Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/m6CCT-4rIF_PfBsuoIrEQBvhI3k.roa
File: m6CCT-4rIF_PfBsuoIrEQBvhI3k.roa (raw, json)
Hash identifier: d9SGPKv6ld/Fq1hflRtxG7v/80aw3Orlr0kM57c2CPo=
Subject key identifier: 9B:A0:82:4F:EE:2B:20:5F:CF:7C:1B:2E:A0:8A:C4:40:1B:E1:23:79
Certificate issuer: /CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Certificate serial: 0192DC82DF814C359A81D836BA8CAA28F610
Authority key identifier: 64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/m6CCT-4rIF_PfBsuoIrEQBvhI3k.roa
Signing time: Wed 30 Oct 2024 08:20:17 +0000
ROA not before: Wed 30 Oct 2024 08:20:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50261
IP address blocks: 37.220.128.0/20 maxlen: 20
77.111.112.0/22 maxlen: 22
77.111.124.0/22 maxlen: 22
77.111.124.0/24 maxlen: 24
77.111.127.0/24 maxlen: 24
80.64.64.0/21 maxlen: 21
80.64.72.0/21 maxlen: 21
109.74.48.0/20 maxlen: 20
194.152.130.0/24 maxlen: 24
194.152.131.0/24 maxlen: 24
194.152.133.0/24 maxlen: 24
194.152.134.0/24 maxlen: 24
194.152.135.0/24 maxlen: 24
194.152.136.0/24 maxlen: 24
194.152.138.0/24 maxlen: 24
194.152.143.0/24 maxlen: 24
194.152.144.0/24 maxlen: 24
194.152.145.0/24 maxlen: 24
194.152.146.0/24 maxlen: 24
194.152.149.0/24 maxlen: 24
194.152.152.0/24 maxlen: 24
2a02:d400::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 05:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:dc:82:df:81:4c:35:9a:81:d8:36:ba:8c:aa:28:f6:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Validity
Not Before: Oct 30 08:20:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9ba0824fee2b205fcf7c1b2ea08ac4401be12379
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:14:34:3a:2f:86:31:ce:ab:7c:cd:0e:3d:d5:
96:70:7b:0e:b7:0b:1b:00:ae:97:f4:76:4d:16:83:
4c:49:fd:8d:a9:98:a1:8d:76:ac:93:79:24:f1:ac:
ac:25:45:14:06:c3:67:86:6e:a0:a6:30:73:6b:62:
77:eb:fe:a8:df:fd:75:c9:e9:da:f3:bc:7a:7b:4f:
34:d8:a9:a4:cc:13:28:9c:a8:53:7c:01:d5:19:c3:
e1:0b:99:24:94:d8:bb:ba:14:5b:c7:f5:7e:41:1c:
e4:4f:03:1c:31:38:d1:62:2d:8b:b9:fe:f0:a2:a5:
bb:12:cb:12:47:62:7c:ba:10:6a:44:a5:4d:ef:8d:
b1:67:be:bc:0a:57:44:6d:83:72:7c:98:b0:bc:12:
ac:a7:4a:62:63:a5:82:99:4f:66:fa:85:7a:34:42:
f1:2a:de:0a:88:b3:e4:00:a5:63:72:46:96:80:fa:
8a:cc:1c:c3:69:48:b6:95:f7:d9:da:b1:f5:00:76:
c1:45:8e:ab:1e:0b:8f:9c:5d:df:c6:02:c0:c1:69:
a7:e5:78:72:ae:cc:d0:14:cd:de:13:25:cb:02:89:
b5:bd:c9:98:c0:ad:41:71:a0:8f:e4:09:f0:96:c1:
f8:0b:76:0f:4e:83:97:9a:7b:6b:30:de:de:56:bb:
fa:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:A0:82:4F:EE:2B:20:5F:CF:7C:1B:2E:A0:8A:C4:40:1B:E1:23:79
X509v3 Authority Key Identifier:
keyid:64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/m6CCT-4rIF_PfBsuoIrEQBvhI3k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.220.128.0/20
77.111.112.0/22
77.111.124.0/22
80.64.64.0/20
109.74.48.0/20
194.152.130.0/23
194.152.133.0-194.152.136.255
194.152.138.0/24
194.152.143.0-194.152.146.255
194.152.149.0/24
194.152.152.0/24
IPv6:
2a02:d400::/29
Signature Algorithm: sha256WithRSAEncryption
88:f1:af:b1:2d:7f:e5:dd:56:e3:56:53:c5:39:89:a2:5a:2b:
d8:70:41:88:ad:50:9b:b6:94:74:66:f9:dc:41:f7:20:cc:4f:
3c:33:ed:94:71:56:a5:2f:e3:02:85:ff:7a:0a:23:64:e0:d7:
81:cc:7e:5c:75:1b:f3:36:b6:45:fc:be:ea:d9:1a:b7:4b:5a:
32:95:d3:12:e8:98:9a:e0:89:32:92:0b:7c:a9:78:e7:d2:df:
64:53:ac:a4:2d:57:72:05:50:ae:dd:6f:63:fd:1f:39:f4:88:
13:aa:5f:7e:a1:b8:3f:86:2c:ad:0f:76:8e:b4:7f:c5:d4:f3:
be:63:a4:28:a1:74:9b:2d:0a:12:96:71:9c:bf:ea:55:2d:11:
57:77:cd:b4:c5:be:69:0c:e6:c5:03:cb:da:64:76:51:8d:5d:
35:3f:b8:2d:22:da:2c:36:97:63:c3:c1:e3:26:71:bf:9d:8f:
6f:04:c8:73:bf:77:ce:69:82:35:9a:ec:ce:6a:c7:b4:78:ba:
c4:85:3d:03:6f:1a:f2:04:04:6c:13:d3:1e:7f:23:b1:f7:fa:
07:4a:6d:3a:13:12:18:d7:37:fe:86:31:e4:c4:89:44:31:d6:
76:05:bd:9a:6d:be:82:ff:b4:81:6e:5b:a4:5e:ba:0c:1c:4c:
4a:a2:b1:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:03:54 2024 by rpki-client on console-fra.rpki-client.org