Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/1373a0-8c3d-4283-a5ce-822ea43dc18d/1/kVv_DXeBEg7FZ15vcDD_O6x4ZD8.roa
File: kVv_DXeBEg7FZ15vcDD_O6x4ZD8.roa (raw, json)
Hash identifier: XMJ59NHh06t6VsO35OtNUNxaVC9Lo30maSHN9yx5Zgc=
Subject key identifier: 91:5B:FF:0D:77:81:12:0E:C5:67:5E:6F:70:30:FF:3B:AC:78:64:3F
Certificate issuer: /CN=dbbf37909ce17ba53ad90a8632377a5d938743e5
Certificate serial: 018F575A254B0BB0759CDC5A8E5578973A86
Authority key identifier: DB:BF:37:90:9C:E1:7B:A5:3A:D9:0A:86:32:37:7A:5D:93:87:43:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2783kJzhe6U62QqGMjd6XZOHQ-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/1373a0-8c3d-4283-a5ce-822ea43dc18d/1/kVv_DXeBEg7FZ15vcDD_O6x4ZD8.roa
Signing time: Wed 08 May 2024 08:37:56 +0000
ROA not before: Wed 08 May 2024 08:37:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 272809
IP address blocks: 82.86.64.0/22 maxlen: 22
82.86.64.0/24 maxlen: 24
82.86.65.0/24 maxlen: 24
82.86.66.0/24 maxlen: 24
82.86.67.0/24 maxlen: 24
82.86.68.0/22 maxlen: 22
82.86.68.0/24 maxlen: 24
82.86.69.0/24 maxlen: 24
82.86.70.0/24 maxlen: 24
82.86.71.0/24 maxlen: 24
82.86.72.0/22 maxlen: 22
82.86.72.0/24 maxlen: 24
82.86.73.0/24 maxlen: 24
82.86.74.0/24 maxlen: 24
82.86.75.0/24 maxlen: 24
82.86.76.0/22 maxlen: 22
82.86.76.0/24 maxlen: 24
82.86.77.0/24 maxlen: 24
82.86.78.0/24 maxlen: 24
82.86.79.0/24 maxlen: 24
82.86.80.0/22 maxlen: 22
82.86.80.0/24 maxlen: 24
82.86.81.0/24 maxlen: 24
82.86.82.0/24 maxlen: 24
82.86.83.0/24 maxlen: 24
82.86.84.0/22 maxlen: 22
82.86.84.0/24 maxlen: 24
82.86.85.0/24 maxlen: 24
82.86.86.0/24 maxlen: 24
82.86.87.0/24 maxlen: 24
82.86.88.0/22 maxlen: 22
82.86.88.0/24 maxlen: 24
82.86.89.0/24 maxlen: 24
82.86.90.0/24 maxlen: 24
82.86.91.0/24 maxlen: 24
82.86.92.0/22 maxlen: 22
82.86.92.0/24 maxlen: 24
82.86.93.0/24 maxlen: 24
82.86.94.0/24 maxlen: 24
82.86.95.0/24 maxlen: 24
82.86.96.0/22 maxlen: 22
82.86.96.0/24 maxlen: 24
82.86.97.0/24 maxlen: 24
82.86.98.0/24 maxlen: 24
82.86.99.0/24 maxlen: 24
82.86.100.0/22 maxlen: 22
82.86.100.0/24 maxlen: 24
82.86.101.0/24 maxlen: 24
82.86.102.0/24 maxlen: 24
82.86.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/1373a0-8c3d-4283-a5ce-822ea43dc18d/1/2783kJzhe6U62QqGMjd6XZOHQ-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/1373a0-8c3d-4283-a5ce-822ea43dc18d/1/2783kJzhe6U62QqGMjd6XZOHQ-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/2783kJzhe6U62QqGMjd6XZOHQ-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:57:5a:25:4b:0b:b0:75:9c:dc:5a:8e:55:78:97:3a:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbbf37909ce17ba53ad90a8632377a5d938743e5
