Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/89abb8-636d-4084-81a0-c63adb6ee5d9/1/l7dl4ajrK1CTn2hmXzMgqGPSTk4.roa
File: l7dl4ajrK1CTn2hmXzMgqGPSTk4.roa (raw, json)
Hash identifier: 5l9NiDmqw8iCPhwQURcZHpt66jPGovQJ+Tpx8YY//E0=
Subject key identifier: 97:B7:65:E1:A8:EB:2B:50:93:9F:68:66:5F:33:20:A8:63:D2:4E:4E
Certificate issuer: /CN=9bea3a3a4a3606c7396f15f501ac5c641785750c
Certificate serial: 0191275D32252793C340221E77EF07B31E9B
Authority key identifier: 9B:EA:3A:3A:4A:36:06:C7:39:6F:15:F5:01:AC:5C:64:17:85:75:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m-o6Oko2Bsc5bxX1AaxcZBeFdQw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/89abb8-636d-4084-81a0-c63adb6ee5d9/1/l7dl4ajrK1CTn2hmXzMgqGPSTk4.roa
Signing time: Tue 06 Aug 2024 11:05:04 +0000
ROA not before: Tue 06 Aug 2024 11:05:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197524
IP address blocks: 5.22.240.0/21 maxlen: 21
88.133.0.0/17 maxlen: 19
88.133.64.0/19 maxlen: 19
88.133.128.0/20 maxlen: 21
88.133.156.0/22 maxlen: 24
109.199.160.0/19 maxlen: 19
185.9.64.0/22 maxlen: 22
2a01:a980::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/89abb8-636d-4084-81a0-c63adb6ee5d9/1/m-o6Oko2Bsc5bxX1AaxcZBeFdQw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/89abb8-636d-4084-81a0-c63adb6ee5d9/1/m-o6Oko2Bsc5bxX1AaxcZBeFdQw.mft
rsync://rpki.ripe.net/repository/DEFAULT/m-o6Oko2Bsc5bxX1AaxcZBeFdQw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:27:5d:32:25:27:93:c3:40:22:1e:77:ef:07:b3:1e:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bea3a3a4a3606c7396f15f501ac5c641785750c
Validity
Not Before: Aug 6 11:05:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=97b765e1a8eb2b50939f68665f3320a863d24e4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:71:7a:43:46:ed:ee:8b:22:19:c2:f0:53:19:
2c:86:3a:6b:70:9f:96:0e:33:15:01:88:7d:ac:eb:
c8:7e:f7:d9:53:e9:70:fe:22:be:e8:26:41:27:fe:
00:2f:a1:4d:ed:9e:40:54:76:be:73:7b:1c:82:ee:
ca:5c:1e:9c:96:64:f6:ca:16:16:d0:da:0e:d2:65:
04:d2:6c:2d:b8:a7:04:6f:3f:25:59:d5:77:0f:92:
27:2a:31:b5:bc:a3:57:42:bc:c7:18:e6:01:fb:d0:
00:3d:74:a9:39:ba:41:87:e4:1b:fa:67:b5:e9:10:
a9:fd:4b:23:af:3f:a2:4d:66:90:47:19:20:d6:92:
b7:a2:b3:fa:de:37:96:18:69:a6:66:7b:3d:c1:aa:
94:15:50:49:62:9a:93:00:d9:5b:3e:51:f4:31:9c:
94:25:7f:e5:4c:96:fc:41:ba:ab:c1:cc:b3:72:a5:
d4:a6:68:d1:28:f7:ba:3b:48:cb:1a:2a:5f:fe:e1:
cc:20:3c:70:88:ad:b5:95:d1:64:96:7a:ee:08:d3:
bb:d0:cf:e9:c5:36:0b:41:57:33:90:6c:c3:5f:4d:
fa:1a:69:6a:56:f9:26:c8:61:98:66:22:17:c1:14:
3a:18:a2:b2:fe:c1:14:ad:d6:75:f1:6a:d8:3d:e8:
e4:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:B7:65:E1:A8:EB:2B:50:93:9F:68:66:5F:33:20:A8:63:D2:4E:4E
X509v3 Authority Key Identifier:
keyid:9B:EA:3A:3A:4A:36:06:C7:39:6F:15:F5:01:AC:5C:64:17:85:75:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m-o6Oko2Bsc5bxX1AaxcZBeFdQw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/89abb8-636d-4084-81a0-c63adb6ee5d9/1/l7dl4ajrK1CTn2hmXzMgqGPSTk4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/89abb8-636d-4084-81a0-c63adb6ee5d9/1/m-o6Oko2Bsc5bxX1AaxcZBeFdQw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.22.240.0/21
88.133.0.0-88.133.143.255
88.133.156.0/22
109.199.160.0/19
185.9.64.0/22
IPv6:
2a01:a980::/29
Signature Algorithm: sha256WithRSAEncryption
4d:a0:3a:2f:c5:50:9f:9f:55:3c:f8:fc:62:e8:e5:df:c9:64:
0b:21:26:0e:1c:44:01:fc:62:3e:33:b9:29:6a:c2:0b:d1:dd:
75:c4:10:d2:41:5f:bb:fe:44:de:32:f9:df:64:8f:98:28:6c:
e1:99:96:ae:5b:4e:f1:b8:d5:55:96:38:ff:e2:10:70:7e:d0:
08:d3:e9:34:05:7f:8e:2b:f2:44:a4:41:82:d3:c4:6d:07:a4:
78:37:50:8c:67:f8:cb:90:ce:88:9a:d9:f3:e1:bb:62:d3:6b:
ef:52:48:22:89:46:b9:02:e1:47:7d:04:a8:c2:4a:fa:55:46:
cf:72:04:72:0b:49:49:b5:1e:8a:da:c8:6c:c8:4b:22:48:6d:
f0:14:7c:e1:ce:4a:0a:6b:65:80:25:d9:88:8c:c5:0b:09:3f:
a5:c8:5d:09:ff:7f:e2:54:97:59:2f:a6:ef:04:1f:ee:2d:d5:
cb:1e:dd:c3:c3:0c:bc:8d:f0:da:8d:73:11:5e:09:e4:5b:a4:
f8:99:79:65:02:14:d6:37:9c:66:8c:0f:6e:1c:d5:d4:fd:7a:
66:8e:a2:ca:b7:85:23:38:8d:87:36:60:07:33:a2:a6:b4:7a:
33:1c:c8:d4:2a:43:57:20:69:e2:10:fc:d6:b0:d2:d6:2c:f8:
71:11:21:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:59:49 2024 by rpki-client on console-ams.rpki-client.org