Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/ZJjluUUTQC-_2TyELPtD3pDQLcM.roa
File: ZJjluUUTQC-_2TyELPtD3pDQLcM.roa (raw, json)
Hash identifier: wBexZA6cCNLoayIuLXEUpzZuVXrQ9EFE6AxcTFcOh5Q=
Subject key identifier: 64:98:E5:B9:45:13:40:2F:BF:D9:3C:84:2C:FB:43:DE:90:D0:2D:C3
Certificate issuer: /CN=f0ff2c6229af763a99f5349a32510df4a4526143
Certificate serial: 01928F698C95C6FAD9B96CBD37992CB8DD94
Authority key identifier: F0:FF:2C:62:29:AF:76:3A:99:F5:34:9A:32:51:0D:F4:A4:52:61:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/ZJjluUUTQC-_2TyELPtD3pDQLcM.roa
Signing time: Tue 15 Oct 2024 09:01:52 +0000
ROA not before: Tue 15 Oct 2024 09:01:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25472
IP address blocks: 37.6.0.0/16 maxlen: 24
46.190.0.0/17 maxlen: 24
62.169.192.0/18 maxlen: 24
79.107.0.0/16 maxlen: 24
80.245.160.0/20 maxlen: 24
81.92.48.0/20 maxlen: 24
84.254.0.0/18 maxlen: 24
91.140.0.0/17 maxlen: 24
109.242.0.0/16 maxlen: 24
176.58.128.0/17 maxlen: 24
185.3.220.0/22 maxlen: 24
188.73.192.0/18 maxlen: 24
2a03:f000::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:8f:69:8c:95:c6:fa:d9:b9:6c:bd:37:99:2c:b8:dd:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0ff2c6229af763a99f5349a32510df4a4526143
Validity
Not Before: Oct 15 09:01:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6498e5b94513402fbfd93c842cfb43de90d02dc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:45:fa:59:da:7d:c8:49:ee:14:b3:ed:30:ae:
bd:3f:62:2f:1f:6b:95:44:b4:88:7f:71:96:e6:62:
91:91:c9:ce:00:d9:12:49:71:ff:9b:66:91:86:69:
ab:9d:02:20:99:0e:2d:37:a2:0e:a1:36:e3:33:f7:
73:3e:72:e9:0f:74:68:27:f0:65:e9:b1:43:2d:b9:
c2:89:b1:5f:82:37:b9:0c:9c:7e:9a:97:3a:ad:16:
26:76:ff:59:56:54:f0:0d:24:bb:1a:dd:bf:de:55:
67:27:cb:8b:2e:86:72:0a:85:cd:f1:13:a3:52:f4:
a1:8a:f9:cb:57:dd:f0:98:75:84:54:e4:c2:a9:5f:
fc:63:1f:9a:3f:92:63:ad:4b:df:c3:fe:e5:34:1a:
c8:76:de:d7:bc:c8:ab:fd:5f:36:b5:ec:d8:fc:78:
21:66:32:90:48:23:50:e8:e3:66:ba:68:fe:50:55:
59:b3:95:ca:8e:b8:1c:a0:5d:08:d8:c3:58:27:c1:
f7:b8:6d:18:44:bd:9c:55:ae:9e:e0:3b:fc:73:49:
79:58:45:2e:8b:ed:f3:f9:c3:cb:8c:6d:a7:77:80:
6e:fe:7f:21:63:b7:4b:09:3b:99:32:3c:5a:55:91:
f6:63:6d:b3:12:6a:db:ab:54:11:ec:3a:25:b2:ba:
42:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:98:E5:B9:45:13:40:2F:BF:D9:3C:84:2C:FB:43:DE:90:D0:2D:C3
X509v3 Authority Key Identifier:
keyid:F0:FF:2C:62:29:AF:76:3A:99:F5:34:9A:32:51:0D:F4:A4:52:61:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/ZJjluUUTQC-_2TyELPtD3pDQLcM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.6.0.0/16
46.190.0.0/17
62.169.192.0/18
79.107.0.0/16
80.245.160.0/20
81.92.48.0/20
84.254.0.0/18
91.140.0.0/17
109.242.0.0/16
176.58.128.0/17
185.3.220.0/22
188.73.192.0/18
IPv6:
2a03:f000::/29
Signature Algorithm: sha256WithRSAEncryption
70:e7:20:16:76:08:68:cf:82:19:c0:aa:28:22:9d:7e:aa:a1:
3e:24:5b:26:a8:48:0f:a6:05:b5:cc:c0:d8:63:b9:08:89:ff:
95:01:fc:c2:23:07:07:eb:6a:10:b5:f7:7e:23:de:de:7b:ee:
30:bf:01:64:e3:6f:8a:f4:b1:9c:b3:5e:72:40:de:26:6a:94:
76:69:c6:a7:31:0b:2d:05:26:96:bb:32:5d:9a:88:c3:0c:42:
15:9d:22:51:85:ae:74:38:67:06:28:e7:e9:a1:58:0c:84:15:
3e:83:ad:83:8a:64:41:3e:2d:9e:94:48:38:3a:c2:3f:61:e2:
ce:33:2f:79:ff:c5:45:1a:c0:4c:87:62:74:0d:5d:d0:1a:68:
20:70:a4:32:78:a2:ef:49:f7:da:e2:ba:2e:d4:a6:49:39:31:
55:5c:80:6e:cb:ed:a2:7c:c6:69:49:c3:85:94:5b:7f:49:5f:
e9:8e:c6:d1:3f:ae:97:c8:da:75:c2:d0:85:e8:26:f0:05:ea:
c9:52:a2:62:d4:8c:9f:fd:85:2a:d8:a1:a3:18:ee:92:e3:ef:
bb:b2:14:7c:45:13:24:c4:ee:e2:a9:44:7a:bb:9b:ca:68:9f:
a8:4b:97:2d:df:b3:53:d0:6e:78:35:03:6c:df:ae:27:02:e6:
1d:4c:0d:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:38:43 2024 by rpki-client on console-fra.rpki-client.org