Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/yZ_zNoLgOjo5xBW6UNKYyURI2IA.roa
File: yZ_zNoLgOjo5xBW6UNKYyURI2IA.roa (raw, json)
Hash identifier: C0nZ43bS2y64hmOcXeEg6Kk/gcQiDHMnmEtGVK456nA=
Subject key identifier: C9:9F:F3:36:82:E0:3A:3A:39:C4:15:BA:50:D2:98:C9:44:48:D8:80
Certificate issuer: /CN=bdfad23e11cf0d24a477594eba09f99acc6f1fff
Certificate serial: 018CC9BCAF909D465C37F6FA6E365CF004A5
Authority key identifier: BD:FA:D2:3E:11:CF:0D:24:A4:77:59:4E:BA:09:F9:9A:CC:6F:1F:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/yZ_zNoLgOjo5xBW6UNKYyURI2IA.roa
Signing time: Tue 02 Jan 2024 10:33:55 +0000
ROA not before: Tue 02 Jan 2024 10:33:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48287
IP address blocks: 185.26.112.0/22 maxlen: 22
109.70.24.0/21 maxlen: 24
91.217.21.0/24 maxlen: 24
91.217.20.0/24 maxlen: 24
89.104.80.0/21 maxlen: 24
178.210.64.0/19 maxlen: 24
89.111.130.0/24 maxlen: 24
89.111.128.0/24 maxlen: 24
89.111.132.0/23 maxlen: 23
31.177.64.0/22 maxlen: 24
89.111.144.0/22 maxlen: 24
195.24.64.0/22 maxlen: 22
195.24.68.0/22 maxlen: 22
195.24.68.0/23 maxlen: 23
195.24.71.0/24 maxlen: 24
195.24.70.0/24 maxlen: 24
185.76.144.0/22 maxlen: 22
91.189.114.0/23 maxlen: 23
91.189.112.0/21 maxlen: 21
91.189.116.0/22 maxlen: 22
31.177.68.0/22 maxlen: 22
31.177.72.0/21 maxlen: 24
31.177.80.0/21 maxlen: 24
89.111.164.0/24 maxlen: 24
31.177.91.0/24 maxlen: 24
31.177.88.0/21 maxlen: 22
2a02:2090:e400::/48 maxlen: 48
2a02:2090:e800::/48 maxlen: 48
2a02:2090:ec00::/48 maxlen: 48
2a02:2090::/48 maxlen: 48
2a02:2090:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:af:90:9d:46:5c:37:f6:fa:6e:36:5c:f0:04:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdfad23e11cf0d24a477594eba09f99acc6f1fff
Validity
Not Before: Jan 2 10:33:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c99ff33682e03a3a39c415ba50d298c94448d880
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:8c:f4:f1:3d:f5:ea:ba:b1:50:8a:4c:3c:4e:
66:a5:fe:76:d6:8e:31:48:4f:f4:65:db:89:f1:58:
b0:50:bb:99:45:5f:27:de:be:39:25:8c:2b:6e:06:
f6:0f:a2:48:48:64:b4:9e:a4:83:ab:bf:6c:68:c8:
13:25:0d:f5:5e:b7:32:e0:12:10:82:b9:d2:5a:d1:
6e:32:a1:ad:7d:a8:c5:90:53:6a:79:43:da:76:79:
73:f5:d3:6d:df:4d:95:27:16:be:21:37:98:35:d9:
e7:b0:10:a4:1c:72:db:30:37:3b:5c:0f:e1:97:fb:
a6:5f:d8:a0:9b:74:a3:62:85:3a:69:f5:34:bd:20:
d3:47:18:d1:70:e3:4d:26:40:ab:7b:eb:ce:c2:87:
da:bc:7d:c6:f8:f8:80:06:46:d5:10:3b:a5:36:d2:
fe:50:42:ca:81:ad:17:92:d1:8c:9e:e2:f4:95:0f:
e7:d4:bf:d9:62:ad:57:30:c8:f1:b2:d6:b6:ab:76:
03:69:0b:6b:c0:7b:5a:b0:34:09:4e:51:a2:6a:8f:
74:6c:87:97:9b:52:5a:ba:3d:c0:74:4f:0f:b6:8d:
68:13:de:b5:a0:d4:b1:7a:58:d4:7f:a2:88:ac:0f:
6b:19:c7:69:a9:2b:55:16:5c:98:68:02:69:93:71:
7c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:9F:F3:36:82:E0:3A:3A:39:C4:15:BA:50:D2:98:C9:44:48:D8:80
X509v3 Authority Key Identifier:
keyid:BD:FA:D2:3E:11:CF:0D:24:A4:77:59:4E:BA:09:F9:9A:CC:6F:1F:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/yZ_zNoLgOjo5xBW6UNKYyURI2IA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.177.64.0/19
89.104.80.0/21
89.111.128.0/24
89.111.130.0/24
89.111.132.0/23
89.111.144.0/22
89.111.164.0/24
91.189.112.0/21
91.217.20.0/23
109.70.24.0/21
178.210.64.0/19
185.26.112.0/22
185.76.144.0/22
195.24.64.0/21
IPv6:
2a02:2090::/47
2a02:2090:e400::/48
2a02:2090:e800::/48
2a02:2090:ec00::/48
Signature Algorithm: sha256WithRSAEncryption
62:53:9b:1f:20:05:17:a6:79:dc:b8:04:bf:43:77:35:a1:c6:
62:47:49:35:dc:1f:af:63:17:a5:b5:f4:6f:ff:31:ee:c7:7c:
7a:18:ab:f9:23:fe:39:b5:db:9b:f1:82:be:30:07:8b:c3:f6:
7d:2b:6e:bf:0d:60:71:ea:3c:3a:59:ad:43:be:7a:36:26:54:
3f:6c:8e:9c:9f:6d:cd:d7:5d:d7:9f:47:f4:ed:20:30:f3:1f:
22:59:8b:08:05:46:bf:33:05:b9:06:8c:5c:24:ec:a8:0a:62:
a2:e1:26:b1:7d:fe:4e:5c:64:fa:20:be:9e:45:2d:2a:1d:e3:
39:91:62:5a:9e:6c:61:b0:82:3d:86:87:08:21:54:bb:d3:5b:
3e:63:5a:7a:60:a2:94:06:10:79:58:c7:ce:18:0e:81:16:bc:
ee:8d:b3:14:3f:83:3d:cd:d7:76:c8:22:99:1f:82:c8:c0:2e:
e8:fd:df:a5:39:3f:cb:04:32:60:30:d5:bd:c3:a1:c9:38:94:
7e:ce:d5:8c:0d:5a:17:bd:a7:36:06:a8:74:31:77:82:51:4b:
62:78:b1:37:51:8d:53:f7:56:ad:89:7d:61:ba:b2:be:4f:ac:
42:b9:eb:b3:ae:35:e0:88:e7:1e:49:c8:d3:25:15:53:53:5f:
a0:4a:44:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 17:20:31 2024 by rpki-client on console-fra.rpki-client.org