Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/124dd5-cab0-46ec-be67-42040df3b6af/1/ixho2Sm4nbd0nj70c0qsODTp3Ks.roa
File: ixho2Sm4nbd0nj70c0qsODTp3Ks.roa (raw, json)
Hash identifier: XqTZh1gU2tVi0duiTREybSpMW84A2450xA4twjck6Lk=
Subject key identifier: 8B:18:68:D9:29:B8:9D:B7:74:9E:3E:F4:73:4A:AC:38:34:E9:DC:AB
Certificate issuer: /CN=9532b4f2b47bbe1934a224081cc37f170d7248d2
Certificate serial: 018CC425493AA483D30F737A591BC2DC2DCA
Authority key identifier: 95:32:B4:F2:B4:7B:BE:19:34:A2:24:08:1C:C3:7F:17:0D:72:48:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lTK08rR7vhk0oiQIHMN_Fw1ySNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/124dd5-cab0-46ec-be67-42040df3b6af/1/ixho2Sm4nbd0nj70c0qsODTp3Ks.roa
Signing time: Mon 01 Jan 2024 08:30:27 +0000
ROA not before: Mon 01 Jan 2024 08:30:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12355
IP address blocks: 212.37.32.0/19 maxlen: 32
185.166.176.0/22 maxlen: 32
188.136.0.0/17 maxlen: 32
83.216.224.0/19 maxlen: 32
88.208.128.0/18 maxlen: 32
2001:14f7::/32 maxlen: 128
2001:14f0::/29 maxlen: 128
2001:14f6::/32 maxlen: 128
2001:14f0::/32 maxlen: 128
2001:14f3::/32 maxlen: 128
2001:14f7::/44 maxlen: 128
2001:14f2::/32 maxlen: 128
2001:14f1::/32 maxlen: 128
2001:14f5::/32 maxlen: 128
2001:14f4::/32 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/124dd5-cab0-46ec-be67-42040df3b6af/1/lTK08rR7vhk0oiQIHMN_Fw1ySNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/124dd5-cab0-46ec-be67-42040df3b6af/1/lTK08rR7vhk0oiQIHMN_Fw1ySNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lTK08rR7vhk0oiQIHMN_Fw1ySNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:49:3a:a4:83:d3:0f:73:7a:59:1b:c2:dc:2d:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9532b4f2b47bbe1934a224081cc37f170d7248d2
Validity
Not Before: Jan 1 08:30:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8b1868d929b89db7749e3ef4734aac3834e9dcab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:4d:56:33:00:cd:47:81:4f:f4:6b:c3:fb:32:
bd:b9:75:18:a1:d9:88:bb:ef:b0:fb:a3:50:da:bd:
4a:0f:e9:78:64:2f:85:d5:b6:01:fc:5b:27:67:80:
88:56:ad:cf:ab:45:72:9c:ac:a2:b6:0d:4c:0c:bb:
6c:e6:81:a7:fb:23:8f:01:62:91:d5:11:5a:80:17:
0c:40:e2:99:75:f8:f5:cf:63:c4:5d:db:3a:45:7a:
e3:b6:be:83:75:27:06:19:de:e3:0d:f9:25:ab:ef:
b7:0c:2e:e2:86:83:8c:70:51:9f:f9:bf:23:f0:27:
e0:6d:aa:98:7a:8f:85:96:51:7b:fd:08:60:3b:fb:
90:dc:12:e6:db:a9:87:cd:b5:dd:d0:36:ea:3c:f0:
3f:56:6f:db:b1:00:6a:74:60:bd:b3:25:29:7e:43:
d3:cb:2e:43:ba:bb:7b:3c:21:f8:4e:66:5a:8f:a9:
d2:37:5c:28:18:03:d3:37:60:0c:7f:1c:b1:64:87:
87:bc:00:57:f8:8a:79:7c:c6:26:f8:37:e9:d4:73:
00:85:4c:61:cd:2b:24:2e:7b:f2:d7:af:22:6c:a3:
ad:a6:91:b5:0d:cc:8a:5a:29:20:cc:4f:f8:ac:ac:
bb:29:1b:af:b2:f6:b7:40:15:28:c0:75:5a:23:ca:
43:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:18:68:D9:29:B8:9D:B7:74:9E:3E:F4:73:4A:AC:38:34:E9:DC:AB
X509v3 Authority Key Identifier:
keyid:95:32:B4:F2:B4:7B:BE:19:34:A2:24:08:1C:C3:7F:17:0D:72:48:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lTK08rR7vhk0oiQIHMN_Fw1ySNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/124dd5-cab0-46ec-be67-42040df3b6af/1/ixho2Sm4nbd0nj70c0qsODTp3Ks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/124dd5-cab0-46ec-be67-42040df3b6af/1/lTK08rR7vhk0oiQIHMN_Fw1ySNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.216.224.0/19
88.208.128.0/18
185.166.176.0/22
188.136.0.0/17
212.37.32.0/19
IPv6:
2001:14f0::/29
Signature Algorithm: sha256WithRSAEncryption
94:76:3a:be:b6:60:0c:6b:a6:fb:26:d7:61:bd:62:76:f3:a3:
54:64:b7:a6:52:9d:46:bc:66:e8:4f:f6:d8:c3:95:37:62:e4:
0e:21:bb:02:2d:35:ba:50:a8:4b:f4:09:17:ca:21:1f:01:7b:
f5:08:7c:5b:aa:54:dd:6e:a1:59:3e:b0:46:9b:64:49:88:73:
f1:a7:bc:f5:f6:43:f0:b0:73:82:4b:90:c9:c5:27:38:69:3a:
b4:a3:c2:a9:ab:76:fb:b2:61:0a:5d:ac:85:57:f7:41:c0:bc:
33:57:92:91:72:8a:21:f8:b1:7d:8d:59:7d:e5:2c:3f:c6:2b:
21:34:06:1d:72:7d:5a:5e:c3:19:3c:33:48:c7:30:62:ce:d9:
0f:5e:b3:2f:4a:7b:39:c5:9e:ec:56:15:9e:00:7d:86:2c:83:
b6:fd:8f:cd:8a:14:d0:1a:87:f5:1f:75:1b:ab:af:ea:d2:77:
5b:8d:51:1d:5f:6b:57:f9:7e:90:a4:d9:e1:a8:2e:b1:23:e2:
28:85:af:d8:6e:1b:63:0d:88:11:e2:e2:f1:a9:32:c2:85:10:
ec:47:b8:78:b2:7b:5b:45:1a:00:8c:de:90:ec:7e:17:c9:4e:
95:e1:ce:80:e0:24:a7:87:cc:1e:c4:d9:b5:0e:0a:6a:d5:25:
79:aa:68:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 03:48:47 2024 by rpki-client on console-fra.rpki-client.org