Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/avbzcayqvLmoXAVd8DPBJAcneAQ.roa
File: avbzcayqvLmoXAVd8DPBJAcneAQ.roa (raw, json)
Hash identifier: tL1nFP6ubOO6hkYZC42xW/KoCdyKEFKrHjV4/hq4J0k=
Subject key identifier: 6A:F6:F3:71:AC:AA:BC:B9:A8:5C:05:5D:F0:33:C1:24:07:27:78:04
Certificate issuer: /CN=9a526a73ce8f9f62c14a11a2ea913ec273d58c46
Certificate serial: 0190D982D267A8E5A49201968B37360A560B
Authority key identifier: 9A:52:6A:73:CE:8F:9F:62:C1:4A:11:A2:EA:91:3E:C2:73:D5:8C:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mlJqc86Pn2LBShGi6pE-wnPVjEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/avbzcayqvLmoXAVd8DPBJAcneAQ.roa
Signing time: Mon 22 Jul 2024 08:15:47 +0000
ROA not before: Mon 22 Jul 2024 08:15:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35237
IP address blocks: 84.252.144.0/23 maxlen: 24
84.252.144.0/24 maxlen: 24
84.252.145.0/24 maxlen: 24
84.252.146.0/24 maxlen: 24
84.252.147.0/24 maxlen: 24
84.252.149.0/24 maxlen: 24
84.252.150.0/24 maxlen: 24
84.252.151.0/24 maxlen: 24
91.217.194.0/24 maxlen: 24
185.157.96.0/23 maxlen: 23
185.157.96.0/24 maxlen: 24
185.157.97.0/24 maxlen: 24
185.157.99.0/24 maxlen: 24
194.54.14.0/24 maxlen: 24
194.54.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/mlJqc86Pn2LBShGi6pE-wnPVjEY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/mlJqc86Pn2LBShGi6pE-wnPVjEY.mft
rsync://rpki.ripe.net/repository/DEFAULT/mlJqc86Pn2LBShGi6pE-wnPVjEY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:d9:82:d2:67:a8:e5:a4:92:01:96:8b:37:36:0a:56:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a526a73ce8f9f62c14a11a2ea913ec273d58c46
Validity
Not Before: Jul 22 08:15:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6af6f371acaabcb9a85c055df033c12407277804
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:65:97:01:f1:c4:cd:6b:77:b9:f6:77:e5:8d:
16:a5:91:8c:53:88:7a:c7:45:18:69:cd:3f:3d:42:
45:cf:8f:c0:35:26:c1:ea:ae:e9:75:c9:38:56:0c:
a7:3e:de:aa:33:f4:3f:c1:30:38:24:56:81:35:13:
4b:f3:15:f9:72:16:de:a1:4d:d3:a8:04:eb:1c:c3:
ee:35:9a:48:c5:23:d4:ac:20:de:6e:f3:3d:97:e6:
95:10:27:38:46:a2:58:07:76:7f:cb:2e:9e:b7:73:
24:c8:7b:cb:9b:b8:23:8b:17:f8:62:40:f7:64:f6:
c0:d5:78:b4:5e:9f:f5:4d:12:23:93:33:38:dc:db:
96:9f:b4:2a:f6:4e:a0:68:39:83:8e:95:7a:13:a6:
b6:aa:5b:ac:5e:91:e9:ac:ee:80:5d:6b:82:f6:e9:
ea:61:a4:f6:f3:38:a0:c7:ba:a6:97:ef:d5:d6:5c:
db:ca:eb:c0:ec:05:86:71:b6:4a:b3:37:0c:86:6e:
9e:4e:7b:a6:4b:72:0c:ae:77:2d:68:4b:d4:06:e0:
92:4c:97:0c:8d:1c:98:c7:60:5d:06:d5:20:16:df:
38:da:a9:24:12:34:be:a5:f6:89:3d:9a:5e:cb:cd:
10:a8:47:0b:e2:8f:98:b7:c2:48:65:fa:98:2a:9e:
db:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:F6:F3:71:AC:AA:BC:B9:A8:5C:05:5D:F0:33:C1:24:07:27:78:04
X509v3 Authority Key Identifier:
keyid:9A:52:6A:73:CE:8F:9F:62:C1:4A:11:A2:EA:91:3E:C2:73:D5:8C:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mlJqc86Pn2LBShGi6pE-wnPVjEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/avbzcayqvLmoXAVd8DPBJAcneAQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/mlJqc86Pn2LBShGi6pE-wnPVjEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.252.144.0/22
84.252.149.0-84.252.151.255
91.217.194.0/24
185.157.96.0/23
185.157.99.0/24
194.54.14.0/23
Signature Algorithm: sha256WithRSAEncryption
2d:de:9c:89:fb:2c:ef:ed:3f:ad:7c:32:b9:81:f4:4d:91:b0:
05:aa:5f:74:60:9f:ff:13:c6:e2:4b:b1:32:6c:56:1a:07:b3:
28:38:bb:aa:52:6c:0a:96:d7:93:76:04:90:52:96:47:e3:a6:
c7:e2:8e:d1:d8:5b:78:ca:8f:21:ee:c8:20:07:13:d7:2d:5d:
af:0e:f4:d6:e6:ff:58:4d:67:9e:a4:72:c9:d8:fb:a1:04:a3:
0d:30:a3:8e:e2:4e:6a:9e:fd:6b:56:e2:3f:a4:f8:9c:82:99:
ec:40:dd:74:a2:29:5a:04:97:c7:d9:03:53:bd:91:a1:4f:87:
b3:65:79:03:bc:11:cd:39:71:b7:15:4e:47:38:b7:90:d7:b3:
0f:ed:37:a6:46:6d:68:22:e0:7a:04:1a:0e:8a:a3:ea:ff:67:
e0:d8:bc:28:75:dd:f3:ba:49:e7:ee:44:30:64:32:fe:e6:4c:
bd:8a:71:5f:57:fb:3c:cd:64:68:aa:0a:a0:71:49:f0:e3:2d:
57:1f:53:45:52:90:82:15:fc:e3:97:a9:6f:9c:a7:56:66:f1:
55:73:64:db:87:87:38:51:f1:9b:45:04:0e:47:9f:62:48:c1:
9b:2f:22:ca:0c:9e:20:1c:5b:b0:fe:e7:72:2b:25:64:26:15:
16:f0:d4:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:35:19 2024 by rpki-client on console-ams.rpki-client.org