Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/hQfxCNo0M9zd9zv2AmYQGGTCLIQ.roa
File: hQfxCNo0M9zd9zv2AmYQGGTCLIQ.roa (raw, json)
Hash identifier: MTMl9kbiED2Rbg+rkBpLr1aqe+2CEP33i9wRdR2hewE=
Subject key identifier: 85:07:F1:08:DA:34:33:DC:DD:F7:3B:F6:02:66:10:18:64:C2:2C:84
Certificate issuer: /CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0
Certificate serial: 019203AD19AA1629092D7F35B7E31A5340A7
Authority key identifier: 5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/hQfxCNo0M9zd9zv2AmYQGGTCLIQ.roa
Signing time: Wed 18 Sep 2024 05:48:48 +0000
ROA not before: Wed 18 Sep 2024 05:48:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60077
IP address blocks: 78.110.112.0/21 maxlen: 32
78.110.112.0/22 maxlen: 32
78.110.116.0/22 maxlen: 32
85.198.8.0/21 maxlen: 32
85.198.8.0/22 maxlen: 32
85.198.12.0/22 maxlen: 32
85.198.16.0/21 maxlen: 32
85.198.16.0/22 maxlen: 32
85.198.16.0/23 maxlen: 32
85.198.18.0/23 maxlen: 32
85.198.20.0/22 maxlen: 32
193.151.128.0/19 maxlen: 32
193.151.128.0/20 maxlen: 32
193.151.128.0/22 maxlen: 32
193.151.132.0/22 maxlen: 32
193.151.136.0/22 maxlen: 32
193.151.140.0/22 maxlen: 32
193.151.144.0/20 maxlen: 32
193.151.144.0/21 maxlen: 32
193.151.144.0/22 maxlen: 32
193.151.148.0/22 maxlen: 32
193.151.152.0/22 maxlen: 32
193.151.156.0/23 maxlen: 32
193.151.156.0/24 maxlen: 32
193.151.157.0/24 maxlen: 32
193.151.158.0/24 maxlen: 32
193.151.159.0/24 maxlen: 32
2a05:1a30::/34 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:03:ad:19:aa:16:29:09:2d:7f:35:b7:e3:1a:53:40:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0
Validity
Not Before: Sep 18 05:48:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8507f108da3433dcddf73bf60266101864c22c84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b3:e6:58:bd:9e:41:e1:c7:61:f4:15:93:99:
8c:b4:a9:f0:a6:be:50:72:3b:ab:37:a3:01:08:82:
36:f6:6b:a4:04:e9:a5:ee:49:8d:9b:7b:b7:5a:b1:
31:fa:7c:ff:47:b8:44:c4:52:9e:7b:e1:06:08:17:
97:1a:61:38:ff:34:ae:c9:94:78:73:9b:c5:5a:b3:
20:b7:c9:05:f2:bd:40:f0:89:b9:7d:ed:4d:63:53:
ad:a4:21:60:e8:ba:69:92:56:55:23:c7:68:c0:25:
95:98:46:c8:2b:00:f3:0a:d3:f7:e4:6b:ea:9c:ed:
e2:9d:c2:8d:90:be:71:a1:86:ed:cb:2e:bd:4c:c6:
cc:81:ce:fe:15:a6:2d:71:05:96:19:62:db:5b:24:
a4:19:dc:42:e9:2b:d0:cd:96:0f:8d:1e:23:ef:ab:
d1:3e:16:74:70:cf:62:73:e5:bd:7e:2c:fe:8b:8f:
1c:97:d2:e2:f0:d1:cb:bc:7c:3a:8c:f6:5d:3e:63:
4d:91:7b:41:39:93:a0:2c:38:ed:96:fb:16:55:8d:
b6:c6:7c:c3:d0:93:af:6e:b6:5a:85:80:36:2f:45:
72:b7:50:a8:f3:ba:0c:d7:47:81:71:8a:a5:ec:06:
4e:f8:9a:2d:47:6a:fb:00:71:a9:c8:0e:a0:b3:49:
1c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:07:F1:08:DA:34:33:DC:DD:F7:3B:F6:02:66:10:18:64:C2:2C:84
X509v3 Authority Key Identifier:
keyid:5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/hQfxCNo0M9zd9zv2AmYQGGTCLIQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.110.112.0/21
85.198.8.0-85.198.23.255
193.151.128.0/19
IPv6:
2a05:1a30::/34
Signature Algorithm: sha256WithRSAEncryption
97:38:c5:79:63:4d:9d:b0:21:e3:bb:bd:09:ee:d6:34:40:5c:
3d:16:27:82:f2:8e:0e:b6:b0:58:dc:f2:51:2a:e2:7e:d5:72:
68:8f:65:4d:c9:1f:5d:40:99:42:c0:d3:ce:c0:07:1f:97:03:
35:7a:60:89:27:47:39:5f:b2:70:1e:0e:b9:f8:c2:70:2e:69:
d9:44:51:44:61:c4:a7:92:47:1e:f7:79:77:3a:21:2a:9f:fa:
05:e9:98:b7:28:69:61:9e:ea:9b:49:81:2b:18:62:46:50:6a:
30:de:11:4f:6f:e8:3e:4b:2f:34:7c:24:fe:ed:ee:66:97:c4:
66:af:57:5f:be:ce:3a:81:d5:9c:00:dd:d8:39:92:82:d6:17:
5e:a4:9d:1e:0a:ac:56:af:6e:1a:50:a5:bc:5e:09:44:69:43:
db:eb:f8:e7:66:44:b3:53:7b:2e:cc:da:37:75:57:15:33:4d:
29:05:05:9d:55:da:d6:ac:f2:35:4d:0a:0c:87:82:11:2e:1b:
81:8d:5e:55:c4:55:79:a9:4d:3c:88:c1:85:b5:95:4c:f6:36:
7d:b8:5c:e0:83:ec:6c:6a:27:04:43:fb:71:aa:2a:d8:02:c2:
74:2c:aa:22:60:29:71:a7:82:16:77:4e:3b:10:b5:17:61:e3:
a6:3e:41:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 21:15:41 2024 by rpki-client on console-fra.rpki-client.org