Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/91d629-7d1f-45bd-a1e1-931cf798e412/1/n66XeMyMbOtmqjFWJpKqhhy024k.roa
File: n66XeMyMbOtmqjFWJpKqhhy024k.roa (raw, json)
Hash identifier: otJM26/Duq/p4vdnPAf47LDoVrsRy57Sdb7mAwGpORc=
Subject key identifier: 9F:AE:97:78:CC:8C:6C:EB:66:AA:31:56:26:92:AA:86:1C:B4:DB:89
Certificate issuer: /CN=eab066c6e1800a3f5bd2e406e9a620d2a0f6f653
Certificate serial: 01920EB025892BB16A9391C794CA62F4A25F
Authority key identifier: EA:B0:66:C6:E1:80:0A:3F:5B:D2:E4:06:E9:A6:20:D2:A0:F6:F6:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6rBmxuGACj9b0uQG6aYg0qD29lM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/91d629-7d1f-45bd-a1e1-931cf798e412/1/n66XeMyMbOtmqjFWJpKqhhy024k.roa
Signing time: Fri 20 Sep 2024 09:07:57 +0000
ROA not before: Fri 20 Sep 2024 09:07:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 559
IP address blocks: 147.86.0.0/16 maxlen: 16
192.152.98.0/24 maxlen: 24
193.8.136.0/23 maxlen: 23
193.73.125.0/24 maxlen: 24
193.135.240.0/21 maxlen: 21
193.222.241.0/24 maxlen: 24
193.222.242.0/23 maxlen: 23
193.222.244.0/22 maxlen: 22
193.222.248.0/23 maxlen: 23
193.222.250.0/24 maxlen: 24
2a0b:1200::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/91d629-7d1f-45bd-a1e1-931cf798e412/1/6rBmxuGACj9b0uQG6aYg0qD29lM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/91d629-7d1f-45bd-a1e1-931cf798e412/1/6rBmxuGACj9b0uQG6aYg0qD29lM.mft
rsync://rpki.ripe.net/repository/DEFAULT/6rBmxuGACj9b0uQG6aYg0qD29lM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:0e:b0:25:89:2b:b1:6a:93:91:c7:94:ca:62:f4:a2:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eab066c6e1800a3f5bd2e406e9a620d2a0f6f653
Validity
Not Before: Sep 20 09:07:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9fae9778cc8c6ceb66aa31562692aa861cb4db89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:37:d6:01:6b:07:f2:b0:99:20:83:82:b0:e9:
01:53:e4:22:80:31:1e:6f:56:ca:46:ec:9a:b8:fe:
b3:c3:eb:a8:94:ee:ad:88:97:0e:8d:6a:58:c4:07:
1e:e9:ed:71:29:a8:0b:07:16:c9:35:75:0d:84:11:
2c:7d:a2:82:35:ef:57:a7:d0:94:f8:4d:29:5f:9d:
e1:75:31:70:b3:9d:8e:9c:10:87:c9:c3:41:d8:c6:
da:be:73:17:5f:cc:7c:ac:65:d0:ae:73:13:88:f7:
a0:72:9a:1c:51:b6:69:30:d3:3b:7a:b9:48:f5:72:
f1:39:43:21:a4:d2:d2:5d:b1:ab:e5:5a:88:c7:32:
e2:20:90:34:d4:aa:20:82:1d:fd:ae:6b:43:fb:5d:
9e:c6:76:86:7b:2c:58:a4:1d:65:4b:ad:66:f0:c4:
a5:ad:fa:87:fd:9c:83:92:17:70:1a:cc:f9:89:32:
85:fa:1b:3e:3c:ad:45:93:b7:50:b3:0a:f0:25:0d:
00:bb:26:e8:a9:8e:17:e2:e9:1e:a1:97:99:c8:33:
7c:17:36:2a:de:88:2d:cc:de:75:ed:dc:f6:f3:8a:
d3:cd:a2:a7:4e:9d:66:d4:ab:6a:ab:b6:5a:58:f1:
81:09:df:97:8b:45:21:a1:0f:44:5f:34:8c:26:c2:
0a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:AE:97:78:CC:8C:6C:EB:66:AA:31:56:26:92:AA:86:1C:B4:DB:89
X509v3 Authority Key Identifier:
keyid:EA:B0:66:C6:E1:80:0A:3F:5B:D2:E4:06:E9:A6:20:D2:A0:F6:F6:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6rBmxuGACj9b0uQG6aYg0qD29lM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/91d629-7d1f-45bd-a1e1-931cf798e412/1/n66XeMyMbOtmqjFWJpKqhhy024k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/91d629-7d1f-45bd-a1e1-931cf798e412/1/6rBmxuGACj9b0uQG6aYg0qD29lM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.86.0.0/16
192.152.98.0/24
193.8.136.0/23
193.73.125.0/24
193.135.240.0/21
193.222.241.0-193.222.250.255
IPv6:
2a0b:1200::/29
Signature Algorithm: sha256WithRSAEncryption
30:f8:e6:04:0c:53:06:bb:f9:50:f2:bc:7f:70:8b:cd:67:49:
93:cd:62:43:0a:d6:aa:e9:5e:89:36:a5:ea:42:35:ca:7f:5d:
ac:d6:28:a5:04:6d:95:a1:2d:1c:23:72:d7:cd:7c:6a:7b:5c:
4a:ff:e9:9d:fa:c3:13:6e:ba:87:f8:04:9f:35:07:2c:f9:04:
68:20:2c:f7:90:2b:55:36:18:83:82:c0:ab:d6:b2:70:35:c1:
15:14:41:73:47:ed:59:95:2f:79:05:90:d8:80:6d:ad:c8:61:
a1:77:33:84:e5:9a:d6:79:6c:9d:c0:c8:aa:fa:72:5a:33:27:
3a:fd:d5:e1:5f:58:f9:ac:be:75:ae:1a:70:bc:6f:9f:98:86:
a0:ee:b0:97:08:27:99:43:85:b5:d7:3f:2f:75:b1:c9:28:7d:
fc:c7:18:46:d2:d3:bf:89:57:33:c4:5d:27:7b:21:6f:db:5f:
8c:ae:04:02:b7:f0:63:92:a5:62:08:5e:6f:c8:36:d0:39:8b:
f5:b0:09:3c:52:5b:e1:9a:dc:96:1d:b5:82:de:e0:f5:56:4b:
a0:e0:19:51:2d:1d:62:21:6d:a4:2e:59:e8:4e:f9:4c:62:ab:
42:b5:d9:15:1a:8a:f2:b5:24:f7:55:d6:65:42:da:ca:d3:b8:
07:fe:81:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:46:12 2024 by rpki-client on console-ams.rpki-client.org