Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/b12e4d-8a1a-4010-9a8b-36f9847ac35b/1/hInz5xZbVmhcDniumxXDKxlXLDw.roa
File: hInz5xZbVmhcDniumxXDKxlXLDw.roa (raw, json)
Hash identifier: 6u4BgqjhoGHIOXCMsYUwiDC0SmyhGu8AW2r9dccxKY8=
Subject key identifier: 84:89:F3:E7:16:5B:56:68:5C:0E:78:AE:9B:15:C3:2B:19:57:2C:3C
Certificate issuer: /CN=884bf80e72f50f09bf563493ebdb11a34bba312d
Certificate serial: 018CC50030227DF48F8BB84CE14046CEFAD5
Authority key identifier: 88:4B:F8:0E:72:F5:0F:09:BF:56:34:93:EB:DB:11:A3:4B:BA:31:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iEv4DnL1Dwm_VjST69sRo0u6MS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/b12e4d-8a1a-4010-9a8b-36f9847ac35b/1/hInz5xZbVmhcDniumxXDKxlXLDw.roa
Signing time: Mon 01 Jan 2024 12:29:33 +0000
ROA not before: Mon 01 Jan 2024 12:29:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202486
IP address blocks: 194.76.221.0/24 maxlen: 24
194.76.220.0/23 maxlen: 24
194.76.220.0/24 maxlen: 24
194.76.237.0/24 maxlen: 24
194.76.236.0/24 maxlen: 24
194.76.236.0/23 maxlen: 24
5.183.183.0/24 maxlen: 24
5.183.182.0/24 maxlen: 24
193.161.212.0/24 maxlen: 24
193.161.213.0/24 maxlen: 24
5.183.180.0/24 maxlen: 24
5.183.181.0/24 maxlen: 24
193.161.214.0/24 maxlen: 24
193.161.215.0/24 maxlen: 24
92.118.93.0/24 maxlen: 24
193.25.188.0/24 maxlen: 24
92.118.92.0/24 maxlen: 24
92.118.95.0/24 maxlen: 24
193.25.189.0/24 maxlen: 24
92.118.94.0/24 maxlen: 24
193.25.210.0/24 maxlen: 24
193.25.211.0/24 maxlen: 24
2a0c:a0c1::/32 maxlen: 32
2a0c:a0c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/b12e4d-8a1a-4010-9a8b-36f9847ac35b/1/iEv4DnL1Dwm_VjST69sRo0u6MS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/b12e4d-8a1a-4010-9a8b-36f9847ac35b/1/iEv4DnL1Dwm_VjST69sRo0u6MS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/iEv4DnL1Dwm_VjST69sRo0u6MS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 09:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:30:22:7d:f4:8f:8b:b8:4c:e1:40:46:ce:fa:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=884bf80e72f50f09bf563493ebdb11a34bba312d
Validity
Not Before: Jan 1 12:29:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8489f3e7165b56685c0e78ae9b15c32b19572c3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:60:6e:e4:57:b4:1a:e0:e5:63:58:31:fa:cb:
8a:6f:f3:cb:8e:21:79:a8:95:e0:f9:2f:4f:4f:9b:
ca:b4:58:0c:d9:10:e1:8f:1c:8c:73:9c:54:c5:0b:
d1:5e:0e:70:86:cb:80:3b:cd:5a:65:7d:d0:4e:41:
38:51:4c:14:fb:42:24:81:4d:5b:2d:27:84:5c:81:
af:8a:45:d4:ad:49:22:04:8b:21:5a:6b:9c:48:26:
77:2a:e5:de:5e:d7:70:2d:28:cc:6b:0c:5f:3c:f0:
9f:84:b7:bb:c3:f7:db:0e:f0:6d:17:ff:de:fd:c6:
9b:33:a0:09:d9:d9:a2:dc:bf:4a:ae:45:7f:b6:79:
f3:15:06:60:31:de:df:70:13:f9:92:61:00:e0:55:
f8:85:fc:64:8a:3c:14:f2:f3:7d:35:1e:bb:c2:95:
a7:a3:a3:1c:b2:1c:2d:cc:f6:03:de:af:f2:b0:cc:
7c:70:30:25:13:ec:c5:a4:22:22:89:ac:58:a5:8f:
3d:68:83:6f:38:a5:ae:f2:ff:16:6e:bf:64:40:da:
cb:03:83:b9:13:0b:b1:a0:cf:5c:1b:50:e9:fb:04:
90:97:22:bb:d6:d8:df:c9:93:94:fb:ef:f9:9b:b2:
87:1c:82:25:17:a8:ea:84:11:b0:48:5b:63:82:88:
35:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:89:F3:E7:16:5B:56:68:5C:0E:78:AE:9B:15:C3:2B:19:57:2C:3C
X509v3 Authority Key Identifier:
keyid:88:4B:F8:0E:72:F5:0F:09:BF:56:34:93:EB:DB:11:A3:4B:BA:31:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iEv4DnL1Dwm_VjST69sRo0u6MS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b12e4d-8a1a-4010-9a8b-36f9847ac35b/1/hInz5xZbVmhcDniumxXDKxlXLDw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b12e4d-8a1a-4010-9a8b-36f9847ac35b/1/iEv4DnL1Dwm_VjST69sRo0u6MS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.183.180.0/22
92.118.92.0/22
193.25.188.0/23
193.25.210.0/23
193.161.212.0/22
194.76.220.0/23
194.76.236.0/23
IPv6:
2a0c:a0c0::/31
Signature Algorithm: sha256WithRSAEncryption
89:0a:f2:2f:2f:0e:8c:66:24:61:a0:f5:a6:fc:a1:9b:63:06:
75:4e:67:db:fb:cd:29:c3:17:7e:21:d3:6e:70:94:89:23:a9:
54:9b:0f:0c:9e:c4:c4:79:c5:37:6d:4f:ab:84:53:11:1f:05:
55:c0:06:ec:bc:76:7e:1c:8c:51:ab:1e:ac:41:41:fc:83:21:
19:29:8e:35:81:87:bd:5b:4b:b2:e5:34:9b:24:d4:73:4a:3a:
4a:67:12:d9:33:8c:4b:17:87:d8:39:aa:43:d7:ce:9a:fa:a1:
13:77:d3:f6:02:bc:9e:26:92:17:93:17:88:41:f1:83:bb:e3:
5b:0c:7b:61:e2:43:e5:2d:5d:06:b9:dd:8b:b4:98:4e:35:3d:
e1:92:6d:06:16:a7:a3:79:ea:02:b5:49:f3:99:37:85:7f:f1:
3d:30:a7:f8:b7:1e:d2:9c:d6:8e:44:00:fc:43:55:6c:74:d9:
3c:14:38:2a:ee:bc:e6:c7:2b:68:11:71:7d:29:aa:92:7e:2c:
a5:40:75:d8:71:01:2d:e7:6b:28:48:21:d7:90:d6:ad:9f:67:
de:31:38:5f:c0:c1:0b:01:d0:29:f5:78:de:11:80:19:65:56:
e3:f9:4d:9d:e3:d2:12:ec:49:7f:f1:78:44:27:ef:67:b1:f2:
48:f1:29:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:32:11 2024 by rpki-client on console-fra.rpki-client.org