Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/632463-c2dc-4cb8-bc4f-2df99d8123b7/1/M0DeC3lpV5Zoafs-hEu6iMpAxnI.roa
File: M0DeC3lpV5Zoafs-hEu6iMpAxnI.roa (raw, json)
Hash identifier: vQqJU/CHmmNnWl37QE2PEPWjW9bOg4oZ0iJ9kDT7rpU=
Subject key identifier: 33:40:DE:0B:79:69:57:96:68:69:FB:3E:84:4B:BA:88:CA:40:C6:72
Certificate issuer: /CN=e95cc178cdf5ad9279939e5768ae8883ffbf35eb
Certificate serial: 018F4D9C4035CB5B8EC79F3330602CCCE6D1
Authority key identifier: E9:5C:C1:78:CD:F5:AD:92:79:93:9E:57:68:AE:88:83:FF:BF:35:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6VzBeM31rZJ5k55XaK6Ig_-_Nes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/632463-c2dc-4cb8-bc4f-2df99d8123b7/1/M0DeC3lpV5Zoafs-hEu6iMpAxnI.roa
Signing time: Mon 06 May 2024 11:13:56 +0000
ROA not before: Mon 06 May 2024 11:13:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34557
IP address blocks: 85.9.128.0/18 maxlen: 18
85.9.128.0/24 maxlen: 24
85.9.129.0/24 maxlen: 24
85.9.130.0/24 maxlen: 24
85.9.131.0/24 maxlen: 24
85.9.132.0/24 maxlen: 24
85.9.133.0/24 maxlen: 24
85.9.137.0/24 maxlen: 24
85.9.141.0/24 maxlen: 24
85.9.142.0/24 maxlen: 24
85.9.144.0/24 maxlen: 24
85.9.145.0/24 maxlen: 24
85.9.147.0/24 maxlen: 24
85.9.148.0/24 maxlen: 24
85.9.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/632463-c2dc-4cb8-bc4f-2df99d8123b7/1/6VzBeM31rZJ5k55XaK6Ig_-_Nes.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/632463-c2dc-4cb8-bc4f-2df99d8123b7/1/6VzBeM31rZJ5k55XaK6Ig_-_Nes.mft
rsync://rpki.ripe.net/repository/DEFAULT/6VzBeM31rZJ5k55XaK6Ig_-_Nes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Sep 2024 20:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:4d:9c:40:35:cb:5b:8e:c7:9f:33:30:60:2c:cc:e6:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e95cc178cdf5ad9279939e5768ae8883ffbf35eb
Validity
Not Before: May 6 11:13:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3340de0b796957966869fb3e844bba88ca40c672
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b4:5b:c4:0a:4b:d1:90:e8:a5:67:cc:d8:57:
56:2d:05:96:60:96:89:53:d3:64:20:88:63:d7:7e:
af:dc:5a:21:0b:42:87:aa:9c:37:5e:47:1c:7d:a7:
9f:9d:9b:82:be:c8:a9:94:be:f2:6b:2c:b2:29:fd:
33:65:69:cb:d6:d0:2e:eb:27:51:a3:2b:47:d8:8e:
65:0e:6f:af:81:b8:ee:33:23:45:73:7e:c0:70:cf:
f0:b5:64:0a:eb:df:ff:46:14:0c:82:67:ea:a7:01:
25:4f:1c:ad:c0:7a:d0:a3:67:9e:96:27:23:71:b6:
66:8d:43:c4:c4:b2:be:e6:f5:08:a0:83:70:37:06:
c2:a9:fd:88:3e:b9:c7:33:4a:e1:32:a6:43:d4:11:
80:b6:36:98:33:84:51:16:f6:d0:4f:61:c2:7c:84:
c3:ef:66:75:02:4b:71:d4:36:00:bf:dd:ac:79:7d:
fd:98:46:e2:b8:55:ad:cf:5d:b7:d0:ba:42:39:24:
ec:c1:07:c5:1b:9f:f4:ee:0c:20:58:d7:db:dd:05:
e6:e1:f8:af:61:2d:b6:dd:90:5a:96:31:16:5f:b5:
5f:86:42:f9:3f:19:d8:49:91:a1:9a:10:19:6d:e6:
20:4d:62:1c:bb:6c:f2:41:65:ac:fe:5f:3c:bc:aa:
b5:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:40:DE:0B:79:69:57:96:68:69:FB:3E:84:4B:BA:88:CA:40:C6:72
X509v3 Authority Key Identifier:
keyid:E9:5C:C1:78:CD:F5:AD:92:79:93:9E:57:68:AE:88:83:FF:BF:35:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6VzBeM31rZJ5k55XaK6Ig_-_Nes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/632463-c2dc-4cb8-bc4f-2df99d8123b7/1/M0DeC3lpV5Zoafs-hEu6iMpAxnI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/632463-c2dc-4cb8-bc4f-2df99d8123b7/1/6VzBeM31rZJ5k55XaK6Ig_-_Nes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.9.128.0/18
Signature Algorithm: sha256WithRSAEncryption
80:6b:8c:3d:6b:77:db:a0:f6:67:26:6d:85:0e:5f:bd:bb:70:
48:fc:2a:7b:ac:55:d0:ad:5f:14:ee:8c:21:7d:9c:a1:f7:6e:
7a:cb:01:94:cc:79:e5:ba:5e:86:2b:75:16:aa:47:b2:49:9f:
36:1a:f0:47:1f:3a:a1:e7:db:aa:cc:76:8b:7d:ac:03:27:ea:
cb:62:a6:96:e2:6f:f1:78:4f:8e:c9:08:72:6b:a9:c6:2b:1e:
4e:b9:8d:da:a1:f7:76:6e:a3:1c:fd:b4:32:64:b3:91:cd:eb:
2e:10:fd:4a:fc:12:81:bf:35:60:0a:5b:e2:90:c5:9b:bc:d8:
04:35:fd:bc:f7:d0:84:39:6a:fc:6a:5f:83:3d:33:cf:d3:29:
87:b2:27:b8:79:cc:1a:b4:07:10:df:a7:bd:44:65:03:bf:7f:
d6:11:f1:c0:90:5a:ec:22:84:dd:fc:73:1d:80:e7:54:9a:e1:
3d:74:b2:2f:27:6a:c7:fc:9f:55:68:fc:04:04:ca:b8:18:f2:
2b:46:8f:c8:2c:94:84:a8:5f:50:77:2d:aa:b0:1c:c5:b1:3c:
24:4a:0f:e2:98:72:f1:04:1c:5c:2b:26:57:16:72:3a:84:db:
cf:d4:eb:9e:fe:41:03:db:a9:1a:82:59:88:bf:fc:b9:3c:25:
ac:7b:5b:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 23:54:01 2024 by rpki-client on console-fra.rpki-client.org