Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/OSJf7rNBCS7qNorT-1tLWiu2oTo.roa
File: OSJf7rNBCS7qNorT-1tLWiu2oTo.roa (raw, json)
Hash identifier: HHsybMcEcEjXd+RRr+sdggfVoaUMCvnreqJEGWTwZF0=
Subject key identifier: 39:22:5F:EE:B3:41:09:2E:EA:36:8A:D3:FB:5B:4B:5A:2B:B6:A1:3A
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 018CC56DE4F540EB87CCBB5739F198163023
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/OSJf7rNBCS7qNorT-1tLWiu2oTo.roa
Signing time: Mon 01 Jan 2024 14:29:22 +0000
ROA not before: Mon 01 Jan 2024 14:29:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31261
IP address blocks: 81.23.0.0/21 maxlen: 21
81.23.9.0/24 maxlen: 24
81.23.8.0/23 maxlen: 23
37.16.80.0/22 maxlen: 22
81.23.14.0/24 maxlen: 24
185.68.145.0/24 maxlen: 24
83.220.32.0/19 maxlen: 19
185.68.146.0/23 maxlen: 23
77.242.15.0/24 maxlen: 24
217.171.152.0/21 maxlen: 21
188.164.214.0/23 maxlen: 23
185.196.246.0/23 maxlen: 23
185.6.172.0/22 maxlen: 22
185.6.174.0/24 maxlen: 24
188.68.189.0/24 maxlen: 24
188.164.212.0/24 maxlen: 24
89.107.141.0/24 maxlen: 24
188.164.209.0/24 maxlen: 24
89.107.142.0/23 maxlen: 23
77.74.79.0/24 maxlen: 24
5.8.177.0/24 maxlen: 24
91.198.212.0/24 maxlen: 24
94.124.192.0/21 maxlen: 21
77.74.72.0/22 maxlen: 22
77.220.211.0/24 maxlen: 24
77.74.78.0/24 maxlen: 24
77.74.77.0/24 maxlen: 24
77.220.209.0/24 maxlen: 24
185.22.24.0/24 maxlen: 24
109.73.12.0/23 maxlen: 23
93.191.16.0/21 maxlen: 21
93.191.23.0/24 maxlen: 24
109.73.4.0/22 maxlen: 22
109.73.0.0/22 maxlen: 22
109.73.8.0/22 maxlen: 22
2a02:330::/45 maxlen: 45
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6d:e4:f5:40:eb:87:cc:bb:57:39:f1:98:16:30:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Jan 1 14:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=39225feeb341092eea368ad3fb5b4b5a2bb6a13a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:4e:ae:c4:2b:54:d0:e9:85:03:2d:be:f8:90:
e2:b7:bc:a0:1e:ba:ee:e2:51:93:fc:13:b1:d5:3c:
ab:fe:0d:48:b0:3b:b5:e1:67:83:c2:46:87:60:b2:
3c:fa:ba:de:39:1d:e5:06:53:74:55:17:e1:13:fa:
bc:b3:4d:52:83:d6:94:29:f0:12:e0:c6:26:e1:d1:
31:69:39:5f:59:90:ac:9d:a0:e0:d9:ab:e6:99:3c:
2d:5c:fb:2a:19:72:df:68:07:22:3a:56:6b:0e:cb:
9c:8d:55:8b:fd:c8:45:85:08:d1:49:f2:c8:ed:9a:
08:bf:d4:36:81:a6:ec:28:58:ee:5b:4e:ed:cb:f7:
fa:c9:cf:04:55:2e:59:8c:00:ac:f2:14:1e:e9:41:
35:0a:2e:3a:71:bd:ed:c9:8e:3c:b5:37:4b:5d:83:
6b:57:4c:d5:d6:cd:47:93:c6:ca:04:b1:db:26:b3:
81:28:ce:d8:38:c0:3d:18:68:85:10:aa:df:7e:cf:
1e:34:f4:38:77:0b:44:4d:ce:d1:a0:73:2f:72:3f:
2f:53:bb:a9:d2:fb:fd:90:4c:36:77:67:49:7a:45:
8a:57:ad:ad:30:c0:3d:b3:c8:fc:d8:ba:7b:f3:58:
cb:1f:82:58:fe:2a:76:09:d7:94:ac:fe:59:fc:21:
45:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:22:5F:EE:B3:41:09:2E:EA:36:8A:D3:FB:5B:4B:5A:2B:B6:A1:3A
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/OSJf7rNBCS7qNorT-1tLWiu2oTo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.8.177.0/24
37.16.80.0/22
77.74.72.0/22
77.74.77.0-77.74.79.255
77.220.209.0/24
77.220.211.0/24
77.242.15.0/24
81.23.0.0-81.23.9.255
81.23.14.0/24
83.220.32.0/19
89.107.141.0-89.107.143.255
91.198.212.0/24
93.191.16.0/21
94.124.192.0/21
109.73.0.0-109.73.13.255
185.6.172.0/22
185.22.24.0/24
185.68.145.0-185.68.147.255
185.196.246.0/23
188.68.189.0/24
188.164.209.0/24
188.164.212.0/24
188.164.214.0/23
217.171.152.0/21
IPv6:
2a02:330::/45
Signature Algorithm: sha256WithRSAEncryption
4d:10:f8:0a:0f:f2:8e:23:78:96:ed:d4:fd:6b:86:30:f9:c8:
82:1f:ff:ca:c2:08:25:59:e7:f3:ae:dd:97:3d:3f:68:cd:51:
17:4c:4a:50:5b:7c:17:9c:1e:14:2d:5b:3e:b4:99:75:c7:a7:
b6:48:3d:4b:92:12:40:db:d2:6f:af:f6:a7:6f:61:83:26:b5:
d4:e0:13:5b:a7:54:3b:0a:8e:e7:b4:30:01:fa:46:39:0a:d9:
6e:65:d6:3f:e3:28:0b:ad:4b:1f:7c:9b:b9:a2:f4:2d:f2:7a:
c1:df:4d:d6:8c:2b:4f:73:34:d4:2d:e0:6e:98:ff:12:e4:8e:
35:91:0d:84:be:e9:3e:38:5f:05:4d:f6:49:8e:83:11:b6:2d:
6f:bb:21:6f:e0:a3:b1:10:d2:43:d5:9b:df:0c:49:05:97:91:
2c:17:67:2e:64:1e:2a:15:36:ec:67:ea:a3:28:83:8d:fe:2c:
0d:a9:35:1b:3a:2e:10:30:4a:26:8c:35:01:ed:77:2d:d2:f0:
3c:08:ca:fa:11:11:1f:1c:69:99:09:a0:33:10:12:28:b5:f8:
f9:8c:8c:aa:c0:5a:51:85:bb:8e:cb:7f:37:32:2e:1d:fd:f9:
a5:5d:2b:87:f3:7a:55:7e:eb:97:f8:8c:ce:b7:1d:e9:10:1e:
32:d9:7a:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 14:14:07 2024 by rpki-client on console-ams.rpki-client.org