Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/t1re2B814I0Z843KTi4N8XxlM84.roa
File: t1re2B814I0Z843KTi4N8XxlM84.roa (raw, json)
Hash identifier: uyIuhnOjUPtK0oXFCD0gyRAIVM2E+a7d8bsDswDQnDo=
Subject key identifier: B7:5A:DE:D8:1F:35:E0:8D:19:F3:8D:CA:4E:2E:0D:F1:7C:65:33:CE
Certificate issuer: /CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7
Certificate serial: 01927099AC9C70FD8F2A49628DD505E553DD
Authority key identifier: F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/t1re2B814I0Z843KTi4N8XxlM84.roa
Signing time: Wed 09 Oct 2024 09:26:12 +0000
ROA not before: Wed 09 Oct 2024 09:26:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39700
IP address blocks: 78.108.128.0/20 maxlen: 24
80.246.202.0/24 maxlen: 24
81.30.38.0/24 maxlen: 24
91.142.240.0/21 maxlen: 21
91.142.240.0/22 maxlen: 22
91.142.246.0/23 maxlen: 23
91.142.248.0/22 maxlen: 22
141.255.178.0/23 maxlen: 23
176.74.224.0/24 maxlen: 24
2001:4cb8::/29 maxlen: 48
2001:4cb9::/32 maxlen: 32
2a00:c080:101c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 17:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:70:99:ac:9c:70:fd:8f:2a:49:62:8d:d5:05:e5:53:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7
Validity
Not Before: Oct 9 09:26:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b75aded81f35e08d19f38dca4e2e0df17c6533ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:82:8d:93:01:cf:6d:c9:52:14:8f:27:cd:c0:
b3:a7:2a:2d:de:e0:22:c0:f8:14:ba:d2:d3:99:c1:
a5:07:1f:56:c8:82:97:7e:0c:e1:6f:b2:36:ea:2f:
ff:59:23:7f:77:13:7c:60:e8:3f:89:7a:f1:2f:81:
e4:e6:10:e1:c2:82:05:2e:35:b5:7a:c2:4f:fa:35:
df:5c:a2:0a:e1:f5:68:60:77:9b:72:cb:71:55:02:
ef:1e:0f:53:5f:49:3d:5a:e8:58:71:06:64:0d:05:
bc:86:78:75:76:cf:d9:cf:87:56:d3:b5:31:6e:99:
ca:70:ae:18:49:23:93:92:77:40:4f:b7:a8:87:b6:
8a:a0:4d:15:5b:0d:f5:c4:55:bf:7e:0c:3f:12:4b:
0c:95:74:6c:b9:a4:a6:9d:f5:91:f8:01:8e:50:be:
fd:92:95:87:70:66:e5:ae:44:1f:6a:f7:2b:ca:dc:
12:c5:8a:a7:0a:d9:a5:ff:2e:b2:ab:77:56:b2:6d:
9b:d5:d6:4e:dc:9f:85:4b:33:ed:e7:ee:42:45:56:
b8:c9:0b:20:df:5f:f5:73:1a:85:52:77:c8:c6:a6:
80:f7:56:4e:e8:46:77:90:ed:06:df:d6:9f:94:dd:
01:11:a0:3f:90:b9:1e:be:8f:2f:4b:da:c2:5e:92:
12:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:5A:DE:D8:1F:35:E0:8D:19:F3:8D:CA:4E:2E:0D:F1:7C:65:33:CE
X509v3 Authority Key Identifier:
keyid:F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/t1re2B814I0Z843KTi4N8XxlM84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.108.128.0/20
80.246.202.0/24
81.30.38.0/24
91.142.240.0-91.142.251.255
141.255.178.0/23
176.74.224.0/24
IPv6:
2001:4cb8::/29
2a00:c080:101c::/48
Signature Algorithm: sha256WithRSAEncryption
47:23:65:67:5d:82:06:49:be:25:b5:2c:7c:1f:fd:be:c1:eb:
9a:4b:6a:de:34:83:32:8d:8b:38:65:51:63:29:fd:98:a2:40:
76:c5:94:10:bf:cf:a7:e8:24:1b:0c:fb:30:53:40:fc:4e:5d:
e9:a3:2a:aa:64:1d:2b:c3:92:81:35:07:1b:e2:94:a6:59:53:
c3:37:e1:7a:82:3c:3d:30:75:a5:3d:d4:a8:33:1f:47:e5:d9:
51:46:63:5e:fb:ab:44:e8:46:b5:cd:70:71:ae:97:18:f9:19:
bc:e8:6c:a0:01:18:a4:ad:2d:d6:0c:1c:6a:87:8f:ba:19:ae:
78:e8:de:2c:c3:fd:11:a5:cd:29:47:82:1c:6d:76:a7:0f:00:
8c:b2:ad:98:b9:6a:b2:8b:c3:2d:bf:50:cc:59:5b:a8:ab:1e:
1f:ef:3e:77:39:93:ad:8f:93:13:b8:c0:2b:8d:fe:fa:56:4c:
ec:0f:ec:62:e6:d6:dc:22:df:b4:6a:96:90:34:1b:83:6b:6d:
d0:c0:2e:78:01:c6:24:c4:cf:b0:13:0e:bf:94:d1:6e:18:57:
cc:8c:bc:c6:59:5c:db:79:ef:94:e6:86:f5:4e:2d:f9:86:e3:
f2:84:5b:49:de:da:c3:99:bd:fb:88:28:36:b5:79:fb:6b:15:
53:52:cd:36
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Nov 23 01:18:02 2024 by rpki-client on console-fra.rpki-client.org