Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/26c0f9-24a4-46fd-8042-b72e5fef886a/1/3zNTM_S7JWKX3QGf1LNFzmjd7R4.roa
File: 3zNTM_S7JWKX3QGf1LNFzmjd7R4.roa (raw, json)
Hash identifier: fp4rxeKRJxzFHSO/ml6cIlDgoZ+Qx5SyTnfhGoztDxM=
Subject key identifier: DF:33:53:33:F4:BB:25:62:97:DD:01:9F:D4:B3:45:CE:68:DD:ED:1E
Certificate issuer: /CN=27e711ce34026e57af3290c7de2cd21dc671e0fc
Certificate serial: 018CC9BBF46BF6E0FAD6850C38667391808C
Authority key identifier: 27:E7:11:CE:34:02:6E:57:AF:32:90:C7:DE:2C:D2:1D:C6:71:E0:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J-cRzjQCblevMpDH3izSHcZx4Pw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/26c0f9-24a4-46fd-8042-b72e5fef886a/1/3zNTM_S7JWKX3QGf1LNFzmjd7R4.roa
Signing time: Tue 02 Jan 2024 10:33:07 +0000
ROA not before: Tue 02 Jan 2024 10:33:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48173
IP address blocks: 79.174.136.0/21 maxlen: 24
79.174.144.0/21 maxlen: 24
185.68.124.0/22 maxlen: 24
94.198.56.0/21 maxlen: 24
5.39.240.0/21 maxlen: 24
46.231.176.0/21 maxlen: 24
194.13.68.0/23 maxlen: 24
212.45.104.0/21 maxlen: 24
194.11.188.0/22 maxlen: 24
5.179.200.0/21 maxlen: 24
5.179.208.0/21 maxlen: 24
194.9.184.0/22 maxlen: 24
5.179.216.0/21 maxlen: 24
5.179.224.0/21 maxlen: 24
5.179.232.0/21 maxlen: 24
194.9.216.0/22 maxlen: 24
5.179.240.0/21 maxlen: 24
5.179.248.0/21 maxlen: 24
80.82.200.0/21 maxlen: 24
46.23.232.0/21 maxlen: 24
194.13.124.0/22 maxlen: 24
194.13.136.0/22 maxlen: 24
194.15.76.0/22 maxlen: 24
194.11.248.0/22 maxlen: 24
194.13.232.0/22 maxlen: 24
2a03:7a40::/32 maxlen: 48
2a03:7c40::/32 maxlen: 48
2a03:8a40::/32 maxlen: 48
2a00:cd0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/26c0f9-24a4-46fd-8042-b72e5fef886a/1/J-cRzjQCblevMpDH3izSHcZx4Pw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/26c0f9-24a4-46fd-8042-b72e5fef886a/1/J-cRzjQCblevMpDH3izSHcZx4Pw.mft
rsync://rpki.ripe.net/repository/DEFAULT/J-cRzjQCblevMpDH3izSHcZx4Pw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 04:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bb:f4:6b:f6:e0:fa:d6:85:0c:38:66:73:91:80:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27e711ce34026e57af3290c7de2cd21dc671e0fc
Validity
Not Before: Jan 2 10:33:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=df335333f4bb256297dd019fd4b345ce68dded1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:b2:a0:b8:82:e6:0c:33:64:2d:f4:96:6c:57:
d6:b3:e4:ce:8e:9e:05:90:c2:24:7e:80:46:77:4b:
42:78:62:72:a7:0f:6c:e7:b2:e2:09:72:59:d7:3d:
