Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/9izYbCMESJmf_Ut0jBc4XgWww6Q.roa
File: 9izYbCMESJmf_Ut0jBc4XgWww6Q.roa (raw, json)
Hash identifier: RjGJpDpqEgSN16xSWTEQOVIMeZGP8JEXXFO2Yu4OMCQ=
Subject key identifier: F6:2C:D8:6C:23:04:48:99:9F:FD:4B:74:8C:17:38:5E:05:B0:C3:A4
Certificate issuer: /CN=1fa8ac37f9695169627f75e098963396de9638cc
Certificate serial: 0190BF37A916330332EC2C9E3B6E2BD8C9A0
Authority key identifier: 1F:A8:AC:37:F9:69:51:69:62:7F:75:E0:98:96:33:96:DE:96:38:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H6isN_lpUWlif3XgmJYzlt6WOMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/9izYbCMESJmf_Ut0jBc4XgWww6Q.roa
Signing time: Wed 17 Jul 2024 05:43:34 +0000
ROA not before: Wed 17 Jul 2024 05:43:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51728
IP address blocks: 80.66.160.0/20 maxlen: 20
91.190.192.0/21 maxlen: 21
146.66.24.0/21 maxlen: 21
185.40.88.0/22 maxlen: 22
185.40.88.0/24 maxlen: 24
185.40.89.0/24 maxlen: 24
185.40.90.0/24 maxlen: 24
185.40.91.0/24 maxlen: 24
2a00:ac00::/32 maxlen: 32
2a00:ac01::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/H6isN_lpUWlif3XgmJYzlt6WOMw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/H6isN_lpUWlif3XgmJYzlt6WOMw.mft
rsync://rpki.ripe.net/repository/DEFAULT/H6isN_lpUWlif3XgmJYzlt6WOMw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 05:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:bf:37:a9:16:33:03:32:ec:2c:9e:3b:6e:2b:d8:c9:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fa8ac37f9695169627f75e098963396de9638cc
Validity
Not Before: Jul 17 05:43:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f62cd86c230448999ffd4b748c17385e05b0c3a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:2d:2e:cf:bc:89:07:ec:c0:00:77:a2:2b:23:
24:38:47:b4:51:81:39:c7:97:42:43:19:e2:11:29:
29:81:39:22:36:51:b9:0b:cc:07:7e:c7:82:36:58:
f7:83:2f:28:91:ab:03:49:55:11:f8:9c:d2:e5:36:
55:64:71:59:4b:59:3d:84:1a:01:b6:de:bc:ce:01:
10:26:ff:c1:8c:fd:2d:ba:fb:5c:2f:19:61:8f:ec:
6e:8a:15:9f:f3:56:ec:23:c4:3f:45:77:ff:e5:ec:
c7:4b:05:c2:fc:0c:4f:4e:09:bc:1d:db:7a:d9:89:
1a:59:a5:6a:6c:4f:22:1c:24:16:28:49:6f:f2:a2:
00:2f:ee:92:49:27:89:88:d3:a1:ec:ea:11:e9:ad:
af:70:e1:28:24:b9:e8:f5:18:a3:a3:88:30:83:e5:
13:7a:0c:06:3b:6a:42:f5:e2:c5:b0:87:61:59:b1:
41:2f:2d:e8:e3:25:4a:1f:3d:20:23:ac:ed:ad:07:
ea:6d:20:cb:a9:09:36:70:b0:08:36:04:9c:00:1d:
af:90:ee:9e:63:d6:8d:95:d6:47:3a:df:b2:ff:2e:
e2:73:65:04:28:66:1b:53:9d:0e:8b:a6:8a:6a:a4:
d6:fe:a4:8a:cf:07:0c:52:da:88:dc:33:0e:72:51:
17:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:2C:D8:6C:23:04:48:99:9F:FD:4B:74:8C:17:38:5E:05:B0:C3:A4
X509v3 Authority Key Identifier:
keyid:1F:A8:AC:37:F9:69:51:69:62:7F:75:E0:98:96:33:96:DE:96:38:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H6isN_lpUWlif3XgmJYzlt6WOMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/9izYbCMESJmf_Ut0jBc4XgWww6Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/H6isN_lpUWlif3XgmJYzlt6WOMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.66.160.0/20
91.190.192.0/21
146.66.24.0/21
185.40.88.0/22
IPv6:
2a00:ac00::/31
Signature Algorithm: sha256WithRSAEncryption
3a:ef:71:07:3d:f9:d2:66:fb:3e:b5:80:56:7b:a7:9d:7a:52:
af:15:37:1d:ad:96:86:1b:ba:e2:fd:97:f1:16:e2:0b:b9:07:
b5:e2:db:48:93:0f:a3:75:ef:85:08:08:48:75:36:92:81:31:
a9:ba:98:74:8e:4e:cb:8a:0c:12:63:8b:9d:8d:36:a7:45:bc:
1b:ed:e1:ee:03:68:6c:6e:28:17:11:56:a3:4c:a6:b6:a9:fc:
21:ab:ed:c9:0c:ea:29:1d:99:06:70:7c:a4:85:63:e7:93:60:
ce:28:f6:0c:58:ef:29:53:05:ba:7b:59:8c:fe:58:3d:88:0c:
38:2a:67:93:86:bc:e5:9d:e0:cf:0c:3c:7f:de:d8:21:0f:5b:
8a:82:1a:04:8e:ad:ef:83:1f:a0:8a:2d:dd:55:e4:13:60:d0:
3d:ab:ae:4a:d5:99:b4:6b:45:fd:f6:11:59:3b:1d:3d:be:fc:
95:ad:97:80:db:db:40:59:c2:f1:c7:41:64:99:14:79:50:33:
54:c3:dd:59:b5:1e:4f:c4:99:8a:9c:39:53:78:4e:b6:ec:6e:
54:a2:c8:90:30:10:ce:fd:02:98:89:dd:67:c0:13:e4:15:61:
20:3e:29:88:84:03:b6:ee:92:75:61:98:9e:5e:75:ce:92:9f:
b1:a0:7f:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:15:09 2024 by rpki-client on console-fra.rpki-client.org