Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/9dtBS_70XxlSDi2UxuKpCzmv7q8.roa
File: 9dtBS_70XxlSDi2UxuKpCzmv7q8.roa (raw, json)
Hash identifier: 54l6dSos4PXl6Lx6ig/mRm/nxlHxjlichhmd7KYz0eY=
Subject key identifier: F5:DB:41:4B:FE:F4:5F:19:52:0E:2D:94:C6:E2:A9:0B:39:AF:EE:AF
Certificate issuer: /CN=0e75fb4f52a829d136e29a9a025c636d19ae328e
Certificate serial: 018CC5008EF325BA01D327776D1986295F72
Authority key identifier: 0E:75:FB:4F:52:A8:29:D1:36:E2:9A:9A:02:5C:63:6D:19:AE:32:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/9dtBS_70XxlSDi2UxuKpCzmv7q8.roa
Signing time: Mon 01 Jan 2024 12:29:57 +0000
ROA not before: Mon 01 Jan 2024 12:29:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42109
IP address blocks: 31.7.161.0/24 maxlen: 24
31.7.160.0/21 maxlen: 21
31.7.160.0/24 maxlen: 24
31.7.164.0/24 maxlen: 24
31.7.163.0/24 maxlen: 24
31.7.165.0/24 maxlen: 24
95.140.192.0/20 maxlen: 20
95.140.192.0/24 maxlen: 24
95.140.195.0/24 maxlen: 24
95.140.194.0/24 maxlen: 24
95.140.198.0/23 maxlen: 23
95.140.197.0/24 maxlen: 24
95.140.196.0/24 maxlen: 24
95.140.202.0/24 maxlen: 24
95.140.201.0/24 maxlen: 24
95.140.200.0/24 maxlen: 24
95.140.204.0/22 maxlen: 22
95.140.203.0/24 maxlen: 24
185.79.0.0/24 maxlen: 24
91.103.24.0/21 maxlen: 21
91.103.24.0/24 maxlen: 24
91.103.25.0/24 maxlen: 24
91.103.28.0/24 maxlen: 24
91.103.27.0/24 maxlen: 24
91.103.26.0/24 maxlen: 24
91.103.30.0/24 maxlen: 24
91.103.29.0/24 maxlen: 24
93.94.216.0/21 maxlen: 21
93.94.217.0/24 maxlen: 24
93.94.219.0/24 maxlen: 24
93.94.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 03:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:8e:f3:25:ba:01:d3:27:77:6d:19:86:29:5f:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e75fb4f52a829d136e29a9a025c636d19ae328e
Validity
Not Before: Jan 1 12:29:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f5db414bfef45f19520e2d94c6e2a90b39afeeaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:bf:28:42:26:f7:26:41:a6:c7:c9:e0:02:48:
c8:dd:f5:8d:67:09:10:fd:b1:05:48:b4:e9:30:8c:
ce:03:99:d8:45:0c:c4:f7:cb:43:35:04:c6:e5:78:
86:fc:a1:fc:b2:72:7c:37:ac:37:a5:e9:81:d1:77:
79:05:07:01:25:d1:3a:27:5d:72:22:75:45:06:3b:
7f:8a:d7:a9:ae:33:0a:a8:bb:a5:45:dd:62:5d:e4:
59:d5:6b:27:33:ea:22:12:94:b3:f9:57:42:e3:dd:
06:f8:60:e0:fb:fd:f0:0c:7b:71:a3:41:6e:98:69:
c4:75:88:6b:bd:ec:97:a2:4d:82:82:34:a0:ef:09:
8a:cc:63:3f:e1:3e:a1:c6:29:34:25:a6:24:a5:87:
93:f5:ac:b0:3e:05:29:7a:bf:f3:69:da:da:58:b6:
11:8f:02:a7:65:36:fb:6f:22:67:ba:a8:d6:6b:42:
09:22:5b:33:d7:7e:20:d2:f3:0a:c4:8a:3b:7a:97:
f5:a5:23:bb:22:31:29:7b:b3:60:17:14:73:aa:8d:
3b:da:62:c4:ab:ad:ba:74:ac:ab:8b:67:93:b9:5a:
a6:a1:8a:ba:3e:e5:85:5b:6f:03:e8:a2:0a:7d:11:
60:e2:51:f9:c1:42:5b:e0:ca:d8:bb:12:26:15:bf:
e9:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:DB:41:4B:FE:F4:5F:19:52:0E:2D:94:C6:E2:A9:0B:39:AF:EE:AF
X509v3 Authority Key Identifier:
keyid:0E:75:FB:4F:52:A8:29:D1:36:E2:9A:9A:02:5C:63:6D:19:AE:32:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/9dtBS_70XxlSDi2UxuKpCzmv7q8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.7.160.0/21
91.103.24.0/21
93.94.216.0/21
95.140.192.0/20
185.79.0.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:cc:e8:1e:79:c2:04:f2:0d:ff:3b:b6:98:1a:27:59:2a:4f:
08:e9:72:ba:f6:3c:d3:09:90:93:f1:11:fb:8c:c6:6a:64:3b:
f0:11:aa:b1:1c:10:e8:0c:99:30:20:da:18:88:2d:59:ee:ae:
2b:20:91:3c:9d:55:79:2a:90:06:76:b1:2a:d8:35:e9:7b:93:
45:d2:ce:91:9a:6c:4c:0f:d5:64:d8:bc:bf:2b:2d:6a:4c:ca:
f1:6b:c1:a5:48:21:49:e1:7a:4d:59:09:55:57:3c:c4:8a:9e:
41:02:45:4b:ce:53:79:3a:da:ae:d7:09:3a:c8:0b:d9:6c:73:
f0:73:dc:28:53:38:3f:ef:e7:41:43:69:15:78:96:ff:2b:e6:
18:45:e7:e2:49:6a:f9:63:63:b6:1b:44:d5:27:3b:9d:3f:d8:
56:96:c4:13:8c:44:cd:f8:47:26:1b:5b:96:64:9e:a4:df:65:
fa:2e:53:08:81:60:d5:c0:42:c8:27:4b:ff:d5:32:71:7d:6b:
d7:1a:2c:7c:1a:63:4d:78:43:77:90:12:e4:40:94:59:14:f0:
23:c3:19:99:f9:b0:03:10:de:a2:eb:00:c2:98:e5:c9:e5:ee:
18:1f:9f:2d:26:98:57:e3:5a:7a:49:2b:4d:5d:5d:e2:a6:bc:
c8:f6:75:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:14:35 2024 by rpki-client on console-fra.rpki-client.org