Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/69efa1-8c99-48f8-943c-2b4a16594213/1/F0UQPre4tGeFHr0kFruyLUIG9FI.roa
File: F0UQPre4tGeFHr0kFruyLUIG9FI.roa (raw, json)
Hash identifier: 4w8aBWjwn5Ih8289LSIbw6aeFqwh5fvm7wcPTTEboG4=
Subject key identifier: 17:45:10:3E:B7:B8:B4:67:85:1E:BD:24:16:BB:B2:2D:42:06:F4:52
Certificate issuer: /CN=9054c699a81dd962a8860f3fb0b7d03343debf76
Certificate serial: 018CC26D04B6AF97A2EB55AAD9708C13EF54
Authority key identifier: 90:54:C6:99:A8:1D:D9:62:A8:86:0F:3F:B0:B7:D0:33:43:DE:BF:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kFTGmagd2WKohg8_sLfQM0Pev3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/69efa1-8c99-48f8-943c-2b4a16594213/1/F0UQPre4tGeFHr0kFruyLUIG9FI.roa
Signing time: Mon 01 Jan 2024 00:29:33 +0000
ROA not before: Mon 01 Jan 2024 00:29:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49148
IP address blocks: 95.130.240.0/24 maxlen: 24
185.160.177.0/24 maxlen: 24
185.160.178.0/24 maxlen: 24
185.160.176.0/24 maxlen: 24
185.160.176.0/22 maxlen: 22
185.160.179.0/24 maxlen: 24
95.130.242.0/24 maxlen: 24
95.130.243.0/24 maxlen: 24
95.130.240.0/21 maxlen: 21
95.130.241.0/24 maxlen: 24
95.130.246.0/24 maxlen: 24
95.130.244.0/24 maxlen: 24
95.130.245.0/24 maxlen: 24
95.130.247.0/24 maxlen: 24
2a00:b140::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/69efa1-8c99-48f8-943c-2b4a16594213/1/kFTGmagd2WKohg8_sLfQM0Pev3Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/69efa1-8c99-48f8-943c-2b4a16594213/1/kFTGmagd2WKohg8_sLfQM0Pev3Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/kFTGmagd2WKohg8_sLfQM0Pev3Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:04:b6:af:97:a2:eb:55:aa:d9:70:8c:13:ef:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9054c699a81dd962a8860f3fb0b7d03343debf76
Validity
Not Before: Jan 1 00:29:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1745103eb7b8b467851ebd2416bbb22d4206f452
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:c3:01:77:9e:5a:d2:7a:ea:01:0b:9e:51:95:
e2:db:fb:81:fd:89:6c:93:d3:97:bf:9c:d1:d2:52:
92:a0:0c:d6:2f:63:4a:83:5b:0d:57:5c:e5:5d:f6:
4b:e9:23:76:31:ec:7f:76:d6:4e:b6:d1:31:ee:9e:
97:cd:32:d7:41:cd:d1:a9:ec:02:8c:7b:98:5c:e2:
ae:15:9b:7d:25:56:60:58:39:e7:7e:5a:78:f9:25:
80:96:bd:5e:d6:59:a0:4f:77:bc:05:02:5d:7b:d5:
54:08:9e:db:54:ff:06:00:2b:4a:ed:26:c7:cf:bb:
32:9b:a0:fa:30:37:49:e7:11:88:bf:8b:54:a5:28:
af:5d:6d:82:42:41:b5:81:e3:c7:a7:f4:40:a4:ba:
aa:e3:41:18:2e:bc:64:c5:08:94:2f:35:73:07:2b:
31:a7:0b:7d:e4:f3:eb:54:da:52:ac:06:5b:ea:87:
66:5c:b5:93:d7:cf:c8:dd:87:c4:61:77:5a:ed:f4:
b8:4f:d3:1b:91:9c:1d:26:b2:1f:e0:78:45:d5:a0:
02:a5:c9:15:7b:df:0c:e7:05:2b:99:5e:4d:09:66:
58:4a:43:45:92:e5:fe:20:a0:0a:74:fb:52:26:26:
a0:97:e3:c4:fc:95:67:66:b3:b6:65:bd:2a:7e:7d:
c1:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:45:10:3E:B7:B8:B4:67:85:1E:BD:24:16:BB:B2:2D:42:06:F4:52
X509v3 Authority Key Identifier:
keyid:90:54:C6:99:A8:1D:D9:62:A8:86:0F:3F:B0:B7:D0:33:43:DE:BF:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kFTGmagd2WKohg8_sLfQM0Pev3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/69efa1-8c99-48f8-943c-2b4a16594213/1/F0UQPre4tGeFHr0kFruyLUIG9FI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/69efa1-8c99-48f8-943c-2b4a16594213/1/kFTGmagd2WKohg8_sLfQM0Pev3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.130.240.0/21
185.160.176.0/22
IPv6:
2a00:b140::/32
Signature Algorithm: sha256WithRSAEncryption
4c:22:a7:08:28:cf:20:44:f4:f3:f9:8e:9c:d9:ee:21:77:29:
b8:15:11:4e:bb:1c:0f:65:ee:8a:46:8d:31:de:e4:0d:87:c1:
7d:7a:32:be:96:2b:f3:9d:60:9f:d4:9c:1c:05:f1:16:28:09:
08:20:de:7a:69:0a:a0:ff:8f:90:28:f1:f2:46:16:f0:93:e5:
d9:b9:5a:86:c9:25:2a:96:38:b6:2d:c9:18:14:48:b4:46:3c:
f1:29:f3:6c:13:e5:cf:d6:13:07:93:f1:ab:e6:45:b8:24:f4:
81:ee:65:31:7c:01:2a:7a:5f:40:bb:77:9f:86:f4:99:2b:b4:
a4:d8:07:8b:fc:b4:ba:2f:b9:e7:2f:e7:bd:12:8b:49:d6:31:
56:e2:d3:ea:33:05:37:1a:9f:3e:17:15:d4:02:9b:d7:79:7c:
c6:56:7c:d6:08:01:39:08:b4:21:2e:2a:59:99:78:51:fb:05:
82:eb:00:d2:77:71:73:4e:8a:de:b1:ac:f3:94:de:13:24:e4:
7f:ab:d5:ee:f2:a0:7f:1a:56:83:07:90:4a:66:c5:6d:3e:5f:
ec:aa:03:d3:4b:df:5e:71:32:2f:c4:cc:3b:a5:2e:a3:78:76:
9e:72:12:e8:e5:cb:78:75:2d:35:ae:ac:f3:13:4c:bc:5f:96:
ec:a0:c2:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 23:50:28 2024 by rpki-client on console-fra.rpki-client.org