Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/a04da6-9887-42a5-8ed7-94e5d49cc628/1/FJ071BXOizpLNxbW6L8S3lld6_E.roa
File: FJ071BXOizpLNxbW6L8S3lld6_E.roa (raw, json)
Hash identifier: FEEV66GOAAK8PwAfT8MrLqNyjuEAD7HN7DzhRD5qQX0=
Subject key identifier: 14:9D:3B:D4:15:CE:8B:3A:4B:37:16:D6:E8:BF:12:DE:59:5D:EB:F1
Certificate issuer: /CN=2875f185823dbc6a82d105b3ca16077db5729377
Certificate serial: 018E74FAEB71866EB8B9CD40CCDC08942D4B
Authority key identifier: 28:75:F1:85:82:3D:BC:6A:82:D1:05:B3:CA:16:07:7D:B5:72:93:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KHXxhYI9vGqC0QWzyhYHfbVyk3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/a04da6-9887-42a5-8ed7-94e5d49cc628/1/FJ071BXOizpLNxbW6L8S3lld6_E.roa
Signing time: Mon 25 Mar 2024 09:39:45 +0000
ROA not before: Mon 25 Mar 2024 09:39:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1299
IP address blocks: 37.157.48.0/24 maxlen: 24
37.157.49.0/24 maxlen: 24
37.157.50.0/24 maxlen: 24
37.157.51.0/24 maxlen: 24
37.157.52.0/24 maxlen: 24
37.157.53.0/24 maxlen: 24
37.157.54.0/24 maxlen: 24
37.157.55.0/24 maxlen: 24
84.247.32.0/24 maxlen: 24
84.247.33.0/24 maxlen: 24
84.247.34.0/24 maxlen: 24
84.247.35.0/24 maxlen: 24
89.35.164.0/24 maxlen: 24
89.35.165.0/24 maxlen: 24
89.35.166.0/24 maxlen: 24
89.35.167.0/24 maxlen: 24
149.19.176.0/24 maxlen: 24
149.19.177.0/24 maxlen: 24
149.19.178.0/24 maxlen: 24
149.19.179.0/24 maxlen: 24
185.2.76.0/24 maxlen: 24
185.2.77.0/24 maxlen: 24
185.2.78.0/24 maxlen: 24
185.2.79.0/24 maxlen: 24
185.34.80.0/24 maxlen: 24
185.34.81.0/24 maxlen: 24
185.34.82.0/24 maxlen: 24
185.34.83.0/24 maxlen: 24
185.60.4.0/24 maxlen: 24
185.60.5.0/24 maxlen: 24
185.60.6.0/24 maxlen: 24
185.60.7.0/24 maxlen: 24
185.61.88.0/24 maxlen: 24
185.61.89.0/24 maxlen: 24
185.61.90.0/24 maxlen: 24
185.61.91.0/24 maxlen: 24
185.86.20.0/24 maxlen: 24
185.86.21.0/24 maxlen: 24
185.86.22.0/24 maxlen: 24
185.86.23.0/24 maxlen: 24
185.91.40.0/24 maxlen: 24
185.91.41.0/24 maxlen: 24
185.91.42.0/24 maxlen: 24
185.91.43.0/24 maxlen: 24
195.206.184.0/24 maxlen: 24
195.206.185.0/24 maxlen: 24
195.206.186.0/24 maxlen: 24
195.206.187.0/24 maxlen: 24
195.206.188.0/24 maxlen: 24
195.206.189.0/24 maxlen: 24
195.206.190.0/24 maxlen: 24
195.206.191.0/24 maxlen: 24
2a00:b840::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/a04da6-9887-42a5-8ed7-94e5d49cc628/1/KHXxhYI9vGqC0QWzyhYHfbVyk3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/a04da6-9887-42a5-8ed7-94e5d49cc628/1/KHXxhYI9vGqC0QWzyhYHfbVyk3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/KHXxhYI9vGqC0QWzyhYHfbVyk3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 May 2024 09:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:74:fa:eb:71:86:6e:b8:b9:cd:40:cc:dc:08:94:2d:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2875f185823dbc6a82d105b3ca16077db5729377
