Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/SDMN2V23LQd0vx37ydWxqgv8maA.roa
File: SDMN2V23LQd0vx37ydWxqgv8maA.roa (raw, json)
Hash identifier: d3dw6cz5+OFQCdWalrRdrK71zbvfL7d39tUeohGpLqc=
Subject key identifier: 48:33:0D:D9:5D:B7:2D:07:74:BF:1D:FB:C9:D5:B1:AA:0B:FC:99:A0
Certificate issuer: /CN=4104a40821c4176cc42e255ef6c1727473c3f00a
Certificate serial: 018CC56EFCF8058BF3873F4226FE0A82406B
Authority key identifier: 41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/SDMN2V23LQd0vx37ydWxqgv8maA.roa
Signing time: Mon 01 Jan 2024 14:30:34 +0000
ROA not before: Mon 01 Jan 2024 14:30:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25206
IP address blocks: 89.252.216.0/24 maxlen: 24
89.252.216.0/22 maxlen: 22
89.252.217.0/24 maxlen: 24
89.252.219.0/24 maxlen: 24
89.252.218.0/24 maxlen: 24
89.252.233.0/24 maxlen: 24
89.252.232.0/22 maxlen: 22
89.252.232.0/21 maxlen: 21
89.252.232.0/24 maxlen: 24
89.252.235.0/24 maxlen: 24
89.252.234.0/24 maxlen: 24
89.252.237.0/24 maxlen: 24
89.252.236.0/24 maxlen: 24
89.252.238.0/24 maxlen: 24
89.252.239.0/24 maxlen: 24
89.252.248.0/22 maxlen: 22
89.252.249.0/24 maxlen: 24
89.252.248.0/24 maxlen: 24
89.252.250.0/24 maxlen: 24
89.252.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.mft
rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:fc:f8:05:8b:f3:87:3f:42:26:fe:0a:82:40:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4104a40821c4176cc42e255ef6c1727473c3f00a
Validity
Not Before: Jan 1 14:30:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=48330dd95db72d0774bf1dfbc9d5b1aa0bfc99a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:52:2d:1e:be:ff:40:8f:eb:e4:c1:5f:6c:f8:
e0:09:6d:cd:54:26:08:23:1b:d2:ef:8b:b3:8c:e2:
7d:52:9c:dc:86:cb:50:6d:c6:69:c5:09:77:23:bd:
7f:ed:32:24:1a:a8:49:1d:87:33:1b:22:a9:ea:03:
f9:f4:c6:37:fe:0f:2a:29:98:11:14:a1:9b:96:71:
82:6a:a0:21:c4:2f:4b:d1:1a:31:9e:43:24:74:1d:
72:61:5f:a0:4c:21:39:de:0f:d9:ba:17:64:36:f7:
9e:5c:6f:da:f1:e3:ee:a0:ec:24:76:5d:41:ab:0c:
d0:06:1e:1a:80:d5:20:cd:42:19:35:89:6a:a9:fd:
c1:5d:8a:9e:38:fc:7b:d6:78:03:9e:bf:8b:d0:7a:
a7:63:36:27:95:a7:c9:df:7d:15:d8:65:d8:f8:61:
cb:54:6d:d1:54:ac:54:fc:77:2b:53:94:2e:88:7d:
44:a8:0a:4b:54:09:dd:56:8a:20:35:3c:9d:a6:84:
b8:3f:46:a6:eb:e4:0f:9f:86:db:e4:2f:b8:57:8c:
cc:a6:03:25:d3:5f:7c:31:1c:a2:10:6d:8a:0e:f0:
c0:0a:a1:46:e5:7e:74:f8:f5:f1:25:9e:fd:b7:04:
ac:66:47:82:04:54:53:f4:8a:58:a6:aa:03:ee:7a:
2c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:33:0D:D9:5D:B7:2D:07:74:BF:1D:FB:C9:D5:B1:AA:0B:FC:99:A0
X509v3 Authority Key Identifier:
keyid:41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/SDMN2V23LQd0vx37ydWxqgv8maA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.252.216.0/22
89.252.232.0/21
89.252.248.0/22
Signature Algorithm: sha256WithRSAEncryption
c5:aa:a5:dd:10:6e:9e:bc:b0:ad:d3:b9:13:29:c3:e3:4c:ee:
49:bf:00:19:87:f0:85:63:a4:62:a8:2c:b9:0b:1a:a7:6e:17:
3c:a4:69:77:50:24:8f:38:d4:9e:e5:4b:ff:08:5f:7f:93:5e:
da:14:d4:f3:23:03:a1:73:fb:00:50:bd:6c:be:87:0f:9b:2d:
f7:c8:58:18:6f:90:3b:0c:bc:32:61:5c:3c:b8:b3:1a:85:89:
19:10:8a:64:d1:6a:7b:b4:83:14:3e:5f:b0:bd:47:89:9d:c2:
a6:32:af:7c:67:d7:ba:32:16:ba:e9:2d:7b:18:96:7f:24:c7:
f7:f2:b6:70:c2:6f:e9:a3:31:13:cd:95:3f:6c:a2:5c:83:15:
53:39:2b:b5:49:a6:c5:9e:8d:f5:2b:50:5f:b0:bc:ee:29:b5:
3e:0a:f1:b8:9a:6a:29:07:6f:6b:91:57:6a:b0:55:27:83:bb:
71:c6:54:0e:a7:dc:58:f9:99:e9:a6:ef:6d:cd:16:d2:dd:7d:
65:55:95:81:c8:15:ea:3d:51:d2:66:99:25:38:c8:bf:c3:cc:
e3:48:5f:a2:95:7f:62:9d:1a:97:74:1e:55:a6:78:78:06:7c:
60:3c:eb:83:56:54:27:0b:41:7d:8d:5a:62:11:a8:6f:a6:0b:
46:2b:a0:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 18:19:53 2024 by rpki-client on console-fra.rpki-client.org