Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/a06407-a1f2-4b47-96c7-0a9e3cb4dc13/1/axpFZ0F1jxyY_Nf64FFjmhNbfM4.roa
File: axpFZ0F1jxyY_Nf64FFjmhNbfM4.roa (raw, json)
Hash identifier: WLi0N8A7kW27W7VTbMjyMgvHs+Vy3nJZnybVfgfiPrM=
Subject key identifier: 6B:1A:45:67:41:75:8F:1C:98:FC:D7:FA:E0:51:63:9A:13:5B:7C:CE
Certificate issuer: /CN=587ed7e9f98a1f1975ee9fbcb095c3adfa28aec0
Certificate serial: 018CC2DAF684AFD665DE7DD645DCE225A78F
Authority key identifier: 58:7E:D7:E9:F9:8A:1F:19:75:EE:9F:BC:B0:95:C3:AD:FA:28:AE:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WH7X6fmKHxl17p-8sJXDrfoorsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/a06407-a1f2-4b47-96c7-0a9e3cb4dc13/1/axpFZ0F1jxyY_Nf64FFjmhNbfM4.roa
Signing time: Mon 01 Jan 2024 02:29:39 +0000
ROA not before: Mon 01 Jan 2024 02:29:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198144
IP address blocks: 176.97.230.0/23 maxlen: 23
176.97.228.0/22 maxlen: 22
176.97.228.0/23 maxlen: 23
93.117.65.0/24 maxlen: 24
212.85.238.0/23 maxlen: 23
212.85.236.0/22 maxlen: 22
212.85.236.0/23 maxlen: 23
128.65.152.0/23 maxlen: 23
128.65.152.0/21 maxlen: 21
128.65.156.0/24 maxlen: 24
128.65.155.0/24 maxlen: 24
128.65.154.0/24 maxlen: 24
128.65.159.0/24 maxlen: 24
128.65.158.0/24 maxlen: 24
128.65.157.0/24 maxlen: 24
188.208.111.0/24 maxlen: 24
185.78.212.0/22 maxlen: 22
185.78.212.0/23 maxlen: 23
185.78.214.0/23 maxlen: 23
188.211.239.0/24 maxlen: 24
93.113.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/a06407-a1f2-4b47-96c7-0a9e3cb4dc13/1/WH7X6fmKHxl17p-8sJXDrfoorsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/a06407-a1f2-4b47-96c7-0a9e3cb4dc13/1/WH7X6fmKHxl17p-8sJXDrfoorsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/WH7X6fmKHxl17p-8sJXDrfoorsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:03:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:f6:84:af:d6:65:de:7d:d6:45:dc:e2:25:a7:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=587ed7e9f98a1f1975ee9fbcb095c3adfa28aec0
Validity
Not Before: Jan 1 02:29:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6b1a456741758f1c98fcd7fae051639a135b7cce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:5b:8c:c5:07:24:50:4e:f3:d2:93:db:88:14:
b1:01:80:72:d1:e0:01:35:15:7b:9a:be:3a:8e:40:
64:11:b9:27:df:b2:54:be:c2:d2:a9:c2:91:92:69:
91:e4:a3:9f:5e:a9:7f:aa:f7:61:2d:fa:3f:76:88:
b0:49:8d:47:45:9b:0f:06:1c:3e:c4:94:ca:53:6b:
c0:a2:11:b4:b3:9c:89:23:34:ba:69:6c:3e:45:ae:
fb:11:9d:7d:db:ce:3e:b3:f3:8b:16:8f:2c:9d:e8:
8d:a1:45:a1:06:14:cb:f0:b2:b1:e3:b2:42:73:8c:
b4:6d:23:c2:b3:7b:f3:67:0a:51:ac:24:d4:b2:25:
e7:68:f5:a6:7a:34:f3:f5:0d:76:c5:75:db:e6:98:
04:a2:13:10:a8:6a:36:37:2d:28:4e:36:c5:c9:55:
4c:c4:8c:d0:0d:05:bf:34:c9:23:57:aa:a6:48:64:
32:de:16:e6:b0:69:06:99:13:d5:9c:4b:8f:16:08:
20:56:05:d0:fc:3c:fb:ca:19:d6:2b:21:52:d0:37:
a7:59:40:df:94:ed:b3:df:be:09:eb:8c:cc:4e:d2:
5b:01:a8:7d:bd:c4:37:44:20:3d:f5:13:1f:76:56:
11:c4:04:ba:1e:a7:48:bf:d0:a8:33:98:8e:92:6e:
46:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:1A:45:67:41:75:8F:1C:98:FC:D7:FA:E0:51:63:9A:13:5B:7C:CE
X509v3 Authority Key Identifier:
keyid:58:7E:D7:E9:F9:8A:1F:19:75:EE:9F:BC:B0:95:C3:AD:FA:28:AE:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WH7X6fmKHxl17p-8sJXDrfoorsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/a06407-a1f2-4b47-96c7-0a9e3cb4dc13/1/axpFZ0F1jxyY_Nf64FFjmhNbfM4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/a06407-a1f2-4b47-96c7-0a9e3cb4dc13/1/WH7X6fmKHxl17p-8sJXDrfoorsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.113.102.0/24
93.117.65.0/24
128.65.152.0/21
176.97.228.0/22
185.78.212.0/22
188.208.111.0/24
188.211.239.0/24
212.85.236.0/22
Signature Algorithm: sha256WithRSAEncryption
14:8a:56:aa:f8:ac:f8:fc:50:b9:d5:d4:e0:b2:4d:74:29:3e:
36:0a:ed:c8:dc:12:bc:5f:08:44:e5:90:a5:a0:ba:5e:8c:ca:
41:24:68:2e:95:6b:1d:6d:4c:72:ac:5a:3c:cd:d6:98:99:fc:
be:9a:61:fe:b8:b2:46:38:eb:11:7f:c8:b8:ca:7d:f7:e6:02:
1f:c5:49:0e:1e:e6:29:be:22:ea:92:2a:10:cd:0e:15:f1:21:
0f:02:04:e9:9a:d2:59:4a:67:e9:e7:9e:8c:88:44:fa:7f:ef:
06:82:bd:13:43:9b:56:cc:a6:86:fe:cb:b1:54:8b:a6:59:e3:
d8:f2:5a:bf:5e:86:6c:51:78:58:d5:dd:24:f6:17:59:74:43:
70:88:a2:cf:32:35:ef:56:39:d6:7e:5c:40:b3:c3:1d:a6:2c:
61:77:00:80:d3:12:12:13:ad:e2:4c:66:ee:a3:6f:76:a8:ac:
ac:61:00:2b:8a:35:88:a2:f4:21:d1:a3:c9:5c:bb:5f:ff:a2:
28:56:05:0f:db:5c:d4:2a:47:63:d0:16:f2:cb:e3:a3:e9:d8:
d0:3f:45:09:dc:5f:db:55:7d:70:e1:b7:e6:c9:5a:01:32:10:
e2:5d:09:e8:d9:9c:1e:34:75:13:c6:ea:20:ea:c4:cb:5f:2a:
a5:87:85:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:08:43 2024 by rpki-client on console-fra.rpki-client.org