Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/aw9D8gOmqlHhxqIPqqHsK5Ps57U.roa
File: aw9D8gOmqlHhxqIPqqHsK5Ps57U.roa (raw, json)
Hash identifier: VL3dJgidTCaevIW/myvYI3TSZmsEBJQ40SQntKGxios=
Subject key identifier: 6B:0F:43:F2:03:A6:AA:51:E1:C6:A2:0F:AA:A1:EC:2B:93:EC:E7:B5
Certificate issuer: /CN=17c203e3f365923a843d3220317a1c68cf74de0f
Certificate serial: 01933FBCFB9CF2C1C31384C50C8BBAFA5269
Authority key identifier: 17:C2:03:E3:F3:65:92:3A:84:3D:32:20:31:7A:1C:68:CF:74:DE:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F8ID4_NlkjqEPTIgMXocaM903g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/aw9D8gOmqlHhxqIPqqHsK5Ps57U.roa
Signing time: Mon 18 Nov 2024 14:46:09 +0000
ROA not before: Mon 18 Nov 2024 14:46:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12993
IP address blocks: 37.203.32.0/21 maxlen: 21
37.203.32.0/23 maxlen: 23
37.203.38.0/24 maxlen: 24
37.203.39.0/24 maxlen: 24
81.94.224.0/20 maxlen: 20
81.94.229.0/24 maxlen: 24
89.111.0.0/18 maxlen: 18
89.111.38.0/24 maxlen: 24
178.16.16.0/20 maxlen: 20
185.34.24.0/22 maxlen: 22
185.34.24.0/23 maxlen: 23
185.34.26.0/23 maxlen: 23
185.219.156.0/22 maxlen: 22
193.108.144.0/22 maxlen: 24
193.108.144.0/23 maxlen: 23
193.108.185.0/24 maxlen: 24
194.9.175.0/24 maxlen: 24
2a00:17c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/F8ID4_NlkjqEPTIgMXocaM903g8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/F8ID4_NlkjqEPTIgMXocaM903g8.mft
rsync://rpki.ripe.net/repository/DEFAULT/F8ID4_NlkjqEPTIgMXocaM903g8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:3f:bc:fb:9c:f2:c1:c3:13:84:c5:0c:8b:ba:fa:52:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17c203e3f365923a843d3220317a1c68cf74de0f
Validity
Not Before: Nov 18 14:46:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6b0f43f203a6aa51e1c6a20faaa1ec2b93ece7b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b0:8d:86:41:68:9d:8d:62:e4:87:0c:75:ea:
9b:2a:5c:ca:9d:8a:0a:6f:5a:41:bd:44:76:81:76:
ea:33:cc:f8:4d:62:05:d4:c7:b7:51:ed:b3:a5:c0:
97:40:62:8f:46:c3:f2:b4:ae:60:94:35:aa:28:32:
77:18:4d:9b:9d:87:10:75:a5:8c:08:99:9d:ec:55:
83:2e:4a:cf:ff:1d:86:12:49:72:52:ec:f6:37:29:
47:c6:d0:1b:3b:6c:fb:2b:84:d9:ff:b9:3e:bb:e9:
f5:b9:cc:d9:93:76:d3:64:83:d4:fb:6d:6f:80:d1:
4b:e4:5f:15:dd:95:f6:f1:b7:68:10:ef:9a:7b:eb:
51:ca:7d:2c:56:be:10:04:c6:f2:27:43:b6:5c:aa:
b8:b3:00:bb:b4:44:8e:d6:fc:2e:f3:90:36:b8:da:
13:80:b1:1c:65:a6:0b:12:e3:84:7b:7b:7a:6b:ac:
88:e3:04:10:1d:3f:75:24:ef:b3:85:4e:61:75:f9:
20:f7:19:ac:4f:47:ce:40:70:b4:59:0e:4e:c6:93:
d1:aa:e0:cd:26:87:b1:40:2b:0a:c7:e3:2d:12:a7:
0a:68:63:8d:37:8d:cd:cf:3e:b5:d7:0b:0c:de:7b:
1e:88:2f:a2:bc:78:19:44:7c:3c:06:c6:fe:a8:3b:
d3:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:0F:43:F2:03:A6:AA:51:E1:C6:A2:0F:AA:A1:EC:2B:93:EC:E7:B5
X509v3 Authority Key Identifier:
keyid:17:C2:03:E3:F3:65:92:3A:84:3D:32:20:31:7A:1C:68:CF:74:DE:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F8ID4_NlkjqEPTIgMXocaM903g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/aw9D8gOmqlHhxqIPqqHsK5Ps57U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/F8ID4_NlkjqEPTIgMXocaM903g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.203.32.0/21
81.94.224.0/20
89.111.0.0/18
178.16.16.0/20
185.34.24.0/22
185.219.156.0/22
193.108.144.0/22
193.108.185.0/24
194.9.175.0/24
IPv6:
2a00:17c0::/32
Signature Algorithm: sha256WithRSAEncryption
15:a2:e5:b0:d2:17:77:4b:46:ce:06:37:3b:37:c5:2b:6d:d7:
3b:3b:94:a8:5a:e6:fd:03:a2:a1:dc:3b:ad:ec:c3:53:e3:a3:
c5:33:83:71:1c:24:5b:ed:40:bf:78:eb:94:ba:d3:4b:4f:a1:
d6:f1:58:f3:2e:35:43:fd:b8:01:36:b2:94:07:6f:e6:d4:91:
a6:0c:89:59:b8:04:ab:8b:ac:53:b0:46:4d:98:b1:d1:ee:10:
85:93:56:d6:ae:59:b1:42:d3:d7:ff:14:76:8c:45:b4:cc:6d:
48:ee:16:c7:c9:19:ad:1f:2d:83:dc:c8:87:a8:a0:8f:1b:d3:
b0:79:70:cb:fd:27:c4:31:33:cb:50:80:63:ca:c5:a2:29:97:
2f:87:38:a6:c5:1b:db:dc:57:a1:b4:3f:ad:e7:66:c4:3b:0e:
32:04:f6:4f:eb:19:44:b2:79:1a:06:0e:fe:e4:c7:55:eb:1e:
4c:e4:eb:b1:b5:84:89:10:06:48:66:d2:d3:85:cb:76:1b:7d:
76:99:1b:2a:b7:61:42:71:8b:d2:c1:fc:95:48:b5:cc:0d:52:
0e:90:1e:92:41:01:e4:8c:1c:81:c9:8d:23:a0:45:82:33:fe:
e8:b0:bc:54:61:ec:16:a4:c6:1d:8e:ec:5e:42:4e:4f:46:f7:
f2:21:95:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:13:10 2024 by rpki-client on console-fra.rpki-client.org