Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/XPgfv-ujqrEeZt8LZn_h273T0gY.roa
File: XPgfv-ujqrEeZt8LZn_h273T0gY.roa (raw, json)
Hash identifier: ZIy4Lm/Kp5Eph83IAUCFvoDtZu1Tp/nPXqU2NKz2wyc=
Subject key identifier: 5C:F8:1F:BF:EB:A3:AA:B1:1E:66:DF:0B:66:7F:E1:DB:BD:D3:D2:06
Certificate issuer: /CN=7df132df13e4be53d8250c8c48420264eef6c14c
Certificate serial: 0190EECE61D60845C5B9424652375505960F
Authority key identifier: 7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/XPgfv-ujqrEeZt8LZn_h273T0gY.roa
Signing time: Fri 26 Jul 2024 11:30:21 +0000
ROA not before: Fri 26 Jul 2024 11:30:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214530
IP address blocks: 31.14.100.0/23 maxlen: 23
86.105.170.0/24 maxlen: 24
86.106.156.0/24 maxlen: 24
89.33.45.0/24 maxlen: 24
89.33.238.0/23 maxlen: 23
89.35.117.0/24 maxlen: 24
89.36.148.0/23 maxlen: 23
89.36.196.0/24 maxlen: 24
89.37.159.0/24 maxlen: 24
89.38.138.0/23 maxlen: 23
89.40.136.0/23 maxlen: 23
188.241.104.0/24 maxlen: 24
188.241.105.0/24 maxlen: 24
188.241.184.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:ee:ce:61:d6:08:45:c5:b9:42:46:52:37:55:05:96:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df132df13e4be53d8250c8c48420264eef6c14c
Validity
Not Before: Jul 26 11:30:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5cf81fbfeba3aab11e66df0b667fe1dbbdd3d206
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:34:b1:3c:c9:18:41:04:dc:7d:c8:ee:63:0e:
28:d1:15:4e:76:a9:8b:e7:80:02:66:aa:bc:2e:38:
90:49:37:f4:5c:f1:7c:10:f9:fe:17:55:e4:b7:74:
ae:a0:62:62:f7:f8:6e:61:cc:62:a0:c3:17:a7:19:
40:ea:70:c8:54:7f:16:46:8e:ff:22:a4:82:25:17:
d2:4f:9f:1a:c2:91:be:da:26:93:84:38:c7:71:ab:
ab:39:b8:77:93:00:2c:f6:ad:02:7b:a0:ea:12:a5:
e4:ee:7f:79:4b:9a:04:e5:66:0f:aa:70:7e:93:1e:
0e:bd:84:d4:dc:21:a2:a8:19:98:f2:36:08:6c:f1:
9c:89:06:7e:2c:35:33:15:bd:a4:5f:b6:b4:69:c8:
90:88:0d:4a:12:79:f9:4a:22:46:01:1c:5d:5d:c7:
a0:68:b1:f2:85:fd:5c:69:e9:10:bc:93:18:81:07:
ea:a9:ca:18:7f:30:aa:8a:32:21:65:4b:7e:12:6a:
16:e9:ba:d5:88:63:c5:d8:34:f7:45:0e:f5:b2:b4:
66:fc:27:f7:f7:6e:9c:1d:38:20:ec:e6:96:b4:3f:
8b:9a:17:03:2d:f5:93:5a:e9:ba:89:8d:a9:b2:de:
13:9b:7d:74:38:32:0b:fb:94:57:75:b9:68:cc:95:
bb:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:F8:1F:BF:EB:A3:AA:B1:1E:66:DF:0B:66:7F:E1:DB:BD:D3:D2:06
X509v3 Authority Key Identifier:
keyid:7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/XPgfv-ujqrEeZt8LZn_h273T0gY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.100.0/23
86.105.170.0/24
86.106.156.0/24
89.33.45.0/24
89.33.238.0/23
89.35.117.0/24
89.36.148.0/23
89.36.196.0/24
89.37.159.0/24
89.38.138.0/23
89.40.136.0/23
188.241.104.0/23
188.241.184.0/23
Signature Algorithm: sha256WithRSAEncryption
a6:d7:17:98:54:69:29:b9:b2:8c:79:0a:82:f1:a8:06:43:1b:
5b:58:b0:29:0f:34:80:7d:8f:59:b4:52:1b:f3:3c:33:3c:a4:
8c:f4:85:d8:9e:11:bd:9c:2b:b1:4e:83:80:52:1c:ef:8f:f8:
3d:06:7f:95:e1:31:50:aa:a9:2b:07:b8:fb:12:18:6e:0c:c7:
59:8b:eb:0b:71:88:a8:37:dd:5e:17:11:3c:c6:2a:af:3c:a7:
c4:0c:6e:14:f9:fb:f4:68:3a:ec:aa:ec:23:a3:49:90:79:48:
62:61:0a:d6:c9:de:9d:8c:69:21:da:e2:5a:3c:8b:2e:b3:2a:
72:20:c5:86:b4:a2:71:a7:57:e0:c1:04:12:ee:d4:05:52:0b:
15:6f:5f:d1:0e:3a:be:fd:0d:eb:a2:1b:ee:2b:d7:fa:9c:1f:
ac:88:74:1f:a1:68:39:63:9a:2e:e8:c8:1c:56:57:93:de:2d:
37:f2:69:f4:65:7d:54:b5:cf:fe:46:0a:58:fd:74:6f:3a:66:
71:4f:74:4f:80:05:37:e2:34:35:22:0e:c0:98:79:0d:57:08:
97:cf:59:2f:38:ef:99:e0:04:0e:2f:d5:74:d2:7c:8a:62:7d:
66:ed:9b:a1:e9:b8:44:87:1d:ee:ce:a8:29:fb:0e:00:22:a3:
33:ee:ed:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:21:29 2024 by rpki-client on console-ams.rpki-client.org