Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/kGN8-zqokMc4VwlweaJ2WoY9lNo.roa
File: kGN8-zqokMc4VwlweaJ2WoY9lNo.roa (raw, json)
Hash identifier: a+jVLVdomWAPrNs/Dw6+T8/Kzzn0vh5MorGtn0Cqtt8=
Subject key identifier: 90:63:7C:FB:3A:A8:90:C7:38:57:09:70:79:A2:76:5A:86:3D:94:DA
Certificate issuer: /CN=b478410224904494e9c0f7d35650a260e5fb6193
Certificate serial: 018CC3493755EB463CBFD722460AD3676353
Authority key identifier: B4:78:41:02:24:90:44:94:E9:C0:F7:D3:56:50:A2:60:E5:FB:61:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tHhBAiSQRJTpwPfTVlCiYOX7YZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/kGN8-zqokMc4VwlweaJ2WoY9lNo.roa
Signing time: Mon 01 Jan 2024 04:30:04 +0000
ROA not before: Mon 01 Jan 2024 04:30:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21060
IP address blocks: 91.213.70.0/24 maxlen: 24
80.89.16.0/20 maxlen: 20
185.134.252.0/22 maxlen: 22
80.89.18.0/23 maxlen: 23
80.82.96.0/20 maxlen: 20
80.89.30.0/24 maxlen: 24
91.195.58.0/23 maxlen: 23
188.244.64.0/20 maxlen: 20
194.8.244.0/23 maxlen: 23
92.43.232.0/21 maxlen: 21
2a02:7c00::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/tHhBAiSQRJTpwPfTVlCiYOX7YZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/tHhBAiSQRJTpwPfTVlCiYOX7YZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/tHhBAiSQRJTpwPfTVlCiYOX7YZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:37:55:eb:46:3c:bf:d7:22:46:0a:d3:67:63:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b478410224904494e9c0f7d35650a260e5fb6193
Validity
Not Before: Jan 1 04:30:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=90637cfb3aa890c73857097079a2765a863d94da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:3c:56:74:2e:d6:71:6a:2a:87:7a:9e:72:d1:
65:e4:ad:d4:c1:bc:2c:48:3b:f1:81:f3:78:82:44:
61:3a:67:20:7f:7f:ec:06:54:31:79:f1:09:e1:59:
ff:12:0c:84:54:cf:05:41:09:a7:d5:37:51:af:76:
66:8b:ec:9e:fa:17:9d:c9:93:c3:f3:c9:ad:80:f2:
d6:03:09:1c:58:f3:48:e9:78:51:2f:49:a6:cb:4b:
bd:32:c2:54:86:13:36:80:af:6f:25:88:dc:e9:e5:
7b:75:64:70:fd:e4:38:35:10:28:a7:1a:0d:aa:e5:
67:2c:40:49:d4:a3:53:5b:b5:05:b5:10:65:40:4a:
1d:97:07:fb:e7:a3:1b:0d:08:0a:7b:ce:d3:ab:89:
02:1d:42:55:d5:86:e0:53:68:a6:e0:db:ed:13:f0:
1e:54:ac:b1:b0:ce:8a:91:cf:ff:59:f1:f1:20:72:
fb:b2:0c:47:9e:a6:4d:73:28:a6:7b:7b:bc:4e:96:
13:7a:d3:fb:47:e5:e8:e6:8a:16:96:64:00:0e:ef:
51:b2:39:4c:43:b9:58:fb:ea:dc:96:69:98:45:ef:
5d:e1:80:6a:5d:0c:bd:92:58:c3:49:93:4c:93:51:
ba:f9:89:5e:b3:d2:b1:26:3c:7e:04:81:bd:48:e2:
a0:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:63:7C:FB:3A:A8:90:C7:38:57:09:70:79:A2:76:5A:86:3D:94:DA
X509v3 Authority Key Identifier:
keyid:B4:78:41:02:24:90:44:94:E9:C0:F7:D3:56:50:A2:60:E5:FB:61:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tHhBAiSQRJTpwPfTVlCiYOX7YZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/kGN8-zqokMc4VwlweaJ2WoY9lNo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/tHhBAiSQRJTpwPfTVlCiYOX7YZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.82.96.0/20
80.89.16.0/20
91.195.58.0/23
91.213.70.0/24
92.43.232.0/21
185.134.252.0/22
188.244.64.0/20
194.8.244.0/23
IPv6:
2a02:7c00::/32
Signature Algorithm: sha256WithRSAEncryption
72:e0:b8:6f:f4:e1:c7:23:3d:d6:55:a0:8b:38:1e:45:ac:45:
32:55:00:0a:6e:19:68:dd:ec:d4:64:75:65:e5:83:f1:c9:60:
7b:54:b5:05:dd:33:62:5e:69:76:ab:67:8b:73:0c:61:5d:34:
4a:a8:e4:d8:ef:c3:3f:ef:90:68:2e:12:7a:5f:43:d5:fd:af:
54:16:c7:fb:d9:96:fa:05:99:a8:7b:e5:fa:9c:89:92:03:12:
de:c6:51:0f:d4:a9:c5:c0:ac:cf:1b:a9:67:1d:ce:a7:39:67:
04:67:93:30:13:b1:53:76:d7:96:31:5a:fa:10:6e:ec:0a:76:
79:ed:27:2d:ca:cd:8e:ea:8e:c1:80:f8:58:57:78:f3:67:43:
93:00:7b:c0:c9:89:a7:53:b9:50:ec:ab:1f:8c:c2:86:76:b4:
4b:7e:3c:ce:7f:43:f5:99:63:ff:2a:e5:3b:a6:f6:5e:1f:86:
4a:38:76:e8:82:67:8b:fa:0b:e1:fb:b9:8e:26:66:59:38:95:
e6:2a:7f:7b:4d:73:f6:d8:19:03:55:9e:b1:9a:a2:90:4f:a0:
00:95:2f:03:e3:80:a1:b2:03:c1:df:1b:27:cb:a0:a0:dd:1c:
2b:d3:88:db:62:38:0f:be:9f:ab:10:bb:07:fa:53:5e:a9:cd:
46:bc:8c:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 06:04:28 2024 by rpki-client on console-fra.rpki-client.org