:bb:59:20:de:9a:de:80:10:ff:40:ca:52:67:b3:de:77:e8:
50:28:5e:c2:e1:d1:67:e8:67:0e:26:23:62:f5:22:d0:95:fb:
38:73:d5:31:d9:f5:18:71:f4:cb:81:4c:ed:87:9f:0d:0d:36:
29:e8:85:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 20:35:18 2024 by rpki-client on console-fra.rpki-client.org