Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/TfNKk6d__LvH5w3bCg8u1h9QV0k.roa
File: TfNKk6d__LvH5w3bCg8u1h9QV0k.roa (raw, json)
Hash identifier: js4KoH+zgdrtjCd7xEn6zWYvGEuRm1v/xvuafHAEOX0=
Subject key identifier: 4D:F3:4A:93:A7:7F:FC:BB:C7:E7:0D:DB:0A:0F:2E:D6:1F:50:57:49
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 018CC6B938EBE165ADEAD5174E18A435FF7C
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/TfNKk6d__LvH5w3bCg8u1h9QV0k.roa
Signing time: Mon 01 Jan 2024 20:31:16 +0000
ROA not before: Mon 01 Jan 2024 20:31:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50186
IP address blocks: 151.237.98.0/24 maxlen: 24
151.237.96.0/21 maxlen: 21
151.237.104.0/24 maxlen: 24
151.237.102.0/24 maxlen: 24
151.237.103.0/24 maxlen: 24
151.237.100.0/24 maxlen: 24
151.237.101.0/24 maxlen: 24
151.237.99.0/24 maxlen: 24
151.237.105.0/24 maxlen: 24
151.237.104.0/23 maxlen: 23
151.237.111.0/24 maxlen: 24
151.237.109.0/24 maxlen: 24
151.237.110.0/24 maxlen: 24
151.237.107.0/24 maxlen: 24
151.237.108.0/24 maxlen: 24
151.237.106.0/24 maxlen: 24
151.237.112.0/24 maxlen: 24
151.237.108.0/23 maxlen: 23
151.237.118.0/24 maxlen: 24
151.237.116.0/24 maxlen: 24
151.237.117.0/24 maxlen: 24
151.237.114.0/24 maxlen: 24
151.237.115.0/24 maxlen: 24
151.237.113.0/24 maxlen: 24
151.237.124.0/24 maxlen: 24
151.237.125.0/24 maxlen: 24
151.237.123.0/24 maxlen: 24
151.237.122.0/24 maxlen: 24
151.237.119.0/24 maxlen: 24
151.237.120.0/24 maxlen: 24
151.237.126.0/24 maxlen: 24
151.237.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.mft
rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Jun 2024 01:02:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:38:eb:e1:65:ad:ea:d5:17:4e:18:a4:35:ff:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Jan 1 20:31:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4df34a93a77ffcbbc7e70ddb0a0f2ed61f505749
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:a7:a0:f4:29:9a:db:ed:d0:be:95:0f:02:84:
31:83:be:b6:40:2a:61:c9:d4:36:ab:c5:e3:66:2d:
35:3c:27:3c:c2:b0:f9:49:30:1b:f6:a5:00:49:cb:
1c:6c:34:89:f6:57:91:18:b7:d2:83:fc:01:22:19:
ff:af:dd:75:4e:b0:0a:78:e4:cb:cb:66:73:e7:ec:
6a:23:68:61:67:2e:d7:1d:9c:00:63:4b:09:d5:a3:
32:09:61:eb:98:f3:a3:51:fa:40:97:f9:e3:ff:a0:
cb:ed:f5:77:4d:82:4f:84:b5:19:32:f3:15:6b:d2:
53:18:01:b7:01:97:bf:38:4c:48:0f:65:b4:2f:f7:
32:de:93:77:a2:b7:d6:45:e0:fd:7c:15:78:df:be:
42:5e:92:3f:b2:8a:c1:c3:1f:2d:99:53:fd:cc:b8:
5c:2d:fd:39:4f:13:a6:93:c0:35:05:97:ce:bd:74:
02:80:8a:29:f6:71:a0:f4:e6:1c:a9:b2:83:d7:19:
09:a4:80:ec:66:7a:a7:e7:01:b0:49:7b:f4:6f:a4:
05:83:fd:70:c3:b6:92:3b:0c:d1:ad:2f:39:43:46:
8b:69:1c:86:f9:4c:dd:7d:14:ed:2b:3e:62:8d:ae:
01:e4:f2:41:d3:8f:7b:6f:3e:fd:51:28:fe:32:5d:
25:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:F3:4A:93:A7:7F:FC:BB:C7:E7:0D:DB:0A:0F:2E:D6:1F:50:57:49
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/TfNKk6d__LvH5w3bCg8u1h9QV0k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.237.96.0-151.237.120.255
151.237.122.0-151.237.127.255
Signature Algorithm: sha256WithRSAEncryption
32:68:20:c8:b1:03:ac:40:97:b2:7d:8e:9f:3b:78:60:a7:fd:
f1:ec:14:53:e3:ed:d6:0a:db:55:19:91:fc:29:ae:f8:2f:93:
b8:cd:42:43:42:5f:29:88:cd:db:61:16:f1:22:3d:da:57:c3:
57:73:8f:ed:8d:f1:55:60:6a:8c:2e:d4:a5:5e:69:6e:58:5a:
63:c4:27:88:cf:c3:bc:be:b3:5c:e8:eb:df:1e:15:55:de:48:
fe:06:72:97:1b:e8:1a:e3:4a:9f:d3:fc:34:ed:bc:0c:a7:07:
63:29:2e:47:3f:7f:89:08:a7:c0:e8:54:44:93:a2:05:03:a6:
5f:2b:e3:9e:2d:06:90:3a:ac:d6:d0:56:57:c4:8e:66:93:9a:
4d:56:42:0d:ec:4c:83:e7:cf:29:6f:bc:bd:34:a9:1f:f5:e5:
fd:98:42:af:98:a3:0a:0d:7a:21:a8:40:fc:a4:82:7e:9f:58:
8f:62:49:a3:07:78:92:c3:d0:04:b6:99:a5:d4:08:14:b9:ed:
7e:ee:22:bc:08:9d:e4:bd:23:3e:07:71:e7:e4:dc:30:c3:17:
99:d4:00:77:cf:86:f4:fe:b3:16:5a:9f:3c:7f:4c:94:2c:ab:
ad:8c:d1:ea:86:dc:d7:71:b3:a1:61:5a:d2:35:74:ce:e4:5f:
75:2b:7e:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 10:15:01 2024 by rpki-client on console-fra.rpki-client.org