Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/9XyqkNLr-mevA3UmIbH9TrO68xg.roa
File: 9XyqkNLr-mevA3UmIbH9TrO68xg.roa (raw, json)
Hash identifier: VGU54+8uXoyWHYz12f4S6IrUngFaTSMoSSIVdDdsuac=
Subject key identifier: F5:7C:AA:90:D2:EB:FA:67:AF:03:75:26:21:B1:FD:4E:B3:BA:F3:18
Certificate issuer: /CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Certificate serial: 01902590F232586E230460AF2D0BFF893BB9
Authority key identifier: 30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/9XyqkNLr-mevA3UmIbH9TrO68xg.roa
Signing time: Mon 17 Jun 2024 09:39:34 +0000
ROA not before: Mon 17 Jun 2024 09:39:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6813
IP address blocks: 80.58.201.0/24 maxlen: 24
80.58.252.0/24 maxlen: 24
81.45.26.0/23 maxlen: 23
81.45.156.0/22 maxlen: 22
194.179.98.0/23 maxlen: 23
194.224.158.0/24 maxlen: 24
195.55.74.0/24 maxlen: 24
195.235.59.0/24 maxlen: 24
195.235.232.0/24 maxlen: 24
195.235.234.0/23 maxlen: 23
212.170.30.0/23 maxlen: 23
212.170.34.0/23 maxlen: 23
212.170.227.0/24 maxlen: 24
212.170.228.0/23 maxlen: 23
212.170.232.0/24 maxlen: 24
213.4.28.0/24 maxlen: 24
213.4.82.0/23 maxlen: 23
213.4.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.mft
rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 29 Jun 2024 17:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:25:90:f2:32:58:6e:23:04:60:af:2d:0b:ff:89:3b:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Validity
Not Before: Jun 17 09:39:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f57caa90d2ebfa67af03752621b1fd4eb3baf318
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:0f:9b:03:22:82:35:c6:34:86:22:da:a5:1e:
e1:ee:c2:93:7a:44:8c:50:e1:27:39:b7:4f:43:da:
41:b8:13:b9:d4:71:58:6f:15:9d:ab:82:90:e3:a9:
83:65:76:16:12:44:91:b4:b9:55:21:0e:e6:7b:81:
f7:91:ab:10:75:4e:7e:c4:dd:9f:66:14:21:ae:c2:
3b:f5:98:37:f3:61:22:e7:42:49:7e:7a:4b:94:04:
97:d2:ff:d9:b1:b2:06:5e:ce:88:0e:d3:99:71:28:
5a:b2:1a:72:76:18:f8:1e:77:e5:22:40:e1:94:06:
6b:82:4e:33:c3:3c:69:9a:d9:51:68:e2:81:b2:1e:
6d:ec:f1:27:fd:9d:36:58:d9:c2:42:6e:5b:c2:35:
5d:e7:d6:1b:d7:88:92:ba:27:c5:c2:c5:e7:92:68:
4d:1d:8e:74:d0:4f:c8:70:21:f6:30:2b:7b:9e:4a:
7f:b8:74:c6:63:e4:57:0c:8b:45:69:5f:36:0a:60:
fc:55:0e:ff:be:d8:91:21:12:ac:a2:98:18:ba:0c:
c4:f2:24:df:84:02:0a:02:81:7c:c7:03:92:ef:92:
6b:5d:9e:93:3a:62:6f:73:b3:ef:4e:47:47:75:de:
65:30:69:3f:b4:f1:e1:b2:8e:9f:0e:a3:55:53:85:
2d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:7C:AA:90:D2:EB:FA:67:AF:03:75:26:21:B1:FD:4E:B3:BA:F3:18
X509v3 Authority Key Identifier:
keyid:30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/9XyqkNLr-mevA3UmIbH9TrO68xg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.58.201.0/24
80.58.252.0/24
81.45.26.0/23
81.45.156.0/22
194.179.98.0/23
194.224.158.0/24
195.55.74.0/24
195.235.59.0/24
195.235.232.0/24
195.235.234.0/23
212.170.30.0/23
212.170.34.0/23
212.170.227.0-212.170.229.255
212.170.232.0/24
213.4.28.0/24
213.4.82.0/23
213.4.98.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:66:2b:58:30:4f:cc:68:63:f6:6f:b6:39:f4:f3:9f:d3:cd:
70:33:95:1f:f6:b3:ab:ef:d5:8a:de:a7:f4:b1:f8:ba:dd:48:
f0:3f:6f:02:87:31:a1:95:dc:92:0d:71:32:af:9d:79:ae:bb:
d8:93:d7:39:21:a5:eb:4d:b6:8f:7a:ef:02:b1:3c:14:52:90:
e7:ea:dd:61:bb:86:0d:00:1c:66:c2:81:63:6d:34:b4:3b:2f:
a4:13:2f:99:4d:b8:b8:5f:df:7f:c8:71:80:c7:2a:b5:ea:c1:
87:2d:05:37:58:f3:6b:a8:45:86:16:9d:5a:d2:f2:3b:3f:f0:
07:a6:86:82:7d:94:cf:14:e1:f6:d7:f7:4b:ff:d5:9f:06:d2:
44:83:cf:05:c7:8f:df:cc:65:bb:13:ce:29:bc:5a:02:09:f8:
f4:00:6a:aa:f8:24:36:c4:17:62:d7:d4:6c:6d:11:69:8e:70:
96:ac:c8:70:9e:56:11:bf:a3:59:48:9e:ee:48:c3:5f:01:35:
91:f6:a4:84:75:7e:ba:dd:8e:af:d9:24:3a:f6:f4:a7:e6:5e:
e6:f6:c4:10:2d:7e:13:00:51:27:1d:f3:2c:a3:3b:ac:95:79:
65:68:58:36:21:7e:59:24:1c:ed:74:fc:45:94:26:4f:2e:ed:
78:e9:a3:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 01:48:53 2024 by rpki-client on console-ams.rpki-client.org