Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/2yUiZaIpubgeZie1uG4pl4yjDtY.roa
File: 2yUiZaIpubgeZie1uG4pl4yjDtY.roa (raw, json)
Hash identifier: ijNA2II9MQOTKdMfcTiwn/I43SDIOS46cWUSvcQNzhk=
Subject key identifier: DB:25:22:65:A2:29:B9:B8:1E:66:27:B5:B8:6E:29:97:8C:A3:0E:D6
Certificate issuer: /CN=351a14ce9d25239b92fe5abce532515044c1aba4
Certificate serial: 018CC3B71CDA2AB45E23F7CF6390F2B7D23D
Authority key identifier: 35:1A:14:CE:9D:25:23:9B:92:FE:5A:BC:E5:32:51:50:44:C1:AB:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRoUzp0lI5uS_lq85TJRUETBq6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/2yUiZaIpubgeZie1uG4pl4yjDtY.roa
Signing time: Mon 01 Jan 2024 06:30:06 +0000
ROA not before: Mon 01 Jan 2024 06:30:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56430
IP address blocks: 188.241.13.0/24 maxlen: 24
86.105.152.0/23 maxlen: 23
86.105.155.0/24 maxlen: 24
77.81.64.0/24 maxlen: 24
89.42.42.0/24 maxlen: 24
193.33.200.0/23 maxlen: 23
185.82.172.0/22 maxlen: 22
89.36.93.0/24 maxlen: 24
89.36.18.0/24 maxlen: 24
89.43.174.0/24 maxlen: 24
188.212.250.0/24 maxlen: 24
89.40.214.0/24 maxlen: 24
2a05:91c4::/32 maxlen: 32
2a05:91c0::/32 maxlen: 32
2a09:1340::/29 maxlen: 29
2a0f:8b80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRoUzp0lI5uS_lq85TJRUETBq6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 12:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:1c:da:2a:b4:5e:23:f7:cf:63:90:f2:b7:d2:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351a14ce9d25239b92fe5abce532515044c1aba4
Validity
Not Before: Jan 1 06:30:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=db252265a229b9b81e6627b5b86e29978ca30ed6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:22:ed:57:5d:66:8b:61:3d:d7:f5:14:e2:e4:
ef:ff:73:f8:44:8e:24:24:68:94:6c:3e:90:b2:dd:
40:81:39:3c:53:73:3d:ae:26:eb:23:36:88:5c:b7:
ec:64:4a:ee:63:c5:19:fd:66:a2:d2:14:21:1f:d8:
ae:98:be:ae:42:2e:d8:d8:66:23:09:9e:43:cf:24:
df:1b:8c:c3:62:16:29:84:73:64:5b:bd:82:30:83:
13:a8:78:94:f3:cb:18:2b:73:fc:48:af:67:8f:a6:
18:01:f5:15:59:cd:4e:30:8c:58:b9:5e:e5:c1:84:
ab:80:64:28:e7:2c:68:d3:98:58:3f:1f:8f:c4:11:
9f:d2:5b:00:73:86:85:a7:98:15:f8:fb:6e:90:fa:
cb:85:76:6e:86:9f:1d:08:27:a1:f2:3c:9b:7e:99:
48:14:0e:e5:97:f2:b3:f2:7f:c6:c9:de:35:18:5b:
c3:91:65:5f:80:16:97:cd:99:6d:e0:b1:ce:cf:93:
04:f4:95:0a:09:b3:6f:f7:ea:32:d7:eb:a6:96:c1:
d5:55:ec:77:c1:4e:f7:3d:dd:08:aa:48:72:86:9d:
61:cf:a6:28:bc:cc:10:3a:ef:23:bd:5a:de:f4:49:
6f:df:e3:34:eb:65:55:9a:6b:79:23:9b:d4:4b:09:
d0:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:25:22:65:A2:29:B9:B8:1E:66:27:B5:B8:6E:29:97:8C:A3:0E:D6
X509v3 Authority Key Identifier:
keyid:35:1A:14:CE:9D:25:23:9B:92:FE:5A:BC:E5:32:51:50:44:C1:AB:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRoUzp0lI5uS_lq85TJRUETBq6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/2yUiZaIpubgeZie1uG4pl4yjDtY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.81.64.0/24
86.105.152.0/23
86.105.155.0/24
89.36.18.0/24
89.36.93.0/24
89.40.214.0/24
89.42.42.0/24
89.43.174.0/24
185.82.172.0/22
188.212.250.0/24
188.241.13.0/24
193.33.200.0/23
IPv6:
2a05:91c0::/32
2a05:91c4::/32
2a09:1340::/29
2a0f:8b80::/29
Signature Algorithm: sha256WithRSAEncryption
9f:28:0b:f7:31:8a:98:21:63:b7:cb:0f:a2:56:ea:82:1e:c0:
13:3b:37:17:b1:0d:2e:7e:b1:3c:96:c3:c9:d2:d8:c9:de:38:
14:f9:95:81:aa:7e:3d:19:c0:99:94:82:e2:94:9a:40:b2:a8:
69:26:81:cd:22:3d:31:34:cf:05:68:18:81:09:8b:1e:06:60:
a2:12:44:29:8e:cc:a5:6a:e7:75:e2:ff:92:37:8f:c6:31:21:
a7:cd:ce:5a:7c:ea:b8:d1:18:1f:e0:55:43:e0:94:a9:dc:7e:
46:1c:9a:22:a9:f7:6d:78:2b:6d:71:c5:b3:8a:fd:f7:67:b5:
cc:f8:f3:0b:b1:50:fc:ab:46:94:43:96:77:25:33:9d:4d:40:
a8:5b:ec:68:f8:94:a7:8d:69:f4:ea:ad:4e:6d:13:0d:73:bc:
63:f4:54:6b:56:2c:ab:b4:11:6b:8d:63:0c:34:d0:4e:99:86:
3c:3c:1a:ac:3e:4e:b3:c6:8e:19:2b:08:6a:cf:42:b8:fb:e9:
fb:0a:46:60:ae:64:0a:99:94:af:15:4f:9f:88:3d:9d:30:cc:
f8:2c:d3:ca:26:fb:ad:30:5a:0f:37:df:f1:8b:c9:f2:06:c6:
c9:a5:96:0d:6a:75:06:06:49:10:c1:39:44:0e:b0:2a:16:7b:
c4:02:a6:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 18:39:55 2024 by rpki-client on console-fra.rpki-client.org