Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/mG1bGxHLl7iyYyCYEUNXrl7TYrw.roa
File: mG1bGxHLl7iyYyCYEUNXrl7TYrw.roa (raw, json)
Hash identifier: 9MmXhLBmGBUcy8uWpFOtW+Ahou/UqZhP51DKLqYwPGI=
Subject key identifier: 98:6D:5B:1B:11:CB:97:B8:B2:63:20:98:11:43:57:AE:5E:D3:62:BC
Certificate issuer: /CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Certificate serial: 0190A66067E7F098CE9B8592ED5BD8141684
Authority key identifier: BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/mG1bGxHLl7iyYyCYEUNXrl7TYrw.roa
Signing time: Fri 12 Jul 2024 09:57:34 +0000
ROA not before: Fri 12 Jul 2024 09:57:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206092
IP address blocks: 185.118.78.0/24 maxlen: 24
193.68.85.0/24 maxlen: 24
193.68.91.0/24 maxlen: 24
193.68.95.0/24 maxlen: 24
213.21.229.0/24 maxlen: 24
213.21.233.0/24 maxlen: 24
213.21.246.0/24 maxlen: 24
213.21.247.0/24 maxlen: 24
213.21.250.0/24 maxlen: 24
213.21.251.0/24 maxlen: 24
213.21.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:a6:60:67:e7:f0:98:ce:9b:85:92:ed:5b:d8:14:16:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Validity
Not Before: Jul 12 09:57:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=986d5b1b11cb97b8b2632098114357ae5ed362bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:40:e5:17:b4:59:fd:42:ce:5a:52:6f:a8:05:
a2:72:16:85:07:05:ec:29:34:9c:e4:75:6b:69:d1:
ce:c1:af:c3:f7:79:7b:5c:31:76:c2:c6:74:74:e9:
7c:4d:da:6c:6b:f6:c0:84:30:26:8a:32:1b:47:93:
2e:eb:25:c3:ae:54:85:9c:33:07:6f:63:8f:96:5e:
4d:4e:06:62:e2:4e:cd:b7:23:7c:ba:42:f1:10:f7:
c5:c2:cf:07:d0:88:40:60:63:14:57:ff:0f:83:49:
79:f6:6e:42:b8:45:bc:9a:5d:c1:e6:f5:a2:da:96:
08:77:3b:71:a0:b3:8b:36:b5:b1:0d:dd:5a:c9:42:
b6:bc:85:a7:56:19:8c:bb:55:66:bd:8a:88:20:a5:
66:0f:5f:16:a9:af:5e:1c:40:6d:ff:af:72:37:bf:
13:c6:50:3b:87:48:04:bf:4a:1c:c8:d4:a0:1d:db:
84:e8:fe:7d:95:45:a5:c3:80:88:6d:f3:9f:9b:da:
ba:f0:a7:77:95:b2:ba:0d:97:b5:d7:bf:04:32:d7:
07:d7:af:82:90:07:c5:e5:3a:b9:89:db:db:49:47:
aa:16:88:80:19:c3:8d:76:47:aa:15:2f:c3:0c:31:
3c:26:aa:a8:9a:a3:fa:f2:52:cb:fd:2d:35:9a:71:
e4:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:6D:5B:1B:11:CB:97:B8:B2:63:20:98:11:43:57:AE:5E:D3:62:BC
X509v3 Authority Key Identifier:
keyid:BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/mG1bGxHLl7iyYyCYEUNXrl7TYrw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.118.78.0/24
193.68.85.0/24
193.68.91.0/24
193.68.95.0/24
213.21.229.0/24
213.21.233.0/24
213.21.246.0/23
213.21.250.0/23
213.21.254.0/24
Signature Algorithm: sha256WithRSAEncryption
46:9f:21:06:6d:68:bb:d5:65:12:bd:92:12:a7:23:c5:0a:68:
2c:c8:b8:33:ed:3c:07:77:11:ee:66:2e:85:ec:fe:32:42:e2:
cc:a3:bd:2d:b2:c8:34:d1:22:1f:04:cb:d4:b4:c5:3e:b2:b7:
63:04:a7:50:dd:ba:3c:73:d6:e1:fb:0f:af:b7:d1:1e:8e:82:
71:df:79:9b:5e:c2:e5:ec:f0:ee:a8:ef:f9:07:f9:ec:c3:4a:
36:2f:c5:30:82:6b:f3:d4:0f:ab:7d:17:5d:3d:fd:15:be:2c:
b6:2c:c6:bf:54:46:33:14:96:e3:3b:fd:5e:7f:0f:e5:56:26:
8f:f7:80:22:e0:aa:49:f3:b0:47:da:5d:de:33:71:6f:c6:88:
d1:7c:b2:7a:aa:8f:19:4b:e1:50:fc:9a:06:58:72:a1:93:64:
e5:79:8f:ae:f8:f6:df:00:5b:c6:a1:0a:a3:55:e7:5b:69:28:
c2:47:f1:14:f2:13:37:92:0a:71:7b:cc:b3:bf:75:8a:e1:1e:
60:b4:28:78:8a:6d:68:ec:c5:a9:3f:e8:94:40:ea:78:60:d8:
30:07:82:60:0e:f7:0a:1b:ab:31:e3:cc:58:99:75:35:b7:32:
74:ab:20:c2:b4:47:45:db:50:ec:31:08:bd:9d:7d:01:7c:7c:
54:2c:25:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:31:20 2024 by rpki-client on console-ams.rpki-client.org