Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/9e16c1-310f-410c-b341-41d82329f26d/1/rCtD76UHy7HE0OvJQRJCjoITQw8.roa
File: rCtD76UHy7HE0OvJQRJCjoITQw8.roa (raw, json)
Hash identifier: XlHeWDsNWmH0ib7rY7BbgDC+Ly+CgVFYQFoo6mDMeh8=
Subject key identifier: AC:2B:43:EF:A5:07:CB:B1:C4:D0:EB:C9:41:12:42:8E:82:13:43:0F
Certificate issuer: /CN=c24d5bd3ceeaab0786ce151a3178dadc107bf280
Certificate serial: 018CC2DAF325C07A8350B7F9BE94B2F3AFB8
Authority key identifier: C2:4D:5B:D3:CE:EA:AB:07:86:CE:15:1A:31:78:DA:DC:10:7B:F2:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wk1b087qqweGzhUaMXja3BB78oA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/9e16c1-310f-410c-b341-41d82329f26d/1/rCtD76UHy7HE0OvJQRJCjoITQw8.roa
Signing time: Mon 01 Jan 2024 02:29:38 +0000
ROA not before: Mon 01 Jan 2024 02:29:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34594
IP address blocks: 151.252.224.0/19 maxlen: 19
89.201.128.0/17 maxlen: 17
151.252.224.0/20 maxlen: 20
185.10.40.0/22 maxlen: 22
89.17.0.0/19 maxlen: 19
151.252.208.0/21 maxlen: 21
80.80.48.0/20 maxlen: 24
176.222.32.0/20 maxlen: 20
5.43.160.0/19 maxlen: 19
37.60.128.0/21 maxlen: 21
37.205.96.0/20 maxlen: 20
5.39.128.0/19 maxlen: 19
95.178.128.0/17 maxlen: 17
89.201.175.0/24 maxlen: 24
85.114.32.0/20 maxlen: 20
85.114.33.0/24 maxlen: 24
85.114.32.0/19 maxlen: 19
185.18.60.0/22 maxlen: 22
2a02:ac8::/32 maxlen: 32
2a03:6100::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/9e16c1-310f-410c-b341-41d82329f26d/1/wk1b087qqweGzhUaMXja3BB78oA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/9e16c1-310f-410c-b341-41d82329f26d/1/wk1b087qqweGzhUaMXja3BB78oA.mft
rsync://rpki.ripe.net/repository/DEFAULT/wk1b087qqweGzhUaMXja3BB78oA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:f3:25:c0:7a:83:50:b7:f9:be:94:b2:f3:af:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c24d5bd3ceeaab0786ce151a3178dadc107bf280
Validity
Not Before: Jan 1 02:29:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ac2b43efa507cbb1c4d0ebc94112428e8213430f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:64:a7:bf:b3:2d:b6:38:06:1c:a3:d1:7c:79:
cb:e1:a3:a8:a1:c5:26:f7:e2:33:7d:01:71:b1:8d:
21:5c:ac:21:f3:59:64:37:0d:21:d5:54:33:4e:2d:
2a:4d:d8:be:ec:1c:14:d6:35:1c:70:3e:bd:a2:e2:
6f:5f:2a:a1:b6:95:50:4e:f0:57:32:2d:21:b8:3b:
e1:a1:7e:c7:cd:2c:5a:63:37:1c:c9:c3:eb:2c:8d:
15:81:0d:11:47:7c:77:17:e2:8a:97:cd:77:ff:3c:
08:c8:76:66:fc:49:70:6f:77:41:82:ff:73:b4:0e:
5b:fe:af:15:87:e2:f2:5e:f9:6e:11:ec:83:26:3a:
3a:26:d9:0e:bc:f3:63:c5:cc:2d:98:56:6b:13:c9:
48:b6:c6:43:28:0d:1a:22:8e:62:f9:e2:fa:1a:47:
28:da:71:a9:0a:16:c8:4a:68:76:06:c5:7b:ac:f2:
08:4f:68:65:33:1a:de:20:17:05:ac:fc:4b:9a:a1:
83:fa:28:53:a1:94:a6:64:ae:92:05:37:e5:cd:7f:
8a:42:3e:02:38:3b:40:d9:8c:f8:35:df:0f:a2:13:
34:ef:e3:7a:f1:b7:0e:8e:ad:13:37:a3:9a:15:d4:
f9:04:63:27:34:16:d4:e8:0b:85:6b:a1:cd:e3:b7:
09:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:2B:43:EF:A5:07:CB:B1:C4:D0:EB:C9:41:12:42:8E:82:13:43:0F
X509v3 Authority Key Identifier:
keyid:C2:4D:5B:D3:CE:EA:AB:07:86:CE:15:1A:31:78:DA:DC:10:7B:F2:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wk1b087qqweGzhUaMXja3BB78oA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/9e16c1-310f-410c-b341-41d82329f26d/1/rCtD76UHy7HE0OvJQRJCjoITQw8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/9e16c1-310f-410c-b341-41d82329f26d/1/wk1b087qqweGzhUaMXja3BB78oA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.39.128.0/19
5.43.160.0/19
37.60.128.0/21
37.205.96.0/20
80.80.48.0/20
85.114.32.0/19
89.17.0.0/19
89.201.128.0/17
95.178.128.0/17
151.252.208.0/21
151.252.224.0/19
176.222.32.0/20
185.10.40.0/22
185.18.60.0/22
IPv6:
2a02:ac8::/32
2a03:6100::/32
Signature Algorithm: sha256WithRSAEncryption
8a:c6:65:67:f7:21:fb:a7:09:17:11:4b:b2:49:08:07:3d:54:
3c:bc:de:5a:b3:75:0f:29:25:80:a6:a5:26:c5:ef:48:7c:33:
d4:a2:70:36:52:8d:90:52:4e:d4:ab:6a:40:0e:17:11:5a:0e:
c3:42:89:bc:0c:7b:56:f8:3f:5b:c7:43:a6:21:a6:c2:9c:e6:
12:e8:9c:99:57:23:60:ce:e2:48:a1:59:20:3f:a5:dd:0d:8b:
14:65:0b:f8:11:a5:f0:74:cd:5b:cb:9f:a1:23:67:49:ac:38:
50:82:51:6c:2d:f7:fd:59:96:f4:d0:37:35:31:fe:5a:46:f9:
25:cf:33:4a:1a:5f:a5:8f:7d:fe:11:c4:7c:95:f7:fc:3e:9d:
25:b2:97:2c:df:a5:70:13:85:2d:43:65:db:a9:9c:b4:98:6d:
4e:a6:dc:66:29:1c:67:a9:c3:2b:51:5b:a3:43:e3:0a:bb:6a:
a2:2d:fd:6d:c1:32:40:de:5a:5e:df:6a:b1:81:97:ec:be:a5:
ec:1e:26:01:b7:55:3d:35:1a:dd:45:e6:a5:50:0c:7b:95:06:
80:05:b4:d7:20:97:bc:18:be:0d:ef:ba:21:ab:ac:b7:c1:fe:
f4:30:f3:2a:9b:b3:a5:56:43:06:80:b6:1e:51:78:7f:5a:11:
e5:4c:35:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:04:28 2024 by rpki-client on console-fra.rpki-client.org