Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/mJ08S0v-mE3_C008SDsInqyyJEg.roa
File: mJ08S0v-mE3_C008SDsInqyyJEg.roa (raw, json)
Hash identifier: ZFQyI9Loh/8SAlfG5h6A/oxwjPurB5i2idZ8FzBTTog=
Subject key identifier: 98:9D:3C:4B:4B:FE:98:4D:FF:0B:4D:3C:48:3B:08:9E:AC:B2:24:48
Certificate issuer: /CN=75e05bc21b2a6f1033711ffca6491c6c30ce5a4a
Certificate serial: 01932F958B7382D4A60C0DF7430C356A44D3
Authority key identifier: 75:E0:5B:C2:1B:2A:6F:10:33:71:1F:FC:A6:49:1C:6C:30:CE:5A:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/deBbwhsqbxAzcR_8pkkcbDDOWko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/mJ08S0v-mE3_C008SDsInqyyJEg.roa
Signing time: Fri 15 Nov 2024 11:29:09 +0000
ROA not before: Fri 15 Nov 2024 11:29:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12956
IP address blocks: 2.57.224.0/22 maxlen: 22
5.53.0.0/21 maxlen: 21
5.255.144.0/21 maxlen: 21
45.135.52.0/22 maxlen: 22
80.76.8.0/21 maxlen: 21
81.173.104.0/21 maxlen: 21
84.16.0.0/19 maxlen: 19
89.32.176.0/21 maxlen: 21
94.142.96.0/19 maxlen: 19
103.244.236.0/22 maxlen: 22
176.52.248.0/21 maxlen: 21
185.43.180.0/22 maxlen: 22
185.153.168.0/22 maxlen: 22
185.190.8.0/22 maxlen: 22
185.210.28.0/22 maxlen: 22
188.214.148.0/23 maxlen: 23
193.36.134.0/23 maxlen: 23
213.140.32.0/19 maxlen: 19
2001:1498::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/deBbwhsqbxAzcR_8pkkcbDDOWko.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/deBbwhsqbxAzcR_8pkkcbDDOWko.mft
rsync://rpki.ripe.net/repository/DEFAULT/deBbwhsqbxAzcR_8pkkcbDDOWko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:2f:95:8b:73:82:d4:a6:0c:0d:f7:43:0c:35:6a:44:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75e05bc21b2a6f1033711ffca6491c6c30ce5a4a
Validity
Not Before: Nov 15 11:29:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=989d3c4b4bfe984dff0b4d3c483b089eacb22448
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:f9:63:8b:db:65:2b:6e:3e:f6:ff:d9:b0:62:
25:64:71:e2:2a:a9:1b:44:a1:c7:46:6d:44:04:fe:
85:b5:41:5e:bf:ed:c3:91:0f:21:b0:9b:98:8e:e5:
59:0b:3f:39:a5:28:8b:70:7a:e7:94:64:7c:99:45:
75:74:fd:b9:17:72:32:8d:41:dc:1b:7b:af:77:2d:
95:30:3f:32:9f:b4:13:0c:be:28:52:5a:72:b3:33:
aa:96:36:94:80:14:cf:b4:ec:bc:54:d9:65:83:9f:
9c:2a:bf:4b:92:96:91:b2:1b:71:80:4c:dc:44:05:
f1:47:ee:65:ec:f1:d6:15:4b:e0:d2:48:84:26:79:
3d:68:39:0a:32:ac:18:69:0f:a6:90:51:62:da:0b:
34:95:94:02:80:42:7e:92:6c:84:82:3e:bf:67:32:
69:b2:13:da:21:17:d2:19:a9:86:99:01:58:c9:4f:
a3:a4:f6:17:84:b1:94:b0:79:38:d5:0a:f3:47:61:
54:fc:df:5d:28:70:e3:a0:64:c4:9e:ca:90:f8:d1:
b0:bb:cc:0a:11:61:9a:a8:fe:05:c2:80:17:ff:fd:
dd:f5:8c:c5:f8:35:b6:b0:cb:45:78:b8:10:27:ab:
3e:e0:d3:f1:54:41:04:90:79:84:4b:86:55:1a:53:
ed:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:9D:3C:4B:4B:FE:98:4D:FF:0B:4D:3C:48:3B:08:9E:AC:B2:24:48
X509v3 Authority Key Identifier:
keyid:75:E0:5B:C2:1B:2A:6F:10:33:71:1F:FC:A6:49:1C:6C:30:CE:5A:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/deBbwhsqbxAzcR_8pkkcbDDOWko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/mJ08S0v-mE3_C008SDsInqyyJEg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/deBbwhsqbxAzcR_8pkkcbDDOWko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.224.0/22
5.53.0.0/21
5.255.144.0/21
45.135.52.0/22
80.76.8.0/21
81.173.104.0/21
84.16.0.0/19
89.32.176.0/21
94.142.96.0/19
103.244.236.0/22
176.52.248.0/21
185.43.180.0/22
185.153.168.0/22
185.190.8.0/22
185.210.28.0/22
188.214.148.0/23
193.36.134.0/23
213.140.32.0/19
IPv6:
2001:1498::/32
Signature Algorithm: sha256WithRSAEncryption
49:b4:d7:f1:6e:f1:48:1b:c5:97:60:af:27:ab:e4:f5:62:4d:
c0:15:c6:1f:26:e9:27:de:41:c2:14:c3:71:9f:0e:35:3b:9a:
88:c0:a5:81:a1:0d:6c:05:8f:ec:9a:5d:dd:1f:ff:9d:76:2c:
9e:d1:2d:8e:bd:7e:01:dc:3f:65:a9:d3:3a:f1:1e:ca:ef:cc:
0d:c4:60:00:94:0a:d6:a4:93:8d:6e:52:82:81:f5:5a:9a:98:
b3:95:03:37:2b:51:b0:9d:16:11:6c:5f:00:5d:d4:cb:4f:5d:
9f:fe:42:a1:9b:64:f3:d7:d5:cc:0f:e9:01:94:f1:66:ea:ad:
10:af:00:f3:f5:4d:69:1e:35:dd:c8:a0:33:d9:6f:a4:32:b9:
a5:a4:c4:c3:77:b5:9b:24:df:a7:5c:88:39:48:2e:10:df:cf:
60:c2:66:30:19:f3:90:f7:b7:b2:70:96:f6:30:55:eb:d3:a3:
f0:07:fa:ba:5d:f8:29:be:6b:ed:6b:5c:9d:5b:9e:09:2d:15:
c2:3d:a4:bb:8e:72:c9:44:b5:7d:b0:86:14:1c:70:37:b3:e3:
a5:c6:02:e6:59:7e:b0:b5:c0:77:e1:a6:33:74:df:7f:d3:51:
e0:df:09:f1:d2:18:58:60:45:95:7a:34:de:60:ed:a5:d8:06:
29:a6:ea:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:51:44 2024 by rpki-client on console-fra.rpki-client.org