Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/FvC9kX0nAUf4nHNTR0Ufg2gRV0c.roa
File: FvC9kX0nAUf4nHNTR0Ufg2gRV0c.roa (raw, json)
Hash identifier: c8dqtkYViSe0ehDQdR7DYSQV+/YW/3DICpMDRBWCVPs=
Subject key identifier: 16:F0:BD:91:7D:27:01:47:F8:9C:73:53:47:45:1F:83:68:11:57:47
Certificate issuer: /CN=8d84404e5f8a4b117ae44e73d53c44ecdd578342
Certificate serial: 019145B301E8137FFA5A4FBDDDF7053EAE30
Authority key identifier: 8D:84:40:4E:5F:8A:4B:11:7A:E4:4E:73:D5:3C:44:EC:DD:57:83:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYRATl-KSxF65E5z1TxE7N1Xg0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/FvC9kX0nAUf4nHNTR0Ufg2gRV0c.roa
Signing time: Mon 12 Aug 2024 08:27:24 +0000
ROA not before: Mon 12 Aug 2024 08:27:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208398
IP address blocks: 5.45.192.0/18 maxlen: 24
5.255.192.0/18 maxlen: 24
37.9.64.0/18 maxlen: 24
37.140.128.0/18 maxlen: 24
77.88.0.0/18 maxlen: 24
84.252.160.0/19 maxlen: 24
87.250.224.0/19 maxlen: 24
90.156.176.0/20 maxlen: 24
92.255.112.0/20 maxlen: 24
92.255.127.0/24 maxlen: 24
93.158.128.0/18 maxlen: 24
95.108.128.0/17 maxlen: 24
141.8.128.0/18 maxlen: 24
178.154.128.0/19 maxlen: 24
178.154.160.0/19 maxlen: 24
185.32.187.0/24 maxlen: 24
213.180.192.0/19 maxlen: 24
2a02:6b8::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/jYRATl-KSxF65E5z1TxE7N1Xg0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:45:b3:01:e8:13:7f:fa:5a:4f:bd:dd:f7:05:3e:ae:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d84404e5f8a4b117ae44e73d53c44ecdd578342
Validity
Not Before: Aug 12 08:27:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=16f0bd917d270147f89c735347451f8368115747
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c6:f5:02:f4:3e:f0:09:85:d9:cd:d6:2c:83:
3a:23:d2:88:e3:9c:56:e3:f0:52:86:7e:c9:ed:09:
0e:e5:23:9a:bc:f5:76:8a:64:af:ed:66:97:aa:81:
e6:52:e1:cc:8c:64:54:13:67:71:54:ca:05:f2:02:
c1:b0:ec:72:0c:6b:59:e3:22:23:53:41:99:52:00:
a8:42:97:43:40:42:40:c7:5c:b9:d4:d1:55:67:32:
51:e2:3b:ea:7a:75:6f:dc:2a:2f:33:9f:e0:65:8c:
7e:7e:8c:a1:1b:d5:f9:67:e7:39:b0:55:9b:5f:e0:
98:54:53:05:af:27:45:36:66:92:65:9f:fd:48:e8:
b8:ac:25:5c:cd:3b:53:12:13:0e:be:f0:01:68:1a:
40:e7:a6:35:91:22:2c:eb:74:6b:09:e6:48:fd:19:
c1:75:30:64:ac:fd:24:90:1a:95:66:62:f0:4a:82:
e7:44:08:95:23:fc:6e:3a:85:79:f3:69:0c:84:55:
4a:91:a6:57:28:be:47:28:14:f1:43:97:15:1d:66:
e9:94:7b:36:47:a9:1d:07:7f:c1:35:41:a1:8b:19:
2f:1f:c2:d8:86:c7:c4:44:74:07:09:b0:b9:9b:e4:
7c:be:26:de:e7:2a:a7:6f:0b:6c:8a:e3:50:54:e4:
f2:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:F0:BD:91:7D:27:01:47:F8:9C:73:53:47:45:1F:83:68:11:57:47
X509v3 Authority Key Identifier:
keyid:8D:84:40:4E:5F:8A:4B:11:7A:E4:4E:73:D5:3C:44:EC:DD:57:83:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYRATl-KSxF65E5z1TxE7N1Xg0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/FvC9kX0nAUf4nHNTR0Ufg2gRV0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.45.192.0/18
5.255.192.0/18
37.9.64.0/18
37.140.128.0/18
77.88.0.0/18
84.252.160.0/19
87.250.224.0/19
90.156.176.0/20
92.255.112.0/20
93.158.128.0/18
95.108.128.0/17
141.8.128.0/18
178.154.128.0/18
185.32.187.0/24
213.180.192.0/19
IPv6:
2a02:6b8::/29
Signature Algorithm: sha256WithRSAEncryption
aa:cb:d6:31:8c:7f:26:f5:1e:50:7a:f3:2e:3b:f5:91:e6:4d:
6a:15:2d:71:f6:ce:53:22:49:39:6e:ab:81:c5:f6:dc:14:b3:
4f:b3:4b:73:cf:7c:7a:c3:43:d3:fd:9c:3f:c9:b5:b1:cb:20:
3a:2e:f5:36:0e:26:bd:aa:b3:79:86:df:9d:75:93:15:67:24:
49:07:a6:7a:b4:44:81:31:72:f8:67:92:2e:52:fe:37:f6:ea:
a4:1c:f2:70:80:28:b9:28:a5:92:85:fc:11:b3:11:1a:63:34:
b5:9f:16:cd:56:bb:d6:22:0e:c0:57:bc:f2:6b:87:c3:3a:2a:
77:48:05:3e:72:2a:1b:d8:fe:a7:09:f9:34:a2:6b:e7:91:46:
4e:f4:7e:51:f2:6a:28:ac:df:03:2b:52:0f:f9:3e:5c:fa:60:
8c:7f:47:7d:da:50:af:ad:52:f2:3f:8f:5e:39:a5:89:5f:82:
c6:b8:8a:87:b9:36:97:d3:70:3b:bf:a1:2d:6a:64:c7:61:58:
04:46:2a:91:43:46:94:88:81:ab:f8:9c:10:89:ec:2c:42:21:
9b:fe:c6:fb:a2:63:46:f9:51:2c:ef:a6:ce:e2:be:62:2c:17:
ad:c1:75:6d:be:d7:e1:83:e3:b8:46:06:05:75:02:c9:db:24:
b8:1d:b4:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:42:36 2024 by rpki-client on console-ams.rpki-client.org