Validity
Not Before: May 8 08:37:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=915bff0d7781120ec5675e6f7030ff3bac78643f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ac:1d:ea:c1:0c:32:0b:6c:81:8c:13:c7:eb:
d8:cb:67:58:49:34:0c:d5:fc:b0:76:b1:53:ca:94:
c6:7a:bc:1b:eb:76:c5:3e:a6:b7:45:a1:da:55:2a:
06:b2:e0:74:86:d7:c9:de:c9:ae:39:09:6e:ce:b2:
16:04:fb:f5:e6:6c:a8:01:12:98:75:94:67:0d:72:
11:47:76:c5:68:dd:0d:25:48:39:1d:50:a7:9a:33:
f5:33:73:07:d3:00:74:30:08:d0:b1:6a:ae:f9:ff:
49:ac:e9:1d:08:f2:c6:5e:39:7b:ad:10:fb:c6:49:
f4:bf:18:e3:b3:97:c0:f6:60:ac:44:a9:01:f1:d5:
82:da:c2:3e:35:94:43:5c:bb:85:91:c0:d2:43:f4:
ad:30:14:24:2f:cf:50:0d:bb:8c:92:01:8f:9d:93:
cb:3b:2d:b9:80:f4:67:3c:7e:15:dd:12:a0:62:0e:
f7:f7:09:a7:2a:b3:87:ce:3d:5a:0c:c4:da:6e:5d:
12:53:ae:e3:ad:1b:b2:52:de:7b:a9:3f:34:1f:60:
86:f7:37:e8:27:7e:1a:8d:e4:61:a0:8a:18:61:86:
55:e6:7d:bb:55:0f:24:f3:ee:3c:3f:c3:5b:04:7b:
dc:48:56:0d:5f:e9:f5:f6:0a:39:74:e3:73:7e:74:
d2:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:5B:FF:0D:77:81:12:0E:C5:67:5E:6F:70:30:FF:3B:AC:78:64:3F
X509v3 Authority Key Identifier:
keyid:DB:BF:37:90:9C:E1:7B:A5:3A:D9:0A:86:32:37:7A:5D:93:87:43:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2783kJzhe6U62QqGMjd6XZOHQ-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/1373a0-8c3d-4283-a5ce-822ea43dc18d/1/kVv_DXeBEg7FZ15vcDD_O6x4ZD8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/1373a0-8c3d-4283-a5ce-822ea43dc18d/1/2783kJzhe6U62QqGMjd6XZOHQ-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.86.64.0-82.86.103.255
Signature Algorithm: sha256WithRSAEncryption
99:44:e8:1a:e2:d5:0f:16:b9:c2:5a:f0:6a:4d:78:e3:7e:85:
81:5c:0f:27:ef:e1:9d:80:eb:b8:74:05:b2:55:d2:29:cf:19:
f5:72:a0:29:11:a2:87:e4:99:88:0b:1f:20:94:74:20:bd:70:
bb:78:7f:c9:cf:c5:9c:39:8c:1d:6c:16:9e:fb:0d:0e:58:b9:
f5:b3:d8:98:cd:aa:28:8b:70:a3:fa:b3:40:a4:4f:50:ca:cc:
d7:0a:6b:c7:54:75:d8:27:01:fe:60:7f:64:0e:6d:3f:7d:da:
27:d2:e1:24:91:33:e7:5a:3d:4b:17:fa:63:fe:c4:2d:3c:c6:
4a:44:c5:d9:aa:c4:95:4c:e9:68:fb:c5:98:05:aa:ca:35:4e:
85:75:e7:fd:d7:b6:b4:7c:cc:98:61:10:4b:2a:7e:10:0f:8b:
62:d3:60:ba:d0:00:ab:be:af:da:43:88:35:94:50:58:dd:78:
c3:5a:92:c3:23:49:46:dd:72:d4:cc:13:91:48:da:27:c9:cd:
06:24:ef:5d:46:f7:8e:3a:1c:e5:e4:45:39:d1:79:48:66:0c:
53:2d:9a:a0:20:dc:f1:88:2f:ab:6b:2d:74:0f:9b:22:df:17:
37:22:c6:3e:19:a1:cf:88:3a:4f:dc:94:60:ad:23:ec:d3:5c:
b0:32:cd:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 18:04:26 2024 by rpki-client on console-fra.rpki-client.org