Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/bf8338-8752-4d55-9c31-0e1b8fea8913/1/kIQFAsnj6E2KivpkqvZVGGD0GAo.roa
File: kIQFAsnj6E2KivpkqvZVGGD0GAo.roa (raw, json)
Hash identifier: qc0ADd+m7siPluAygTyfRtThrN9ZRXrMbnRcFt7ARIQ=
Subject key identifier: 90:84:05:02:C9:E3:E8:4D:8A:8A:FA:64:AA:F6:55:18:60:F4:18:0A
Certificate issuer: /CN=69507f066f2bb0389dd88436074e1426114f2d92
Certificate serial: 018CF2902029DEB0167442018611B0F8864B
Authority key identifier: 69:50:7F:06:6F:2B:B0:38:9D:D8:84:36:07:4E:14:26:11:4F:2D:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aVB_Bm8rsDid2IQ2B04UJhFPLZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/bf8338-8752-4d55-9c31-0e1b8fea8913/1/kIQFAsnj6E2KivpkqvZVGGD0GAo.roa
Signing time: Wed 10 Jan 2024 08:49:40 +0000
ROA not before: Wed 10 Jan 2024 08:49:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210079
IP address blocks: 178.208.68.0/24 maxlen: 24
178.208.71.0/24 maxlen: 24
178.208.70.0/24 maxlen: 24
178.208.69.0/24 maxlen: 24
178.208.95.0/24 maxlen: 24
178.208.94.0/24 maxlen: 24
178.208.92.0/24 maxlen: 24
185.105.111.0/24 maxlen: 24
185.105.110.0/24 maxlen: 24
185.105.109.0/24 maxlen: 24
95.142.38.0/24 maxlen: 24
95.142.37.0/24 maxlen: 24
95.142.36.0/24 maxlen: 24
95.142.35.0/24 maxlen: 24
95.142.43.0/24 maxlen: 24
95.142.42.0/24 maxlen: 24
95.142.40.0/24 maxlen: 24
95.142.39.0/24 maxlen: 24
2.56.89.0/24 maxlen: 24
2.56.88.0/24 maxlen: 24
2a09:c140:3::/48 maxlen: 48
2a09:c140:db::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/bf8338-8752-4d55-9c31-0e1b8fea8913/1/aVB_Bm8rsDid2IQ2B04UJhFPLZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/bf8338-8752-4d55-9c31-0e1b8fea8913/1/aVB_Bm8rsDid2IQ2B04UJhFPLZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/aVB_Bm8rsDid2IQ2B04UJhFPLZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:f2:90:20:29:de:b0:16:74:42:01:86:11:b0:f8:86:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69507f066f2bb0389dd88436074e1426114f2d92
Validity
Not Before: Jan 10 08:49:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=90840502c9e3e84d8a8afa64aaf6551860f4180a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:32:38:63:44:40:7c:39:34:87:79:9e:be:13:
f1:59:99:ef:a9:f1:3c:7d:b1:03:a9:0f:69:fe:cb:
48:7f:06:5c:5a:46:27:41:e6:32:6a:f8:11:51:c1:
c4:e3:01:e7:7d:5f:18:6c:3d:aa:d9:fc:5b:92:e9:
35:5c:0b:f1:ae:83:51:02:d4:72:a5:f4:c1:99:aa:
c4:d5:05:90:6d:fe:a5:31:3a:46:77:09:85:2d:65:
ce:68:b6:b3:a7:dd:53:ff:26:45:b5:04:83:d5:9e:
37:78:7c:78:12:59:01:0a:5e:3f:33:e4:88:37:e5:
e3:d1:3f:15:2f:df:e7:36:02:20:82:26:d0:0b:39:
57:4e:25:4a:55:c7:03:36:6b:b9:84:34:be:cc:2d:
59:83:80:7b:37:43:0a:82:3a:45:56:9b:b7:be:34:
04:40:12:8c:b7:d6:a8:12:07:25:0f:96:a3:7d:b0:
ce:74:b3:4d:3f:a8:f4:28:2e:f0:5a:81:eb:2f:59:
f1:73:1b:c1:21:4d:e0:d8:bb:85:fc:51:7f:ca:0c:
6e:4e:97:af:8b:c7:2c:dd:d5:7f:b8:59:6b:0e:a3:
0f:cb:87:b1:29:96:b5:fb:d0:81:e8:bf:bc:51:1d:
a9:49:98:96:ea:82:f1:8c:36:c8:b2:19:b2:a8:bf:
e7:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:84:05:02:C9:E3:E8:4D:8A:8A:FA:64:AA:F6:55:18:60:F4:18:0A
X509v3 Authority Key Identifier:
keyid:69:50:7F:06:6F:2B:B0:38:9D:D8:84:36:07:4E:14:26:11:4F:2D:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVB_Bm8rsDid2IQ2B04UJhFPLZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bf8338-8752-4d55-9c31-0e1b8fea8913/1/kIQFAsnj6E2KivpkqvZVGGD0GAo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bf8338-8752-4d55-9c31-0e1b8fea8913/1/aVB_Bm8rsDid2IQ2B04UJhFPLZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.88.0/23
95.142.35.0-95.142.40.255
95.142.42.0/23
178.208.68.0/22
178.208.92.0/24
178.208.94.0/23
185.105.109.0-185.105.111.255
IPv6:
2a09:c140:3::/48
2a09:c140:db::/48
Signature Algorithm: sha256WithRSAEncryption
ad:c6:9e:95:6d:1e:2d:cb:e5:02:a3:37:0d:4e:cf:04:77:e6:
87:24:70:8b:86:e1:1d:d8:35:c8:a2:95:06:5a:04:ba:05:a0:
3c:87:53:88:ba:5d:8a:66:4f:17:e1:f5:92:35:64:7a:13:9a:
a0:04:c6:e8:7e:14:9b:0c:ab:28:15:9c:70:4e:1c:a7:0f:7e:
43:62:7b:8d:58:85:6f:5f:7b:4a:25:77:00:b4:32:b6:e7:17:
6b:fc:d0:a7:da:a3:aa:da:c1:c0:6f:75:cc:79:b9:44:1b:c2:
b2:16:f0:f9:6f:ba:90:99:bb:58:03:d0:98:64:3c:a9:55:f8:
93:98:40:90:ef:84:be:bd:5c:27:18:f8:57:52:05:41:00:94:
56:a6:0a:e9:09:c5:07:08:72:d2:56:56:46:87:d1:3a:45:79:
13:63:9e:0f:a6:2f:7c:88:98:76:e3:fb:89:9f:cf:1d:ba:b0:
d1:66:2c:25:61:2f:a9:3f:e3:3c:b3:ee:a8:00:40:90:ac:2c:
e2:6e:f4:52:29:bb:27:29:5a:03:a1:de:ab:69:f7:07:e5:6e:
7c:f7:dd:b9:26:47:4d:58:0e:25:ce:75:51:a4:0b:68:7a:0f:
ef:45:a5:fe:b6:7b:22:07:0d:50:ce:78:6f:0a:33:6d:83:82:
c2:06:79:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 07:12:31 2024 by rpki-client on console-fra.rpki-client.org