Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/898741-eda4-4c5d-af9f-8d68eb20fbdd/1/pP6YXx7XHpYCgb13HStJccZrGGo.roa
File: pP6YXx7XHpYCgb13HStJccZrGGo.roa (raw, json)
Hash identifier: KZRozCqhNOjsBDR2sdVDLDc4V0wEdZQpb3UTIJgs9Cs=
Subject key identifier: A4:FE:98:5F:1E:D7:1E:96:02:81:BD:77:1D:2B:49:71:C6:6B:18:6A
Certificate issuer: /CN=9fb4a8b93af9ea9cf18aaca4e73f116ec26eb357
Certificate serial: 018EAE3791809516C5CEF5F440A864C4D65B
Authority key identifier: 9F:B4:A8:B9:3A:F9:EA:9C:F1:8A:AC:A4:E7:3F:11:6E:C2:6E:B3:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n7SouTr56pzxiqyk5z8RbsJus1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/898741-eda4-4c5d-af9f-8d68eb20fbdd/1/pP6YXx7XHpYCgb13HStJccZrGGo.roa
Signing time: Fri 05 Apr 2024 12:24:20 +0000
ROA not before: Fri 05 Apr 2024 12:24:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43060
IP address blocks: 91.196.76.0/23 maxlen: 24
94.158.48.0/20 maxlen: 20
94.158.48.0/21 maxlen: 21
94.158.56.0/24 maxlen: 24
94.158.57.0/24 maxlen: 24
94.158.58.0/24 maxlen: 24
94.158.59.0/24 maxlen: 24
94.158.60.0/24 maxlen: 24
94.158.61.0/24 maxlen: 24
94.158.62.0/24 maxlen: 24
94.158.63.0/24 maxlen: 24
109.207.242.0/23 maxlen: 24
109.207.244.0/22 maxlen: 24
109.207.248.0/22 maxlen: 24
185.196.216.0/22 maxlen: 22
2a04:1b80::/32 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/898741-eda4-4c5d-af9f-8d68eb20fbdd/1/n7SouTr56pzxiqyk5z8RbsJus1c.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/898741-eda4-4c5d-af9f-8d68eb20fbdd/1/n7SouTr56pzxiqyk5z8RbsJus1c.mft
rsync://rpki.ripe.net/repository/DEFAULT/n7SouTr56pzxiqyk5z8RbsJus1c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:ae:37:91:80:95:16:c5:ce:f5:f4:40:a8:64:c4:d6:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fb4a8b93af9ea9cf18aaca4e73f116ec26eb357
Validity
Not Before: Apr 5 12:24:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a4fe985f1ed71e960281bd771d2b4971c66b186a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b6:8b:68:c2:3b:73:2b:f2:c6:d8:5b:8a:9d:
aa:2d:79:ce:74:67:88:bb:69:b2:45:e9:d6:de:ee:
fe:46:5e:bb:5e:ad:18:d4:c9:5d:da:ea:59:87:62:
97:7b:8f:ba:49:40:36:59:35:f2:01:4b:ae:30:f9:
83:7e:27:eb:aa:95:58:64:e1:a1:ff:d7:01:7b:40:
20:4d:56:82:64:0e:4a:cf:f0:2d:8b:25:c0:f2:82:
5a:80:01:69:a5:b8:3c:da:31:62:54:b9:7b:55:04:
29:21:cd:0f:5f:05:23:11:ef:c9:2a:d8:61:6e:ac:
32:bd:25:0c:0f:48:ac:ab:e1:f9:f6:5c:3c:99:69:
65:11:a1:98:8e:a5:01:90:d9:6b:f6:95:62:01:46:
7e:35:2c:43:9d:70:69:89:f1:56:43:20:6c:46:e2:
65:74:47:14:ea:4e:f8:74:e3:f7:7e:6b:17:44:12:
01:b8:18:0f:94:f0:ff:f1:93:9c:84:bb:98:66:81:
6d:00:9e:a4:20:a7:d2:65:d3:4e:a2:84:53:f8:72:
2b:54:d6:66:41:ed:aa:9c:a2:a3:d1:50:91:4c:47:
62:76:10:1a:45:79:32:c4:96:67:30:76:af:de:c0:
3b:df:7f:04:1c:6a:ad:81:d7:00:bd:da:ba:74:45:
ed:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:FE:98:5F:1E:D7:1E:96:02:81:BD:77:1D:2B:49:71:C6:6B:18:6A
X509v3 Authority Key Identifier:
keyid:9F:B4:A8:B9:3A:F9:EA:9C:F1:8A:AC:A4:E7:3F:11:6E:C2:6E:B3:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n7SouTr56pzxiqyk5z8RbsJus1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/898741-eda4-4c5d-af9f-8d68eb20fbdd/1/pP6YXx7XHpYCgb13HStJccZrGGo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/898741-eda4-4c5d-af9f-8d68eb20fbdd/1/n7SouTr56pzxiqyk5z8RbsJus1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.196.76.0/23
94.158.48.0/20
109.207.242.0-109.207.251.255
185.196.216.0/22
IPv6:
2a04:1b80::/32
Signature Algorithm: sha256WithRSAEncryption
cf:27:58:e4:c3:6e:f5:20:7d:36:ef:b0:8d:54:24:de:54:bb:
d0:93:fe:7b:b7:b1:87:6d:86:07:79:cf:de:b4:d8:e6:6e:9c:
a7:4f:1f:32:9f:f2:25:ec:d1:e3:ae:4a:02:f5:23:0a:4f:d2:
66:c3:c4:b4:47:26:6e:5b:f4:d5:bf:c9:84:82:48:1d:ad:ec:
f3:de:f2:aa:92:1f:e1:e9:ae:b2:3a:b9:d5:4e:13:26:52:11:
9b:8e:56:4a:6b:de:05:e9:f6:4f:f4:03:03:51:df:47:62:95:
59:89:73:c1:80:04:25:14:a3:7d:86:4b:cc:bd:9c:73:d9:6e:
e2:a7:e2:d6:62:d5:02:f5:f4:58:98:dd:b4:b2:cf:1f:c0:81:
c8:cf:20:9c:e1:77:70:37:ad:c4:9d:00:43:44:a9:13:7b:f9:
5b:d6:55:65:53:84:0f:d7:bb:5e:fd:eb:3e:6e:b2:d9:e9:c0:
51:0a:6e:b4:d6:07:28:87:8d:2d:92:81:0c:d2:19:be:8e:92:
a0:4d:da:b7:b1:b5:8e:53:7e:57:02:96:7a:c5:09:49:2c:d5:
55:00:0e:e3:f9:61:01:25:a1:ef:7d:48:94:19:43:5f:be:64:
40:10:41:eb:86:05:e4:02:6c:ef:4d:b2:c2:13:c4:3e:32:3b:
83:26:f9:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 14:21:05 2024 by rpki-client on console-fra.rpki-client.org