Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/efbb05-8940-43cf-ad1d-28acc7f3193a/1/9quk3TI1LGHwJx2vKibwrnjeTpw.roa
File: 9quk3TI1LGHwJx2vKibwrnjeTpw.roa (raw, json)
Hash identifier: j/TsrRnCSuWDr9RRmswcXj7GfDQJwtQ6nX3EIHALuk0=
Subject key identifier: F6:AB:A4:DD:32:35:2C:61:F0:27:1D:AF:2A:26:F0:AE:78:DE:4E:9C
Certificate issuer: /CN=178825286beec912d1988d08d2e277f518f3e4aa
Certificate serial: 018CC94DC4A242AA3B73166EEF59D73BFB56
Authority key identifier: 17:88:25:28:6B:EE:C9:12:D1:98:8D:08:D2:E2:77:F5:18:F3:E4:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F4glKGvuyRLRmI0I0uJ39Rjz5Ko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/efbb05-8940-43cf-ad1d-28acc7f3193a/1/9quk3TI1LGHwJx2vKibwrnjeTpw.roa
Signing time: Tue 02 Jan 2024 08:32:46 +0000
ROA not before: Tue 02 Jan 2024 08:32:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8632
IP address blocks: 94.103.208.0/21 maxlen: 22
94.103.208.0/20 maxlen: 20
83.222.32.0/19 maxlen: 20
94.103.216.0/21 maxlen: 22
195.218.0.0/21 maxlen: 22
195.218.8.0/21 maxlen: 22
31.172.144.0/21 maxlen: 22
195.218.16.0/20 maxlen: 22
195.218.16.0/21 maxlen: 22
195.218.24.0/21 maxlen: 22
185.6.232.0/22 maxlen: 23
2a02:678::/32 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/efbb05-8940-43cf-ad1d-28acc7f3193a/1/F4glKGvuyRLRmI0I0uJ39Rjz5Ko.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/efbb05-8940-43cf-ad1d-28acc7f3193a/1/F4glKGvuyRLRmI0I0uJ39Rjz5Ko.mft
rsync://rpki.ripe.net/repository/DEFAULT/F4glKGvuyRLRmI0I0uJ39Rjz5Ko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:c4:a2:42:aa:3b:73:16:6e:ef:59:d7:3b:fb:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=178825286beec912d1988d08d2e277f518f3e4aa
Validity
Not Before: Jan 2 08:32:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f6aba4dd32352c61f0271daf2a26f0ae78de4e9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:15:d8:f0:1f:8d:40:73:e6:cc:e6:25:4c:5a:
ac:81:9e:2b:ce:7f:ba:df:1d:03:bc:fd:77:0b:71:
c1:c0:ce:36:78:57:70:3f:ed:41:93:5b:88:78:fd:
9c:7d:ac:28:51:d5:37:c8:5c:93:e6:58:92:7d:37:
1c:ae:5f:0c:84:06:af:5a:a0:de:4b:cc:3a:f9:87:
46:4e:cc:44:d5:af:d2:20:ce:11:63:1e:f4:c5:3f:
86:d9:72:d6:bd:1c:2b:6d:c8:92:50:55:42:dd:3a:
9c:7b:8c:99:31:2b:8d:b3:21:cf:13:f9:b4:1c:61:
ca:27:51:e7:96:d3:e1:db:f5:ee:94:30:09:15:05:
bc:97:ed:6b:bf:3c:a4:6c:f2:4c:36:d5:f3:ef:6e:
af:53:dd:7e:6c:02:b1:d1:18:77:52:c5:44:52:55:
a8:80:45:a9:e7:d5:99:b9:ca:13:b0:d0:b0:9e:91:
49:ae:76:83:82:ad:a0:b8:6f:92:99:a1:b6:20:c4:
40:cc:cd:b7:49:fd:e2:5a:28:df:b4:ac:98:e2:f2:
d8:25:89:ac:10:93:11:6e:24:87:4c:6e:9f:c5:f0:
76:f4:03:4d:77:dd:47:0d:9e:35:ef:53:2f:7d:f3:
26:84:f4:2d:af:7e:55:78:4d:7e:81:62:ec:69:c1:
5d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:AB:A4:DD:32:35:2C:61:F0:27:1D:AF:2A:26:F0:AE:78:DE:4E:9C
X509v3 Authority Key Identifier:
keyid:17:88:25:28:6B:EE:C9:12:D1:98:8D:08:D2:E2:77:F5:18:F3:E4:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F4glKGvuyRLRmI0I0uJ39Rjz5Ko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/efbb05-8940-43cf-ad1d-28acc7f3193a/1/9quk3TI1LGHwJx2vKibwrnjeTpw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/efbb05-8940-43cf-ad1d-28acc7f3193a/1/F4glKGvuyRLRmI0I0uJ39Rjz5Ko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.172.144.0/21
83.222.32.0/19
94.103.208.0/20
185.6.232.0/22
195.218.0.0/19
IPv6:
2a02:678::/32
Signature Algorithm: sha256WithRSAEncryption
31:25:8c:79:9e:d6:1a:d0:b0:41:f6:db:d3:96:76:8d:fc:fd:
50:6a:e4:68:c9:ed:ae:34:b5:69:2a:4c:24:72:d9:a7:a9:29:
5d:7e:b4:b9:82:7c:b2:fd:24:b4:c0:d7:26:25:0b:66:e5:e9:
e5:00:e5:d2:f6:62:e8:e4:b3:25:69:08:33:7a:00:61:d1:db:
33:17:b2:51:dc:94:11:7f:37:0c:36:71:72:76:22:b3:ef:1d:
4d:3c:10:c2:d1:06:9d:cb:f7:0b:ef:6a:01:a2:88:6c:b0:42:
4a:4d:db:73:1d:1c:0d:cb:2a:c4:d7:84:df:6b:df:8b:00:dd:
32:c7:1c:39:82:06:3c:14:54:9d:21:ef:11:de:1a:3a:f7:02:
93:11:5b:24:e2:25:9d:e2:ca:6e:7d:8c:0d:b7:2a:01:a9:5c:
b0:ff:86:c4:3f:08:10:d7:d8:24:ad:0b:c3:68:c7:9d:9c:04:
ee:d0:24:4b:55:85:14:0d:56:bb:0c:1a:ed:80:0d:dd:5b:c8:
62:2d:1a:85:05:2a:3d:f2:dc:4d:bb:b9:d3:8a:46:2c:0d:f8:
5b:99:7f:f7:a1:36:da:02:94:b1:3c:98:12:f1:38:d6:aa:6f:
64:2f:13:ef:92:8e:90:c1:73:d8:d9:a6:4d:15:75:d1:ab:8b:
93:3a:11:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 23:21:49 2024 by rpki-client on console-ams.rpki-client.org