Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/58af24-c454-44b0-a7ca-c6f1e6ac9ba9/1/GA6hbm2ZIM7b6bo8rfSpjbDRaqg.roa
File: GA6hbm2ZIM7b6bo8rfSpjbDRaqg.roa (raw, json)
Hash identifier: TxYaqumC//G4daE3MsBDoOg4t24T8e5mPCmD/zosX0A=
Subject key identifier: 18:0E:A1:6E:6D:99:20:CE:DB:E9:BA:3C:AD:F4:A9:8D:B0:D1:6A:A8
Certificate issuer: /CN=ae7f747df5f24353154dc4d4bf70d2ddcb53e900
Certificate serial: 018F756D429372C9C12B7EE2D80A97860028
Authority key identifier: AE:7F:74:7D:F5:F2:43:53:15:4D:C4:D4:BF:70:D2:DD:CB:53:E9:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rn90ffXyQ1MVTcTUv3DS3ctT6QA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/58af24-c454-44b0-a7ca-c6f1e6ac9ba9/1/GA6hbm2ZIM7b6bo8rfSpjbDRaqg.roa
Signing time: Tue 14 May 2024 04:47:25 +0000
ROA not before: Tue 14 May 2024 04:47:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31257
IP address blocks: 80.65.16.0/20 maxlen: 24
94.73.192.0/18 maxlen: 24
109.226.192.0/19 maxlen: 24
109.226.224.0/20 maxlen: 24
109.226.240.0/22 maxlen: 24
109.226.244.0/22 maxlen: 24
109.226.249.0/24 maxlen: 24
109.226.250.0/23 maxlen: 24
109.226.252.0/22 maxlen: 24
171.33.248.0/21 maxlen: 24
2a05:7400::/34 maxlen: 34
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/58af24-c454-44b0-a7ca-c6f1e6ac9ba9/1/rn90ffXyQ1MVTcTUv3DS3ctT6QA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/58af24-c454-44b0-a7ca-c6f1e6ac9ba9/1/rn90ffXyQ1MVTcTUv3DS3ctT6QA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rn90ffXyQ1MVTcTUv3DS3ctT6QA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 22:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:75:6d:42:93:72:c9:c1:2b:7e:e2:d8:0a:97:86:00:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae7f747df5f24353154dc4d4bf70d2ddcb53e900
Validity
Not Before: May 14 04:47:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=180ea16e6d9920cedbe9ba3cadf4a98db0d16aa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:65:89:f3:22:0a:4a:1e:9b:1d:64:d6:13:7e:
72:b5:0e:ff:e8:a9:c6:ac:82:65:09:0a:9e:44:3f:
20:a1:0b:c5:c2:f5:ba:79:68:fd:53:f0:5e:b0:85:
c2:00:f8:1f:f9:bc:4d:aa:40:0e:d4:dc:a6:ae:d3:
99:3a:8f:36:46:ec:bb:ce:a5:53:e6:ff:c5:11:ad:
fa:f1:d2:94:c6:28:94:45:b6:9b:31:6f:5b:dd:b4:
25:7b:e0:80:15:61:c1:0b:76:02:58:38:c1:97:2b:
22:98:03:b4:b6:99:75:69:08:69:c5:74:1c:46:af:
a4:58:d1:cb:9d:0c:c3:f6:46:5f:6b:da:97:d8:8b:
6c:50:4e:ce:8b:96:45:d1:c3:b9:5d:b0:2e:0c:ea:
77:fb:14:b5:d0:9d:73:8a:15:23:57:3a:21:e0:86:
95:a9:82:1d:ff:1c:d3:cf:16:36:a6:ca:e3:f9:87:
32:52:08:c8:d4:da:fc:96:91:30:b7:9d:fa:51:9c:
e4:0d:1e:de:04:3a:1b:86:37:3a:44:72:7e:dc:f4:
9f:82:af:55:06:00:d2:bd:76:eb:0c:83:80:a2:9d:
b4:e0:b3:e4:e8:ac:f3:e7:dd:46:f4:41:2b:85:03:
a8:9a:08:50:59:37:2c:36:90:34:31:a9:9a:22:05:
24:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:0E:A1:6E:6D:99:20:CE:DB:E9:BA:3C:AD:F4:A9:8D:B0:D1:6A:A8
X509v3 Authority Key Identifier:
keyid:AE:7F:74:7D:F5:F2:43:53:15:4D:C4:D4:BF:70:D2:DD:CB:53:E9:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rn90ffXyQ1MVTcTUv3DS3ctT6QA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/58af24-c454-44b0-a7ca-c6f1e6ac9ba9/1/GA6hbm2ZIM7b6bo8rfSpjbDRaqg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/58af24-c454-44b0-a7ca-c6f1e6ac9ba9/1/rn90ffXyQ1MVTcTUv3DS3ctT6QA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.65.16.0/20
94.73.192.0/18
109.226.192.0-109.226.247.255
109.226.249.0-109.226.255.255
171.33.248.0/21
IPv6:
2a05:7400::/34
Signature Algorithm: sha256WithRSAEncryption
a6:3c:a6:4e:6c:f8:86:27:38:42:b8:a0:84:95:d7:bf:51:9b:
b1:5e:29:d6:2d:ef:aa:09:5e:e8:54:06:97:e2:4e:a2:4a:e7:
3b:52:1c:69:70:e9:1e:67:c1:da:a5:d4:82:8d:0b:f8:06:9a:
41:3d:f3:b4:ab:d2:54:f7:3a:3d:fa:7e:e0:49:88:94:0a:ae:
e9:fd:d9:19:c4:2c:ff:45:71:6d:5d:f3:8e:25:18:4d:ab:ff:
b4:ea:9b:22:a2:33:eb:da:fc:47:c6:46:70:cf:91:c6:8e:86:
9e:6c:70:e6:0f:2b:48:47:63:74:f7:a8:fc:bc:89:33:2c:54:
f9:e7:e8:a3:aa:09:76:10:ea:d7:0c:36:b1:20:a0:70:c2:8c:
a1:f4:ec:c8:bc:09:8d:22:0f:27:2f:e7:94:7e:45:db:5f:69:
09:52:4f:8b:d4:2c:76:46:1c:dc:e6:4e:eb:3b:33:9a:99:57:
53:36:fc:50:9d:10:e6:6a:19:fb:37:59:56:f9:1d:49:d0:71:
c4:4d:62:ff:b5:b9:a0:a8:4f:ab:70:56:27:23:87:d5:98:e4:
d1:64:a2:e1:e3:b8:e9:25:af:e9:37:b6:57:b3:70:c1:cc:e3:
c6:e7:78:3d:5e:bf:28:a2:56:75:0d:5d:d0:4e:7f:a8:c9:2d:
47:3c:94:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 05:53:33 2024 by rpki-client on console-fra.rpki-client.org