Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/emJMx8rkHWZvKxtNGqz4lj_BqUY.roa
File: emJMx8rkHWZvKxtNGqz4lj_BqUY.roa (raw, json)
Hash identifier: TOpsXt3ZJJB8Izk1CdvVKcejIwC9F2zgFZ1j0c1A8HQ=
Subject key identifier: 7A:62:4C:C7:CA:E4:1D:66:6F:2B:1B:4D:1A:AC:F8:96:3F:C1:A9:46
Certificate issuer: /CN=bdfad23e11cf0d24a477594eba09f99acc6f1fff
Certificate serial: 018E5726815820138A26C54B346F4560F0D8
Authority key identifier: BD:FA:D2:3E:11:CF:0D:24:A4:77:59:4E:BA:09:F9:9A:CC:6F:1F:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/emJMx8rkHWZvKxtNGqz4lj_BqUY.roa
Signing time: Tue 19 Mar 2024 14:38:45 +0000
ROA not before: Tue 19 Mar 2024 14:38:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39494
IP address blocks: 31.177.85.0/24 maxlen: 24
31.177.86.0/23 maxlen: 24
79.174.72.0/22 maxlen: 22
89.104.64.0/19 maxlen: 19
89.104.76.0/24 maxlen: 24
89.111.128.0/18 maxlen: 18
89.111.144.0/20 maxlen: 20
89.111.160.0/20 maxlen: 24
89.111.176.0/20 maxlen: 20
89.111.176.0/22 maxlen: 22
89.111.177.0/24 maxlen: 24
91.217.21.0/24 maxlen: 24
2a01:d8::/32 maxlen: 48
2a02:2090::/32 maxlen: 48
2a02:2090:e400::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:57:26:81:58:20:13:8a:26:c5:4b:34:6f:45:60:f0:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdfad23e11cf0d24a477594eba09f99acc6f1fff
Validity
Not Before: Mar 19 14:38:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7a624cc7cae41d666f2b1b4d1aacf8963fc1a946
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:43:33:ce:b2:c2:7e:96:6c:05:36:7d:7a:b9:
df:b7:df:9a:4c:7b:c9:e7:b1:32:af:bd:ea:b5:90:
f8:7c:a0:35:95:3a:da:c3:13:42:b6:55:e2:95:18:
da:86:38:60:f9:da:96:b3:ea:ba:cf:c0:e3:54:54:
fd:38:db:7b:81:24:79:e6:d7:c2:d3:17:52:2c:20:
ea:52:e7:a9:d2:8e:24:84:83:44:84:aa:8e:1d:39:
fa:78:35:9d:17:94:f7:b5:49:06:0d:5f:72:3d:c4:
29:a5:fa:4a:a2:16:20:1d:e0:a3:08:2f:12:3b:36:
3e:be:d5:72:51:a8:39:16:a1:5f:75:f7:8c:53:a1:
b6:0b:ea:a5:c6:d7:63:c8:45:cc:e4:73:7d:03:9b:
af:47:20:7b:88:98:b9:9d:88:57:a6:90:5b:c4:cc:
64:b8:1c:a8:4d:b8:8a:aa:9c:24:0d:ad:4f:5e:af:
3d:94:9c:3a:7f:c7:31:ce:7f:88:51:b8:33:e7:35:
c5:c4:a9:43:81:9a:94:35:b7:17:4c:cf:30:a3:36:
0e:af:e6:61:1f:86:35:2e:27:26:8d:1d:2f:60:cb:
15:a9:0b:03:5d:f3:9b:68:d1:90:cc:d7:97:1f:a7:
95:b2:b8:bd:8c:09:81:4a:9a:0f:72:78:bd:22:09:
08:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:62:4C:C7:CA:E4:1D:66:6F:2B:1B:4D:1A:AC:F8:96:3F:C1:A9:46
X509v3 Authority Key Identifier:
keyid:BD:FA:D2:3E:11:CF:0D:24:A4:77:59:4E:BA:09:F9:9A:CC:6F:1F:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/emJMx8rkHWZvKxtNGqz4lj_BqUY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.177.85.0-31.177.87.255
79.174.72.0/22
89.104.64.0/19
89.111.128.0/18
91.217.21.0/24
IPv6:
2a01:d8::/32
2a02:2090::/32
Signature Algorithm: sha256WithRSAEncryption
1e:c4:59:8e:e4:78:9f:5e:2e:2d:81:90:78:43:86:92:27:6e:
2a:c9:83:36:4b:eb:f8:fb:9c:c4:23:a0:f4:96:3a:3a:31:45:
af:21:e3:31:a8:6f:07:22:ad:55:b2:84:09:36:90:16:6c:e6:
a8:48:83:4f:81:88:fb:09:82:05:0f:ad:dc:e5:60:0a:91:4a:
75:f8:70:91:8e:19:43:03:2b:f8:e4:a6:6b:78:9b:b5:84:20:
32:6a:85:d2:07:80:36:02:47:f3:7f:2c:90:0a:9f:1e:fa:5f:
77:99:48:ca:1c:18:38:ac:12:b9:b2:bc:81:bd:e4:0a:73:d9:
e9:4d:25:28:9e:68:c4:55:c3:47:2d:66:b7:2e:5b:49:24:16:
73:79:50:dc:c3:ca:88:d1:4e:b9:85:f7:c2:cd:47:05:b9:3e:
66:59:f0:9e:fa:ee:1e:25:1e:44:81:ec:93:be:8a:31:c8:e1:
7a:ce:d4:b3:2b:93:a8:c1:35:73:58:4e:e0:61:d5:98:24:ed:
d1:55:96:49:09:c4:76:f9:af:55:74:b8:01:12:6d:fb:16:7d:
a5:df:f5:45:f6:f0:4e:44:1d:ce:1d:29:60:b9:89:d4:0e:d7:
90:97:ff:41:45:fb:b5:c0:e0:7b:4b:c6:0c:13:37:b5:06:7a:
59:e9:45:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 17:20:31 2024 by rpki-client on console-fra.rpki-client.org