Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/8d6fd7-1cb3-413c-a32b-2ef447e1b08c/1/rYSaOERSRDpbOm-wlrpWawWDuFQ.roa
File: rYSaOERSRDpbOm-wlrpWawWDuFQ.roa (raw, json)
Hash identifier: 9gWE1IEH8IZRzr8nV0PkG+Ypm6L4+DtkXlCyqG2taLM=
Subject key identifier: AD:84:9A:38:44:52:44:3A:5B:3A:6F:B0:96:BA:56:6B:05:83:B8:54
Certificate issuer: /CN=db239685409f64ba1c3a54a8ef141c924e71d892
Certificate serial: 0190DA87BAD14C8D9C415486A0DCC28EE15E
Authority key identifier: DB:23:96:85:40:9F:64:BA:1C:3A:54:A8:EF:14:1C:92:4E:71:D8:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2yOWhUCfZLocOlSo7xQckk5x2JI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/8d6fd7-1cb3-413c-a32b-2ef447e1b08c/1/rYSaOERSRDpbOm-wlrpWawWDuFQ.roa
Signing time: Mon 22 Jul 2024 13:00:46 +0000
ROA not before: Mon 22 Jul 2024 13:00:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8426
IP address blocks: 31.3.136.0/21 maxlen: 21
46.18.128.0/21 maxlen: 21
62.240.224.0/19 maxlen: 19
79.99.32.0/21 maxlen: 21
89.185.32.0/19 maxlen: 19
91.208.181.0/24 maxlen: 24
94.198.144.0/21 maxlen: 21
95.131.136.0/21 maxlen: 24
146.185.40.0/21 maxlen: 24
185.7.36.0/22 maxlen: 24
185.29.40.0/22 maxlen: 22
185.88.104.0/22 maxlen: 22
185.93.36.0/22 maxlen: 22
194.146.172.0/22 maxlen: 22
212.43.192.0/18 maxlen: 18
2001:a70::/32 maxlen: 32
2a01:4580::/29 maxlen: 29
2a02:1f8::/32 maxlen: 32
2a02:c70::/32 maxlen: 32
2a02:2328::/32 maxlen: 32
2a03:7300::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/8d6fd7-1cb3-413c-a32b-2ef447e1b08c/1/2yOWhUCfZLocOlSo7xQckk5x2JI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/8d6fd7-1cb3-413c-a32b-2ef447e1b08c/1/2yOWhUCfZLocOlSo7xQckk5x2JI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2yOWhUCfZLocOlSo7xQckk5x2JI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:da:87:ba:d1:4c:8d:9c:41:54:86:a0:dc:c2:8e:e1:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db239685409f64ba1c3a54a8ef141c924e71d892
Validity
Not Before: Jul 22 13:00:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ad849a384452443a5b3a6fb096ba566b0583b854
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:3d:cf:38:57:5f:ce:a9:55:55:e9:c8:13:d6:
a8:27:12:3e:22:0d:c3:64:ad:07:ee:e2:a9:6f:33:
66:a7:93:6d:a8:84:64:64:e9:3b:fc:39:45:e8:91:
42:05:b9:23:20:c3:24:25:5f:d0:cb:cb:96:40:d4:
4e:ab:0a:76:21:2d:a3:62:88:93:6a:56:97:5b:af:
94:87:e3:e3:86:8b:13:1d:e6:97:fe:fa:70:db:5f:
e3:f6:20:1a:56:ed:5f:b9:64:e2:c7:1f:27:18:1d:
17:43:18:47:f8:3e:3f:49:2a:cd:50:33:e8:ef:9a:
c8:39:7d:99:0b:fb:35:a8:89:74:75:1a:f6:c8:a3:
d8:07:65:62:e5:bd:61:43:7e:e9:b0:7d:2b:ba:a8:
70:8b:5a:8e:9f:81:b4:c2:8f:7c:a9:1b:5c:05:0e:
6d:88:24:c9:1f:86:b5:bb:05:04:73:74:7c:f0:c2:
0b:dc:98:0f:45:21:19:f5:81:8b:b2:c5:72:12:92:
e5:0a:bc:1b:f3:14:dd:27:3e:59:bb:45:09:28:e5:
ed:34:95:71:e4:90:0c:94:22:ab:98:13:b3:d2:f6:
a7:97:d5:d5:50:dd:c7:cb:e1:c4:72:bb:aa:d3:d1:
38:4e:b0:86:32:59:2d:82:0b:3e:16:4f:18:18:33:
20:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:84:9A:38:44:52:44:3A:5B:3A:6F:B0:96:BA:56:6B:05:83:B8:54
X509v3 Authority Key Identifier:
keyid:DB:23:96:85:40:9F:64:BA:1C:3A:54:A8:EF:14:1C:92:4E:71:D8:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2yOWhUCfZLocOlSo7xQckk5x2JI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8d6fd7-1cb3-413c-a32b-2ef447e1b08c/1/rYSaOERSRDpbOm-wlrpWawWDuFQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8d6fd7-1cb3-413c-a32b-2ef447e1b08c/1/2yOWhUCfZLocOlSo7xQckk5x2JI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.3.136.0/21
46.18.128.0/21
62.240.224.0/19
79.99.32.0/21
89.185.32.0/19
91.208.181.0/24
94.198.144.0/21
95.131.136.0/21
146.185.40.0/21
185.7.36.0/22
185.29.40.0/22
185.88.104.0/22
185.93.36.0/22
194.146.172.0/22
212.43.192.0/18
IPv6:
2001:a70::/32
2a01:4580::/29
2a02:1f8::/32
2a02:c70::/32
2a02:2328::/32
2a03:7300::/32
Signature Algorithm: sha256WithRSAEncryption
38:e0:52:42:c2:8f:49:bc:50:2a:64:00:ef:9f:ce:7c:cf:51:
1f:35:fb:9e:88:96:69:f3:49:be:e2:08:78:d4:69:30:58:13:
5e:15:94:e4:65:24:14:29:3c:e1:f8:69:b6:1c:7b:d4:c7:2e:
2b:7c:eb:46:c2:03:6a:34:85:ce:55:c5:72:c0:cf:ca:eb:d7:
7a:a9:6d:78:3c:a3:0a:04:cf:af:8f:48:15:e9:d0:d1:0a:71:
87:ce:04:0d:04:6b:99:ad:51:98:4b:1f:ec:67:6f:29:86:a2:
eb:e4:2b:5f:ee:d5:97:bc:62:5c:03:f5:bd:6a:e6:fc:d6:13:
76:47:4d:34:7e:89:9e:7f:5a:02:64:a3:94:72:91:f9:3d:c1:
65:e3:ba:03:9d:2c:3d:68:c0:d5:93:f3:91:73:bf:9c:6c:ed:
cf:fc:38:73:3f:b3:27:4a:be:0b:4f:a3:1c:23:2e:b5:03:14:
a2:41:65:d4:56:12:3d:48:ce:58:98:bd:1e:d5:9f:47:1a:27:
f9:57:c3:6c:73:12:09:41:75:15:bd:ba:fa:62:9e:9c:5a:73:
61:1a:0f:7c:f1:1d:a0:06:b9:b1:87:24:88:d5:6d:01:fb:84:
eb:6e:b6:49:4a:73:8d:20:61:57:82:bc:12:93:bf:b8:71:43:
3d:43:02:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 21:16:02 2024 by rpki-client on console-fra.rpki-client.org