Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/2516e2-9e22-4e06-8a44-fa5ef4f53fbb/1/9kx6QMIDIc-QQ0msakrNbc3LfAo.roa
File: 9kx6QMIDIc-QQ0msakrNbc3LfAo.roa (raw, json)
Hash identifier: Mzfyu5ldhktrDaWZ6FOmQGde4gR1zR18XpHKaPn3914=
Subject key identifier: F6:4C:7A:40:C2:03:21:CF:90:43:49:AC:6A:4A:CD:6D:CD:CB:7C:0A
Certificate issuer: /CN=9e394498e4798729ce9950be34b459a9ef29f5e8
Certificate serial: 018CC7936CFDFC269A1A2DA11294F6428342
Authority key identifier: 9E:39:44:98:E4:79:87:29:CE:99:50:BE:34:B4:59:A9:EF:29:F5:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/njlEmOR5hynOmVC-NLRZqe8p9eg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/2516e2-9e22-4e06-8a44-fa5ef4f53fbb/1/9kx6QMIDIc-QQ0msakrNbc3LfAo.roa
Signing time: Tue 02 Jan 2024 00:29:36 +0000
ROA not before: Tue 02 Jan 2024 00:29:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 38999
IP address blocks: 212.98.134.0/24 maxlen: 24
185.76.176.64/26 maxlen: 26
185.76.177.0/24 maxlen: 24
185.76.176.0/25 maxlen: 25
185.76.176.0/24 maxlen: 24
185.76.178.0/24 maxlen: 24
185.76.177.192/27 maxlen: 27
185.76.177.224/28 maxlen: 28
5.57.0.0/24 maxlen: 24
213.204.96.0/24 maxlen: 24
2a05:5b81::/32 maxlen: 32
2a05:5b84::/32 maxlen: 32
2a05:5b82::/32 maxlen: 32
2a05:5b83::/32 maxlen: 32
2a05:5b80::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/2516e2-9e22-4e06-8a44-fa5ef4f53fbb/1/njlEmOR5hynOmVC-NLRZqe8p9eg.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/2516e2-9e22-4e06-8a44-fa5ef4f53fbb/1/njlEmOR5hynOmVC-NLRZqe8p9eg.mft
rsync://rpki.ripe.net/repository/DEFAULT/njlEmOR5hynOmVC-NLRZqe8p9eg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 13:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:93:6c:fd:fc:26:9a:1a:2d:a1:12:94:f6:42:83:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e394498e4798729ce9950be34b459a9ef29f5e8
Validity
Not Before: Jan 2 00:29:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f64c7a40c20321cf904349ac6a4acd6dcdcb7c0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:0f:a1:88:96:1c:ae:3e:bb:9b:b1:8b:19:41:
f3:5d:0a:ba:6f:67:29:90:b6:26:5a:a2:6d:d1:4e:
20:c4:d5:3e:4c:17:05:27:13:ce:b6:9d:43:80:06:
44:00:aa:d2:06:e6:7a:99:4b:fb:cc:bf:4f:9d:1d:
72:0c:42:a1:ff:7a:b7:19:20:ea:c5:da:2d:f9:0c:
f9:37:86:a0:c3:91:b0:ab:a9:19:a8:48:a0:ce:ff:
3f:1e:e5:4a:54:b4:54:12:fc:12:b0:f3:2a:0e:27:
26:a7:cf:a9:a1:72:1d:8f:fe:ae:cf:75:53:c5:d5:
97:56:bc:6c:15:79:5b:75:1d:e0:4d:b9:64:d7:08:
97:13:97:44:25:0c:0f:21:03:f3:c1:d8:e0:13:68:
d6:4f:47:d0:bf:b5:af:75:98:e0:bb:4f:93:b9:d4:
bb:39:46:2c:8d:56:48:0f:b8:93:7b:49:6c:2c:c7:
90:aa:e9:7b:fe:3c:5f:ba:85:75:b0:66:c5:d8:d8:
9b:df:e9:c2:8e:c2:5e:73:ee:5d:79:68:09:80:85:
6e:0c:94:ed:43:f1:76:9e:0c:a9:bc:dd:5b:66:2b:
f0:e0:ea:78:d0:ca:66:9c:bd:fb:9b:95:26:9b:c0:
ef:8b:96:7a:0f:67:5b:b9:8e:4b:12:8f:38:06:e9:
79:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:4C:7A:40:C2:03:21:CF:90:43:49:AC:6A:4A:CD:6D:CD:CB:7C:0A
X509v3 Authority Key Identifier:
keyid:9E:39:44:98:E4:79:87:29:CE:99:50:BE:34:B4:59:A9:EF:29:F5:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njlEmOR5hynOmVC-NLRZqe8p9eg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/2516e2-9e22-4e06-8a44-fa5ef4f53fbb/1/9kx6QMIDIc-QQ0msakrNbc3LfAo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/2516e2-9e22-4e06-8a44-fa5ef4f53fbb/1/njlEmOR5hynOmVC-NLRZqe8p9eg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.57.0.0/24
185.76.176.0-185.76.178.255
212.98.134.0/24
213.204.96.0/24
IPv6:
2a05:5b80::-2a05:5b84:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
ad:da:68:ad:2a:fc:17:fe:ce:f6:a0:e2:cc:04:04:69:cf:4a:
85:d3:6c:c4:a6:97:c9:8f:5f:e9:fb:ec:22:cb:9d:f6:07:0e:
b2:22:3b:21:2c:b5:d4:2b:2d:b6:9d:92:51:ad:b5:bf:cc:7d:
d0:ab:08:08:d4:6d:f8:f0:0f:84:f2:d2:e1:d6:da:1f:f6:c6:
88:b6:d3:b8:e5:02:63:39:66:a8:3b:6e:ef:29:92:53:eb:40:
f9:e4:ef:20:05:de:84:e2:e2:47:14:a5:43:70:77:ef:c8:8e:
6f:01:9e:65:00:88:55:8e:a7:f8:f5:76:cd:11:f8:28:7f:d0:
92:1f:6a:bc:f4:61:5a:b2:d4:ce:7b:52:f1:4a:71:64:b1:22:
b6:ab:1b:7e:0f:83:fd:94:99:1f:d9:e8:50:fc:f0:ac:f0:7a:
8c:a5:f5:3f:93:4a:98:07:7e:76:c9:1a:15:93:1a:1d:db:05:
c6:19:27:56:1f:be:63:11:f5:d1:3a:74:e5:9a:7e:ef:90:eb:
1d:d0:dd:66:15:69:cd:72:a6:13:35:43:0f:2c:8b:f7:40:d3:
4b:27:40:bf:a5:50:b4:13:06:89:6a:e7:17:de:d5:d3:bd:64:
d7:32:8c:e9:f9:d8:ed:0a:e4:2d:d2:22:6c:d7:db:36:27:d1:
bf:27:2b:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 19:50:40 2024 by rpki-client on console-ams.rpki-client.org