Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/b0fb0b-b96a-4390-86a8-6fe35ae54a5b/1/1-iX0GJwceIxjjuUZV79-SGq7sZo.roa
File: 1-iX0GJwceIxjjuUZV79-SGq7sZo.roa (raw, json)
Hash identifier: 2NAYyPszuUjgQie6DXLfMw7hLTuML0u5xByrmXU4LDI=
Subject key identifier: FA:25:F4:18:9C:1C:78:8C:63:8E:E5:19:57:BF:7E:48:6A:BB:B1:9A
Certificate issuer: /CN=4568d0a7204560b6356d837bbf1510d9636df63a
Certificate serial: 019125E22BE1F56DB65CEA2F7477AAD44E80
Authority key identifier: 45:68:D0:A7:20:45:60:B6:35:6D:83:7B:BF:15:10:D9:63:6D:F6:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RWjQpyBFYLY1bYN7vxUQ2WNt9jo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/b0fb0b-b96a-4390-86a8-6fe35ae54a5b/1/1-iX0GJwceIxjjuUZV79-SGq7sZo.roa
Signing time: Tue 06 Aug 2024 04:11:04 +0000
ROA not before: Tue 06 Aug 2024 04:11:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20521
IP address blocks: 37.114.72.0/21 maxlen: 32
78.110.16.0/20 maxlen: 32
80.245.208.0/20 maxlen: 32
95.131.232.0/21 maxlen: 32
185.56.252.0/22 maxlen: 32
195.38.30.0/24 maxlen: 32
217.168.160.0/20 maxlen: 32
2a00:1cc0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/b0fb0b-b96a-4390-86a8-6fe35ae54a5b/1/RWjQpyBFYLY1bYN7vxUQ2WNt9jo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/b0fb0b-b96a-4390-86a8-6fe35ae54a5b/1/RWjQpyBFYLY1bYN7vxUQ2WNt9jo.mft
rsync://rpki.ripe.net/repository/DEFAULT/RWjQpyBFYLY1bYN7vxUQ2WNt9jo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:25:e2:2b:e1:f5:6d:b6:5c:ea:2f:74:77:aa:d4:4e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4568d0a7204560b6356d837bbf1510d9636df63a
Validity
Not Before: Aug 6 04:11:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fa25f4189c1c788c638ee51957bf7e486abbb19a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:f9:d3:08:eb:7e:9a:49:70:8a:7f:ac:f1:70:
b3:31:a3:a6:c0:75:bd:7e:3d:ca:70:49:5f:d9:ae:
c5:e8:a1:1b:b8:9b:fd:d5:53:f5:b9:3a:09:3d:b6:
01:d5:a3:43:49:5f:42:60:8b:e5:73:91:45:d2:b9:
08:28:5c:d9:c1:4d:8b:28:85:ae:c0:02:e4:e9:c0:
12:4d:36:ba:1d:2e:a9:90:b5:ff:e9:e4:0e:7c:8b:
85:92:02:14:be:72:2f:39:4b:43:0b:dc:5e:87:15:
e4:51:d2:00:8f:7b:78:6a:26:1d:35:31:bb:c5:e3:
03:a2:18:10:a2:3e:93:92:b4:06:70:86:ce:fb:cc:
bb:0a:c1:37:6e:b1:13:45:fd:7b:f9:1a:5b:1c:94:
15:0b:0d:96:19:c4:c9:57:72:b3:93:4c:52:a8:8c:
88:f5:44:f7:af:ad:08:e2:e2:fb:4e:d4:a6:5f:4b:
b0:68:35:7a:2f:b9:ca:55:2a:28:8f:50:76:a6:1f:
fa:df:3f:4f:e2:c1:61:fb:5d:86:3a:e5:5c:0c:8b:
59:6c:99:c1:73:f3:b4:6e:81:ed:ac:9a:41:e2:11:
76:5d:30:4e:8e:0d:b9:37:bd:77:40:82:18:45:61:
f0:2f:d9:e5:db:45:79:76:3c:df:13:03:b3:1a:45:
42:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:25:F4:18:9C:1C:78:8C:63:8E:E5:19:57:BF:7E:48:6A:BB:B1:9A
X509v3 Authority Key Identifier:
keyid:45:68:D0:A7:20:45:60:B6:35:6D:83:7B:BF:15:10:D9:63:6D:F6:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RWjQpyBFYLY1bYN7vxUQ2WNt9jo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b0fb0b-b96a-4390-86a8-6fe35ae54a5b/1/1-iX0GJwceIxjjuUZV79-SGq7sZo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b0fb0b-b96a-4390-86a8-6fe35ae54a5b/1/RWjQpyBFYLY1bYN7vxUQ2WNt9jo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.114.72.0/21
78.110.16.0/20
80.245.208.0/20
95.131.232.0/21
185.56.252.0/22
195.38.30.0/24
217.168.160.0/20
IPv6:
2a00:1cc0::/32
Signature Algorithm: sha256WithRSAEncryption
5f:76:d0:4a:1a:36:0a:9a:e7:24:fc:da:e2:51:65:b1:ad:0a:
71:66:7d:4c:ad:ba:96:3e:2a:4c:9d:0f:c8:69:a7:2a:33:4e:
95:1b:07:5c:08:3d:ad:73:b9:f9:26:0e:77:8e:b4:ad:06:82:
1e:91:ed:de:8e:7a:9e:f4:73:ac:67:c8:ef:74:e4:16:ec:6f:
6d:94:3a:1f:b8:48:41:9a:99:1e:43:af:86:a8:8a:82:08:b8:
cb:d5:a4:d7:f1:8b:b1:74:9f:27:2f:44:14:c8:1b:3c:eb:d8:
3f:28:47:f8:ae:e6:8d:d3:b9:b4:7c:91:f6:cd:cf:ec:a2:13:
7e:0d:d2:04:aa:8a:b3:2d:b7:3e:2f:d7:1f:f9:f4:b3:be:5b:
81:69:56:ae:6a:c7:19:06:e7:1d:dd:62:5a:7f:55:e8:84:10:
ea:c5:84:bc:9f:5a:19:60:f4:97:3b:87:42:fd:23:78:e9:eb:
31:b2:33:6d:93:8e:2b:5f:7b:ca:44:97:1f:15:29:fa:59:1f:
a7:f6:ba:b5:31:78:2c:6c:98:74:27:d0:87:2e:6e:95:f6:20:
1a:c7:65:c9:66:56:94:28:c8:34:6d:d3:26:c0:38:a2:5e:02:
f6:7a:c8:14:1e:ae:08:80:f2:78:68:30:de:6d:0a:7f:6a:ed:
25:e3:7b:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:59:49 2024 by rpki-client on console-fra.rpki-client.org