Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/5PnfiWqHvU94LIGxtK6dCyKSrS0.roa
File: 5PnfiWqHvU94LIGxtK6dCyKSrS0.roa (raw, json)
Hash identifier: u+s/kcUh8whWX1FWK8jKP/K8mLiqguFyceSCxZxr0Sc=
Subject key identifier: E4:F9:DF:89:6A:87:BD:4F:78:2C:81:B1:B4:AE:9D:0B:22:92:AD:2D
Certificate issuer: /CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba
Certificate serial: 018CC56E8E819EC506BC887D181BDB8824C2
Authority key identifier: 1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/5PnfiWqHvU94LIGxtK6dCyKSrS0.roa
Signing time: Mon 01 Jan 2024 14:30:06 +0000
ROA not before: Mon 01 Jan 2024 14:30:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198710
IP address blocks: 81.209.132.0/24 maxlen: 24
81.209.151.0/24 maxlen: 24
81.209.159.0/24 maxlen: 24
81.209.154.0/23 maxlen: 24
83.125.106.0/23 maxlen: 23
83.125.108.0/24 maxlen: 24
80.86.180.0/24 maxlen: 24
80.86.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 17:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:8e:81:9e:c5:06:bc:88:7d:18:1b:db:88:24:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba
Validity
Not Before: Jan 1 14:30:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e4f9df896a87bd4f782c81b1b4ae9d0b2292ad2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:66:0b:4d:66:81:03:2c:48:92:93:c3:54:17:
a6:f4:be:bc:d0:a7:99:4d:b8:8c:20:8a:86:a2:ad:
21:cd:91:17:1c:e4:4d:1a:4f:92:7f:60:39:0f:41:
ee:9c:18:64:47:51:85:75:a6:35:32:6b:56:0b:9c:
55:5c:bc:fe:43:07:72:a1:bd:83:36:21:f7:ed:06:
f2:e6:61:7f:31:17:68:3a:b8:a6:31:5e:f0:e4:e3:
65:af:e0:12:0c:f6:41:eb:ea:6f:72:08:a6:91:ec:
db:15:95:47:ee:13:e6:9e:62:68:55:2c:51:b5:4e:
a9:0d:5e:8f:e3:a7:7d:e1:be:1d:1c:82:10:a6:b8:
71:2d:4c:e2:d0:93:a7:2b:b7:b7:45:0c:37:d3:58:
f7:41:fe:8b:4f:5a:e7:92:a4:bf:f6:bf:31:6f:f3:
92:4b:34:f8:91:0e:d8:b0:90:a0:20:79:e1:88:6a:
55:0a:95:57:4c:f8:02:7f:f8:49:4b:50:c1:d2:ab:
06:81:9e:6f:49:29:af:88:08:9c:1a:94:55:18:3c:
07:19:28:53:c5:c0:43:4f:c4:ae:e6:e9:28:85:90:
ba:7e:65:66:35:ee:e4:91:78:67:01:2d:27:5e:86:
e9:b7:19:b1:94:55:cf:72:59:8b:23:a7:22:97:54:
4c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:F9:DF:89:6A:87:BD:4F:78:2C:81:B1:B4:AE:9D:0B:22:92:AD:2D
X509v3 Authority Key Identifier:
keyid:1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/5PnfiWqHvU94LIGxtK6dCyKSrS0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.86.180.0/24
80.86.186.0/24
81.209.132.0/24
81.209.151.0/24
81.209.154.0/23
81.209.159.0/24
83.125.106.0-83.125.108.255
Signature Algorithm: sha256WithRSAEncryption
1d:66:d3:82:e1:96:08:75:43:f3:90:0d:d9:c1:8a:de:17:56:
63:76:65:27:df:60:54:fc:a8:1c:b1:29:78:9b:a4:88:44:51:
91:d3:42:c0:16:ec:59:8f:00:c3:9b:0e:3c:19:8e:b9:9b:ad:
b9:f9:35:e8:d3:7a:93:c8:fe:c0:3b:b7:8c:ac:48:0b:0c:3d:
06:07:21:59:e9:58:46:15:5d:fe:0e:b8:91:80:33:dc:fe:fb:
5b:28:5d:d2:8e:e5:35:03:81:38:ad:db:72:73:1c:5b:77:f3:
ba:4a:c6:73:4d:30:df:56:f9:d7:c0:21:8e:6f:71:93:ab:15:
1b:64:84:1c:e0:9c:cb:3a:19:33:f0:2e:19:7b:69:8d:eb:6c:
01:f3:e4:60:3b:7b:80:34:e4:77:40:2e:b6:83:91:03:b9:1e:
4f:1b:78:47:3b:12:43:c4:5b:d7:79:b6:8e:b7:46:df:eb:e7:
ae:aa:ef:02:9a:be:d5:9c:74:63:ea:49:e4:ac:0b:ee:f7:d5:
60:25:cc:82:21:47:54:74:12:8f:23:26:06:01:53:d8:ba:e3:
0b:2a:8a:43:12:e1:66:d2:98:d8:39:8e:b0:1f:24:29:55:a1:
b3:ae:ea:89:04:7e:98:43:21:ae:69:57:ae:27:6d:40:72:90:
6b:2b:84:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:31:04 2024 by rpki-client on console-fra.rpki-client.org