Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/b592dd-c711-4301-9be5-aef3fcbb7884/1/1-blI3hsa3fXfjWoRNd2B24VJxOw.roa
File: 1-blI3hsa3fXfjWoRNd2B24VJxOw.roa (raw, json)
Hash identifier: KeFfAY5Vn893C8qe6mFUvUdMJMvtWo+l8bksrRS60Po=
Subject key identifier: F9:B9:48:DE:1B:1A:DD:F5:DF:8D:6A:11:35:DD:81:DB:85:49:C4:EC
Certificate issuer: /CN=7dc896cb3899c5b6488d1c4653faee4b23151f1f
Certificate serial: 018CEDAB549E245611BF30F1911934C8EEFF
Authority key identifier: 7D:C8:96:CB:38:99:C5:B6:48:8D:1C:46:53:FA:EE:4B:23:15:1F:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fciWyziZxbZIjRxGU_ruSyMVHx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/b592dd-c711-4301-9be5-aef3fcbb7884/1/1-blI3hsa3fXfjWoRNd2B24VJxOw.roa
Signing time: Tue 09 Jan 2024 10:01:17 +0000
ROA not before: Tue 09 Jan 2024 10:01:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12703
IP address blocks: 217.22.144.0/20 maxlen: 24
31.15.104.0/21 maxlen: 24
194.176.64.0/19 maxlen: 24
31.47.216.0/21 maxlen: 24
82.113.160.0/19 maxlen: 24
93.94.72.0/21 maxlen: 24
213.131.96.0/19 maxlen: 24
195.97.192.0/18 maxlen: 24
185.153.100.0/22 maxlen: 24
2a02:2b38::/32 maxlen: 32
2001:4dc0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/b592dd-c711-4301-9be5-aef3fcbb7884/1/fciWyziZxbZIjRxGU_ruSyMVHx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/b592dd-c711-4301-9be5-aef3fcbb7884/1/fciWyziZxbZIjRxGU_ruSyMVHx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/fciWyziZxbZIjRxGU_ruSyMVHx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ed:ab:54:9e:24:56:11:bf:30:f1:91:19:34:c8:ee:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dc896cb3899c5b6488d1c4653faee4b23151f1f
Validity
Not Before: Jan 9 10:01:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f9b948de1b1addf5df8d6a1135dd81db8549c4ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:8d:50:6f:c2:08:55:4f:42:05:6b:03:68:8e:
50:9f:1e:c7:e8:d7:cb:b3:f8:f6:c4:34:21:83:02:
47:fe:8f:d6:d7:6d:08:9e:cd:e0:94:b3:ac:77:fd:
c1:7b:59:01:87:d4:7c:11:23:bf:12:af:6f:f2:fb:
84:19:da:1b:aa:07:08:c3:06:98:5d:b5:18:4d:a4:
6b:0a:2e:77:0c:54:bc:a7:06:b7:84:d9:e0:03:96:
75:fd:7f:1e:c1:ca:e7:80:b0:8f:5f:a9:0c:af:08:
0d:c1:90:30:3a:4b:d1:22:2a:00:2f:ff:b0:84:0d:
f1:82:9b:bb:a1:69:f3:48:66:68:f4:c3:ac:00:b7:
c5:ef:77:1d:82:af:85:cc:d8:11:dc:cb:19:e6:56:
96:90:7e:2e:08:f7:95:5b:46:fd:be:f1:27:42:72:
75:43:6c:dc:7d:30:91:a1:51:e7:54:17:7b:4b:d6:
bd:e2:26:55:f4:45:ab:2a:83:00:30:50:11:8d:d7:
4d:ec:c4:ee:c0:54:47:fe:7b:57:8f:4b:8b:08:93:
9b:1c:3e:ef:a8:b8:82:95:18:bf:3f:57:88:18:4b:
ff:0f:0d:31:0b:43:a9:ca:52:66:14:31:6d:a6:f2:
7a:07:93:8d:8c:cd:54:68:35:e4:8e:f5:9e:5d:87:
fb:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:B9:48:DE:1B:1A:DD:F5:DF:8D:6A:11:35:DD:81:DB:85:49:C4:EC
X509v3 Authority Key Identifier:
keyid:7D:C8:96:CB:38:99:C5:B6:48:8D:1C:46:53:FA:EE:4B:23:15:1F:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fciWyziZxbZIjRxGU_ruSyMVHx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/b592dd-c711-4301-9be5-aef3fcbb7884/1/1-blI3hsa3fXfjWoRNd2B24VJxOw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/b592dd-c711-4301-9be5-aef3fcbb7884/1/fciWyziZxbZIjRxGU_ruSyMVHx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.15.104.0/21
31.47.216.0/21
82.113.160.0/19
93.94.72.0/21
185.153.100.0/22
194.176.64.0/19
195.97.192.0/18
213.131.96.0/19
217.22.144.0/20
IPv6:
2001:4dc0::/32
2a02:2b38::/32
Signature Algorithm: sha256WithRSAEncryption
67:db:44:2e:92:b3:a6:3b:37:ce:fc:87:b6:4e:ce:f9:4d:c2:
0d:00:f3:55:80:a0:a1:2a:f6:87:ce:18:7f:4d:14:65:5e:31:
01:c0:2a:bd:e3:f8:f6:bb:3f:5b:b2:92:ef:2b:6f:83:cb:b3:
47:ab:14:59:cc:33:1d:09:1f:32:be:9e:15:b9:02:f6:12:48:
7c:85:b7:fe:fd:c0:88:31:f8:ec:88:b6:33:c3:43:16:41:47:
55:4e:1d:5c:e6:aa:91:79:5e:ee:b2:82:0d:34:d9:a3:c8:65:
56:9c:11:a6:3d:b9:66:88:53:8c:30:de:55:2a:59:44:94:ae:
54:46:f6:43:d2:c9:9a:0e:f6:93:35:a6:4d:b1:6c:6b:82:c4:
93:22:b9:a2:e5:ea:0d:88:25:9c:0b:05:05:6e:71:f4:e4:bb:
b0:28:e4:7e:35:3c:a8:0a:f4:c7:d4:44:66:39:0b:c7:78:38:
b9:c5:14:3a:27:38:ef:5c:71:b1:e2:62:4e:c2:05:1a:6e:51:
6f:44:13:45:ee:b7:ce:03:b8:94:77:7d:4d:ca:25:a4:60:e5:
5a:0a:26:5f:03:81:50:9b:55:89:d0:30:34:e4:5d:f3:db:00:
53:ed:7b:55:81:92:94:95:95:19:34:63:af:9f:20:4c:fe:a1:
bd:0b:c1:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:05:46 2024 by rpki-client on console-fra.rpki-client.org