Validity
Not Before: Mar 25 09:39:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=149d3bd415ce8b3a4b3716d6e8bf12de595debf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:0c:8a:1f:5a:b4:d5:cc:1b:d3:f8:dd:76:df:
74:79:cc:51:e9:18:6b:c6:df:f4:1a:ff:43:9a:eb:
65:e1:99:20:6a:d9:86:37:7e:37:f8:e4:c7:f4:f7:
3a:79:64:59:6d:95:84:80:bd:dd:ca:7c:fc:1e:a6:
47:e0:47:9d:6f:78:d0:c1:60:aa:bb:61:88:6e:8b:
9a:94:13:e6:82:1b:11:f5:1c:c5:da:ff:fd:71:c9:
5e:56:f4:ff:32:7f:99:51:21:51:78:0b:8a:f0:c0:
c8:a5:26:8d:a6:44:7f:44:fd:3d:aa:49:c1:44:a8:
2d:f8:87:40:96:4e:eb:f8:d6:6c:e4:fb:0a:b1:bd:
64:8e:06:f8:69:7b:b8:fb:44:f9:ae:6f:fb:3c:fa:
96:40:f9:0d:50:95:ac:57:41:13:5e:c3:e1:76:29:
4a:52:57:5a:57:b3:8e:91:b2:9a:08:fc:78:7c:37:
52:30:fb:61:68:46:0f:6e:64:43:36:c2:1a:f7:92:
19:ac:ad:86:48:27:00:04:7f:b8:3f:27:8a:7e:28:
68:c5:8e:b5:b9:82:76:a6:01:f0:6b:5f:59:92:f2:
a5:76:77:90:3f:00:a8:67:67:19:3d:cc:0d:75:af:
bd:c9:d1:60:f9:66:5f:19:ce:cb:d3:43:ab:fa:b5:
ff:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:9D:3B:D4:15:CE:8B:3A:4B:37:16:D6:E8:BF:12:DE:59:5D:EB:F1
X509v3 Authority Key Identifier:
keyid:28:75:F1:85:82:3D:BC:6A:82:D1:05:B3:CA:16:07:7D:B5:72:93:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KHXxhYI9vGqC0QWzyhYHfbVyk3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/a04da6-9887-42a5-8ed7-94e5d49cc628/1/FJ071BXOizpLNxbW6L8S3lld6_E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/a04da6-9887-42a5-8ed7-94e5d49cc628/1/KHXxhYI9vGqC0QWzyhYHfbVyk3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.157.48.0/21
84.247.32.0/22
89.35.164.0/22
149.19.176.0/22
185.2.76.0/22
185.34.80.0/22
185.60.4.0/22
185.61.88.0/22
185.86.20.0/22
185.91.40.0/22
195.206.184.0/21
IPv6:
2a00:b840::/29
Signature Algorithm: sha256WithRSAEncryption
65:8e:d5:05:a9:54:5d:5a:dc:8b:38:4a:3e:31:52:d7:80:3c:
bb:8f:4a:41:10:1d:b2:ff:67:1f:e8:e7:0c:ed:23:86:33:cf:
8e:e2:0f:9d:52:f2:45:f8:c9:78:99:46:9b:d6:85:2f:61:60:
19:65:74:f7:b1:23:33:c3:06:fd:6e:52:40:0f:cf:23:d7:34:
99:c6:c8:d0:09:da:e1:10:3b:d2:3c:f3:82:78:47:aa:65:ee:
2f:1c:2e:ef:49:80:0f:25:82:62:dd:50:ba:13:d4:fa:80:6f:
fc:00:2a:5a:67:38:94:af:ac:4c:18:04:21:31:99:b0:36:dd:
21:dd:51:00:c3:9c:ee:4f:cc:f6:68:22:8a:6e:d8:4d:47:b6:
ad:a0:98:63:f4:c0:f5:b4:f3:46:c5:45:b9:20:1a:0c:63:cf:
36:f3:61:ca:2c:89:9f:af:00:bc:32:78:65:55:55:0a:b0:a8:
d9:00:d5:25:bd:c8:ec:39:85:2b:d7:ce:24:a7:0f:dd:a0:e3:
7c:90:e3:37:a7:be:09:46:63:cc:85:88:46:b9:62:4d:07:79:
d9:bd:f6:9c:68:94:d5:11:c4:15:3b:06:47:59:be:f2:17:6d:
cb:88:39:68:ba:92:72:2c:15:dc:89:7b:6f:f2:d7:c4:fa:ba:
2d:25:4e:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 15:57:26 2024 by rpki-client on console-fra.rpki-client.org