Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/ngKcR3T7_oMmgJGib6Idz2NccNk.roa
File: ngKcR3T7_oMmgJGib6Idz2NccNk.roa (raw, json)
Hash identifier: BhlfKNC3A6JNIaaMkJj+gLaTEPSgDlF/0+WUJ1Ubp98=
Subject key identifier: 9E:02:9C:47:74:FB:FE:83:26:80:91:A2:6F:A2:1D:CF:63:5C:70:D9
Certificate issuer: /CN=09cd218abcdf66e79500ab913cd21cf06e405d4e
Certificate serial: 018CC5DC17AC8C60385B2A288DFCD6CE90DC
Authority key identifier: 09:CD:21:8A:BC:DF:66:E7:95:00:AB:91:3C:D2:1C:F0:6E:40:5D:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cc0hirzfZueVAKuRPNIc8G5AXU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/ngKcR3T7_oMmgJGib6Idz2NccNk.roa
Signing time: Mon 01 Jan 2024 16:29:44 +0000
ROA not before: Mon 01 Jan 2024 16:29:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35753
IP address blocks: 82.167.208.0/20 maxlen: 20
80.240.64.0/20 maxlen: 20
82.167.224.0/21 maxlen: 21
82.167.232.0/21 maxlen: 21
82.167.240.0/22 maxlen: 22
82.167.244.0/22 maxlen: 22
82.167.252.0/23 maxlen: 23
82.167.250.0/23 maxlen: 23
82.167.248.0/24 maxlen: 24
82.167.249.0/24 maxlen: 24
82.167.152.0/22 maxlen: 22
82.167.148.0/22 maxlen: 22
82.167.156.0/22 maxlen: 22
82.167.160.0/22 maxlen: 22
82.167.164.0/22 maxlen: 22
82.167.172.0/22 maxlen: 22
82.167.168.0/22 maxlen: 22
82.167.180.0/22 maxlen: 22
82.167.180.0/23 maxlen: 23
82.167.192.0/20 maxlen: 20
82.167.192.0/18 maxlen: 18
82.167.255.0/24 maxlen: 24
82.167.254.0/24 maxlen: 24
82.167.254.0/23 maxlen: 23
82.167.0.0/17 maxlen: 17
82.167.0.0/16 maxlen: 16
82.167.96.0/22 maxlen: 22
82.167.92.0/22 maxlen: 22
82.167.104.0/22 maxlen: 22
82.167.100.0/22 maxlen: 22
82.167.108.0/22 maxlen: 22
82.167.112.0/22 maxlen: 22
82.167.116.0/22 maxlen: 22
82.167.124.0/22 maxlen: 22
82.167.120.0/22 maxlen: 22
82.167.128.0/19 maxlen: 19
82.167.144.0/22 maxlen: 22
82.167.64.0/22 maxlen: 22
82.167.68.0/22 maxlen: 22
82.167.76.0/22 maxlen: 22
82.167.72.0/22 maxlen: 22
82.167.80.0/22 maxlen: 22
82.167.84.0/22 maxlen: 22
82.167.88.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cc0hirzfZueVAKuRPNIc8G5AXU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 May 2024 14:49:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:17:ac:8c:60:38:5b:2a:28:8d:fc:d6:ce:90:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09cd218abcdf66e79500ab913cd21cf06e405d4e
Validity
Not Before: Jan 1 16:29:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9e029c4774fbfe83268091a26fa21dcf635c70d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f3:71:5e:ee:e7:54:bd:f4:d5:02:83:fc:e7:
ae:7f:94:a8:40:e8:e6:1a:40:79:aa:fa:e6:1f:59:
dc:e4:e2:4c:2a:2a:6c:48:20:e5:ed:8b:45:0a:ef:
bb:3f:fa:65:3a:90:ff:b8:2a:c1:0d:9f:86:66:b6:
75:14:c6:87:bd:02:5f:bf:77:f8:91:16:db:3d:ea:
76:c0:ed:64:27:1e:cb:e8:88:10:4e:1e:b2:7d:fd:
05:22:aa:1f:f0:30:f7:95:8e:8c:52:90:d2:7f:62:
a5:37:da:43:cc:45:58:13:26:18:79:d7:e6:4e:4a:
61:a5:6e:21:d0:77:d2:48:fb:6d:09:1f:26:25:5f:
dc:f5:9c:bc:e4:1c:d5:f4:6e:8e:c0:38:24:84:6d:
af:8b:c7:39:a7:c1:e3:c7:c0:e9:59:55:fa:7c:2b:
4a:f7:35:f0:14:dc:3f:ee:29:c9:62:00:a6:e7:79:
93:46:ff:e0:0a:50:ba:c4:c7:84:fc:c5:a0:e6:9b:
5f:2f:37:81:58:a4:90:0b:c3:23:ec:88:6b:e3:db:
6c:57:2a:b0:3b:40:74:ad:ef:94:fe:81:70:5d:61:
39:58:2c:db:c3:d6:ea:32:d3:18:c2:77:74:f5:f0:
5a:8c:06:ed:33:4b:98:d1:cc:54:69:3a:2f:41:12:
fd:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:02:9C:47:74:FB:FE:83:26:80:91:A2:6F:A2:1D:CF:63:5C:70:D9
X509v3 Authority Key Identifier:
keyid:09:CD:21:8A:BC:DF:66:E7:95:00:AB:91:3C:D2:1C:F0:6E:40:5D:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cc0hirzfZueVAKuRPNIc8G5AXU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/ngKcR3T7_oMmgJGib6Idz2NccNk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.240.64.0/20
82.167.0.0/16
Signature Algorithm: sha256WithRSAEncryption
90:49:34:7a:c6:53:0f:9b:bf:d8:e6:ac:dc:d3:95:4f:0b:92:
13:78:00:80:e2:01:0f:c0:dc:f7:24:ab:17:ab:a8:c4:e9:4d:
43:75:86:16:9d:de:37:b3:06:82:95:70:a2:80:67:3d:5c:2f:
d3:11:a0:cb:29:db:4e:ff:e8:00:c2:16:52:2d:2f:df:f8:36:
69:d2:9f:90:ed:31:1e:20:f8:07:dd:0b:81:9b:7e:d8:3b:6e:
8c:3f:80:3e:b6:f8:47:05:c5:32:a3:5b:33:1b:b8:5e:f6:be:
41:88:2f:32:04:c0:60:cc:b2:20:a7:b8:33:0a:b6:d1:0a:57:
22:73:79:94:71:2f:cf:d9:0d:e6:d6:9b:b3:f8:1f:7c:51:60:
93:49:12:1d:3d:d2:f4:99:03:ed:c8:a5:d5:78:c2:52:28:1f:
86:00:1b:33:05:ea:67:df:47:1c:ee:bb:2a:3b:b4:96:97:92:
ab:fe:be:d6:3a:01:6f:3c:b6:61:d0:25:df:46:bc:03:af:f7:
68:c5:e1:de:e5:0c:6f:17:af:d9:93:94:80:2f:87:0d:bb:94:
80:b8:c2:eb:04:92:9a:9c:1b:11:c0:0c:b9:e2:41:6a:fa:ba:
f5:b7:74:ea:d7:12:c6:da:a4:54:80:43:2a:1d:58:46:e7:57:
64:e4:cc:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 21:27:23 2024 by rpki-client on console-ams.rpki-client.org