12:b4:19:7b:1a:6b:47:b3:fb:5b:03:39:3e:56:14:
8d:91:10:6e:94:11:c2:a9:8b:55:8b:a8:94:ed:93:
32:44:9d:64:6e:6b:18:b6:f1:8e:f0:65:9e:67:3a:
1a:67:69:33:71:c3:d5:c7:70:7a:fe:f5:ad:57:2a:
64:86:45:19:f1:d5:e6:2c:13:84:6a:3f:39:94:dc:
84:7f:94:c8:fd:a1:9f:01:ee:bd:15:5b:a5:c8:39:
3b:fc:15:fd:4c:57:6e:24:b8:cc:27:75:c4:8e:a7:
96:ce:3c:57:fe:a2:bf:07:d3:be:73:92:a9:d4:30:
cf:00:6a:91:82:bb:b0:d4:75:cc:b2:6d:50:5a:48:
15:3e:94:9f:e3:b8:68:63:d6:f1:a9:be:cc:9a:4a:
1a:43:b2:38:cd:dc:06:9e:08:e9:eb:8b:6f:08:76:
df:7f:47:84:c5:c6:9f:18:fd:33:23:68:fd:82:b3:
a9:76:8a:84:0a:8e:62:34:b9:83:00:b8:90:2d:76:
77:a5:e6:b7:57:0c:ee:62:08:53:ab:db:1f:da:08:
4a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:33:53:33:F4:BB:25:62:97:DD:01:9F:D4:B3:45:CE:68:DD:ED:1E
X509v3 Authority Key Identifier:
keyid:27:E7:11:CE:34:02:6E:57:AF:32:90:C7:DE:2C:D2:1D:C6:71:E0:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J-cRzjQCblevMpDH3izSHcZx4Pw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/26c0f9-24a4-46fd-8042-b72e5fef886a/1/3zNTM_S7JWKX3QGf1LNFzmjd7R4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/26c0f9-24a4-46fd-8042-b72e5fef886a/1/J-cRzjQCblevMpDH3izSHcZx4Pw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.39.240.0/21
5.179.200.0-5.179.255.255
46.23.232.0/21
46.231.176.0/21
79.174.136.0-79.174.151.255
80.82.200.0/21
94.198.56.0/21
185.68.124.0/22
194.9.184.0/22
194.9.216.0/22
194.11.188.0/22
194.11.248.0/22
194.13.68.0/23
194.13.124.0/22
194.13.136.0/22
194.13.232.0/22
194.15.76.0/22
212.45.104.0/21
IPv6:
2a00:cd0::/32
2a03:7a40::/32
2a03:7c40::/32
2a03:8a40::/32
Signature Algorithm: sha256WithRSAEncryption
70:fa:a9:9e:f2:7d:65:d8:37:a1:db:3f:af:8f:18:39:a1:7e:
35:b2:01:7b:67:ba:ab:89:ad:24:60:b0:99:42:e1:14:7c:7c:
57:ae:a1:10:36:f9:30:8c:99:95:7a:a2:49:f0:b7:64:f4:1c:
85:5e:b9:2c:22:30:77:c1:1d:fb:1e:cd:d3:0e:06:b8:44:8c:
90:57:4a:00:15:e4:f0:c6:29:60:cb:2f:e3:18:1f:78:ab:e5:
cc:57:35:45:00:d6:fb:26:8a:39:1d:1c:82:6e:9b:0c:4f:17:
fb:93:e7:4e:b7:bf:4b:79:c4:5b:d2:eb:26:b7:35:3c:4f:96:
cf:69:f3:f1:0a:9a:34:f8:6d:53:93:fe:9c:26:51:f7:9a:3c:
ab:fc:3f:66:ab:3c:a4:24:d4:6c:51:18:5f:a1:6f:9f:f7:bd:
a2:47:21:d8:ec:d0:f5:de:a7:ac:29:23:9d:88:c0:29:23:22:
5d:d7:c7:47:ba:eb:53:89:48:45:1e:c7:31:9b:b1:56:30:95:
e7:b5:2e:06:35:2a:ca:98:6f:a1:12:85:6e:b4:ea:be:4f:0a:
48:45:0c:02:40:3b:2d:04:6c:ec:25:f3:30:ad:b5:61:ed:4b:
e4:40:26:99:89:1d:a4:e7:77:6d:3d:32:4a:9a:33:46:07:e0:
3e:e9:19:99
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 1 14:05:49 2024 by rpki-client on console-ams.rpki-client.org