Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/ZNv71iUsk0Bm3WtxTdreFeiUfx0.roa
File: ZNv71iUsk0Bm3WtxTdreFeiUfx0.roa (raw, json)
Hash identifier: 9D8R3hZ40ZYmF2phuv0ZuL6BcX7UBesONoB2I4u3n90=
Subject key identifier: 64:DB:FB:D6:25:2C:93:40:66:DD:6B:71:4D:DA:DE:15:E8:94:7F:1D
Certificate issuer: /CN=f0521128cf634aa6afa7ef52d531f3fcd55628f9
Certificate serial: 018CCA2B6564D017D4A428BA86143C116F43
Authority key identifier: F0:52:11:28:CF:63:4A:A6:AF:A7:EF:52:D5:31:F3:FC:D5:56:28:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8FIRKM9jSqavp-9S1THz_NVWKPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/ZNv71iUsk0Bm3WtxTdreFeiUfx0.roa
Signing time: Tue 02 Jan 2024 12:34:50 +0000
ROA not before: Tue 02 Jan 2024 12:34:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48095
IP address blocks: 194.38.28.0/23 maxlen: 23
194.38.30.0/23 maxlen: 23
171.22.36.0/23 maxlen: 23
171.22.38.0/23 maxlen: 23
193.168.182.0/23 maxlen: 23
193.168.180.0/23 maxlen: 23
45.67.178.0/23 maxlen: 23
45.67.176.0/23 maxlen: 23
5.253.162.0/23 maxlen: 23
5.253.160.0/23 maxlen: 23
83.150.239.0/24 maxlen: 24
83.150.238.0/24 maxlen: 24
141.98.92.0/23 maxlen: 23
85.209.136.0/23 maxlen: 23
141.98.94.0/23 maxlen: 23
85.209.138.0/23 maxlen: 23
2.56.44.0/23 maxlen: 23
152.89.8.0/23 maxlen: 23
188.119.88.0/23 maxlen: 23
152.89.10.0/23 maxlen: 23
188.119.90.0/23 maxlen: 23
2.56.46.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/8FIRKM9jSqavp-9S1THz_NVWKPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:65:64:d0:17:d4:a4:28:ba:86:14:3c:11:6f:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0521128cf634aa6afa7ef52d531f3fcd55628f9
Validity
Not Before: Jan 2 12:34:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=64dbfbd6252c934066dd6b714ddade15e8947f1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:09:60:54:6f:5a:69:ed:00:a7:53:33:c3:f3:
a6:87:8f:04:b5:b4:e1:81:d6:ce:18:32:44:bb:af:
fb:5c:a9:a3:13:76:df:97:3a:ef:b0:8b:1f:57:94:
5a:cc:91:78:6b:93:39:69:b6:3e:73:36:5c:99:a9:
d2:b2:b2:6a:eb:f2:d1:c8:2f:e5:b2:87:a1:9d:d7:
52:36:83:d2:1e:73:df:f6:c1:f9:1a:0d:3e:37:ad:
e9:26:a6:18:fb:c3:96:f2:d5:10:85:29:86:e8:4d:
bb:58:11:02:6f:bd:20:12:4f:9a:08:17:3c:7c:15:
e3:ae:4f:43:6e:55:2a:8c:9c:0b:8b:5f:44:4d:75:
7b:12:c1:19:8f:56:5e:c4:6e:3d:84:c1:24:a2:6f:
2e:c9:40:ac:94:28:27:11:85:3e:46:13:71:e1:f2:
f6:ad:53:6e:47:96:da:ff:db:d8:af:98:ee:70:2a:
19:95:ab:e1:8c:67:88:c9:cc:45:21:eb:98:f9:8c:
3a:24:c3:3a:db:4f:3a:ae:6a:d4:d1:92:a2:61:d8:
5a:87:8f:74:51:ad:aa:15:c6:0e:f1:d7:31:7c:3b:
dc:b0:f5:9f:39:37:5f:a6:5e:7d:05:19:aa:22:29:
b5:95:88:53:15:b9:a9:43:5e:5a:6f:99:3f:6c:28:
91:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:DB:FB:D6:25:2C:93:40:66:DD:6B:71:4D:DA:DE:15:E8:94:7F:1D
X509v3 Authority Key Identifier:
keyid:F0:52:11:28:CF:63:4A:A6:AF:A7:EF:52:D5:31:F3:FC:D5:56:28:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8FIRKM9jSqavp-9S1THz_NVWKPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/ZNv71iUsk0Bm3WtxTdreFeiUfx0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.44.0/22
5.253.160.0/22
45.67.176.0/22
83.150.238.0/23
85.209.136.0/22
141.98.92.0/22
152.89.8.0/22
171.22.36.0/22
188.119.88.0/22
193.168.180.0/22
194.38.28.0/22
Signature Algorithm: sha256WithRSAEncryption
85:7d:0c:28:74:94:aa:55:78:db:d6:e7:1d:12:74:71:9a:e4:
2e:1f:d3:36:fd:2d:a0:ba:93:22:f8:6e:53:16:f8:b0:20:cf:
50:6a:8c:9c:19:af:b8:6a:da:cd:2c:ff:9f:59:28:ce:43:d8:
73:f9:8f:98:b7:ef:0e:c2:bf:87:ba:88:ea:15:73:2f:9b:78:
c8:79:ba:27:04:7d:da:c2:0f:3d:25:df:83:ad:af:0e:ec:28:
01:29:7c:5b:ef:e1:98:65:d1:8d:f8:79:76:df:4f:ad:00:c8:
a1:5e:05:5e:f2:f0:54:ef:ed:36:e9:57:a2:1b:40:44:76:18:
28:a7:c5:e0:b7:8a:f0:a4:6e:9f:1e:62:08:93:58:f6:40:92:
86:29:97:c3:f6:0e:a7:99:5d:3f:f5:ce:56:dd:89:0b:af:1d:
da:d1:4e:77:a0:1a:fd:57:85:75:4f:05:a1:0d:38:61:f9:bc:
5c:20:e6:97:43:b7:07:40:d9:9e:2b:c6:d6:83:e9:cb:57:21:
b9:c8:04:a8:f7:fa:59:49:79:5b:e6:2f:a5:59:52:c6:53:f0:
b4:4e:da:43:5d:00:b2:8e:f1:36:28:c0:b4:dc:1a:dc:4a:a1:
aa:5b:c7:52:37:a9:34:1b:80:c9:d2:79:6b:25:44:4d:e8:43:
08:30:8d:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:23:28 2024 by rpki-client on console-fra.rpki-client.org