Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/77ac86-31f6-4370-b433-b0e7d41b5d36/1/Znyv73noEelMozAQuugw2VVlc7M.roa
File: Znyv73noEelMozAQuugw2VVlc7M.roa (raw, json)
Hash identifier: AtXuUnIUP3yZXZGpaIIpLY4gyZY7pqDo13SMQOVSCEk=
Subject key identifier: 66:7C:AF:EF:79:E8:11:E9:4C:A3:30:10:BA:E8:30:D9:55:65:73:B3
Certificate issuer: /CN=7e0423211f49b1335e94b8bdbbb1168664f6804f
Certificate serial: 018CC64B00322DFA3DE21673FAB068E66F94
Authority key identifier: 7E:04:23:21:1F:49:B1:33:5E:94:B8:BD:BB:B1:16:86:64:F6:80:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fgQjIR9JsTNelLi9u7EWhmT2gE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/77ac86-31f6-4370-b433-b0e7d41b5d36/1/Znyv73noEelMozAQuugw2VVlc7M.roa
Signing time: Mon 01 Jan 2024 18:30:53 +0000
ROA not before: Mon 01 Jan 2024 18:30:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204213
IP address blocks: 89.39.208.0/24 maxlen: 24
217.144.105.0/24 maxlen: 24
217.144.104.0/24 maxlen: 24
185.94.96.0/24 maxlen: 24
185.94.98.0/24 maxlen: 24
185.94.97.0/24 maxlen: 24
185.94.99.0/24 maxlen: 24
89.32.251.0/24 maxlen: 24
89.32.249.0/24 maxlen: 24
89.32.248.0/24 maxlen: 24
89.32.250.0/24 maxlen: 24
89.42.209.0/24 maxlen: 24
89.42.211.0/24 maxlen: 24
89.42.210.0/24 maxlen: 24
89.45.89.0/24 maxlen: 24
188.212.22.0/24 maxlen: 24
89.42.208.0/24 maxlen: 24
217.144.106.0/24 maxlen: 24
217.144.107.0/24 maxlen: 24
86.106.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/77ac86-31f6-4370-b433-b0e7d41b5d36/1/fgQjIR9JsTNelLi9u7EWhmT2gE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/77ac86-31f6-4370-b433-b0e7d41b5d36/1/fgQjIR9JsTNelLi9u7EWhmT2gE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/fgQjIR9JsTNelLi9u7EWhmT2gE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:00:32:2d:fa:3d:e2:16:73:fa:b0:68:e6:6f:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e0423211f49b1335e94b8bdbbb1168664f6804f
Validity
Not Before: Jan 1 18:30:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=667cafef79e811e94ca33010bae830d9556573b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:95:0b:f6:3e:8a:40:1e:cb:8a:fb:e1:35:23:
7a:42:73:92:71:56:dd:c6:58:99:55:ef:4f:60:73:
99:8b:83:14:91:0b:7b:af:26:81:df:80:ec:45:f3:
33:6d:d6:63:a5:4c:3f:f2:c0:3d:04:3d:53:42:b8:
e6:d6:0c:4f:49:8e:d8:9a:be:49:4f:16:ba:f4:12:
a9:95:0c:10:33:4a:8a:81:52:c4:ae:ce:3e:0d:5e:
82:7a:9d:b3:32:86:dc:db:2f:17:dd:af:79:10:16:
cd:f3:6f:4d:98:53:8e:f7:4e:1f:97:cf:14:f4:b6:
ad:9d:3d:94:f9:e2:1c:64:a3:6b:58:50:e3:a1:99:
9c:0c:25:d9:86:92:b0:42:ee:3c:c2:78:4f:9b:1d:
d0:6b:26:17:66:ae:29:64:e1:19:5b:1d:1c:d6:3c:
68:49:bc:b8:fd:31:1b:59:ff:ee:09:6c:77:5f:ac:
ba:6f:ae:23:20:41:44:00:04:44:b5:cf:f4:a1:0e:
fe:60:b0:c1:50:9a:7b:0f:92:38:04:f2:f3:62:93:
ea:0b:b7:f6:2f:87:10:f6:e7:0f:f5:32:29:eb:63:
4f:c7:35:f6:c2:b1:af:38:fa:e7:6c:48:6a:bc:cf:
c2:70:7e:d1:68:12:da:8e:cc:f2:6e:b1:3c:67:85:
b6:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:7C:AF:EF:79:E8:11:E9:4C:A3:30:10:BA:E8:30:D9:55:65:73:B3
X509v3 Authority Key Identifier:
keyid:7E:04:23:21:1F:49:B1:33:5E:94:B8:BD:BB:B1:16:86:64:F6:80:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fgQjIR9JsTNelLi9u7EWhmT2gE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/77ac86-31f6-4370-b433-b0e7d41b5d36/1/Znyv73noEelMozAQuugw2VVlc7M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/77ac86-31f6-4370-b433-b0e7d41b5d36/1/fgQjIR9JsTNelLi9u7EWhmT2gE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.106.142.0/24
89.32.248.0/22
89.39.208.0/24
89.42.208.0/22
89.45.89.0/24
185.94.96.0/22
188.212.22.0/24
217.144.104.0/22
Signature Algorithm: sha256WithRSAEncryption
82:ec:f8:4d:8e:07:a7:d3:49:15:40:c8:60:78:ed:63:39:8f:
44:b7:b6:8c:1f:6a:b3:ff:cf:10:38:1e:5e:72:58:30:d8:f4:
ad:1c:d3:b1:14:4f:bb:97:25:57:c4:75:9c:5f:40:0d:8c:9c:
83:79:db:78:4f:46:f2:69:93:3e:5a:09:33:95:af:27:2e:fe:
cb:06:a5:ed:5d:5f:89:69:d7:82:ef:24:ec:46:84:cb:74:e7:
28:cc:2c:41:57:4c:36:f3:ed:a9:b8:c7:81:aa:29:74:91:47:
2e:bf:49:27:eb:9e:62:d0:d6:12:e5:1e:a9:f6:d3:f8:b6:93:
9f:10:42:b8:fa:94:0f:44:f6:be:87:63:97:57:07:6f:a8:6e:
76:f2:76:ff:fe:fc:78:4b:9d:59:9c:76:c3:64:27:42:b4:12:
07:ff:46:cd:6b:1e:81:79:13:63:76:f8:db:c3:5d:2e:66:7c:
ad:24:6d:26:af:53:e1:4f:8f:93:9c:c1:56:64:41:c4:7b:3d:
62:d4:76:46:fa:b5:12:0c:a1:30:4b:57:c6:12:d0:03:9d:a9:
b7:71:06:5a:f0:81:38:90:e3:79:7f:4f:03:c0:13:48:7c:ba:
e0:1e:0e:5a:7a:0e:a4:5b:05:11:8a:92:05:b4:d9:eb:3a:03:
29:2d:7f:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 18:33:00 2024 by rpki-client on console-ams.rpki-client.org