Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/sF2mnJ-iH6aLVcQyfbC66Qtl_bE.roa
File: sF2mnJ-iH6aLVcQyfbC66Qtl_bE.roa (raw, json)
Hash identifier: zTijVMIeWz+AH0ZOWwEXPHzNtyHl9Gz8fbYEt0t2aIk=
Subject key identifier: B0:5D:A6:9C:9F:A2:1F:A6:8B:55:C4:32:7D:B0:BA:E9:0B:65:FD:B1
Certificate issuer: /CN=f99abe45f21f12e4b802f309444c24759000ebcf
Certificate serial: 018CC42537C1E1A82A6D4B685F4AB011F0DD
Authority key identifier: F9:9A:BE:45:F2:1F:12:E4:B8:02:F3:09:44:4C:24:75:90:00:EB:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Zq-RfIfEuS4AvMJREwkdZAA688.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/sF2mnJ-iH6aLVcQyfbC66Qtl_bE.roa
Signing time: Mon 01 Jan 2024 08:30:22 +0000
ROA not before: Mon 01 Jan 2024 08:30:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6830
IP address blocks: 188.167.0.0/17 maxlen: 17
188.167.0.0/16 maxlen: 16
85.216.192.0/18 maxlen: 18
89.173.0.0/17 maxlen: 17
217.23.240.0/21 maxlen: 21
217.23.240.0/20 maxlen: 20
217.23.248.0/21 maxlen: 21
89.173.0.0/16 maxlen: 16
89.173.128.0/17 maxlen: 17
85.216.128.0/18 maxlen: 18
85.216.128.0/17 maxlen: 17
82.119.96.0/20 maxlen: 20
82.119.96.0/19 maxlen: 19
82.119.112.0/20 maxlen: 20
188.167.128.0/17 maxlen: 17
2a02:ab04::/30 maxlen: 30
2a02:ab00::/29 maxlen: 29
2a02:ab00::/30 maxlen: 30
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Zq-RfIfEuS4AvMJREwkdZAA688.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 10 May 2024 01:02:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:37:c1:e1:a8:2a:6d:4b:68:5f:4a:b0:11:f0:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f99abe45f21f12e4b802f309444c24759000ebcf
Validity
Not Before: Jan 1 08:30:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b05da69c9fa21fa68b55c4327db0bae90b65fdb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:9b:99:d0:c9:f2:c3:04:ce:6c:f0:07:29:0e:
50:e1:b6:0d:80:6a:81:73:6e:95:03:b1:1d:3c:4e:
62:92:42:aa:35:01:66:e4:5d:21:44:39:a3:20:ec:
51:93:6a:1e:90:80:00:2f:bb:b8:a8:39:38:b2:ec:
71:87:fd:43:7e:f2:5c:b9:f0:ca:e0:72:e2:e5:56:
f5:0d:ce:46:a9:4c:4f:fa:ef:89:43:64:3d:e5:d3:
8e:6e:bb:a7:5e:16:cb:cc:47:d6:bd:78:f1:ea:80:
3f:b8:5d:26:1b:6c:ff:ef:25:47:a2:f7:bf:5b:50:
6b:4d:19:37:5a:88:10:64:8d:fc:c6:e5:fa:f7:a9:
ba:df:fd:0e:dd:70:c1:45:11:93:61:18:a2:4f:6e:
0b:ca:45:fb:a1:62:4c:4b:07:8b:fd:0b:50:82:40:
6e:8f:34:48:d9:b9:2c:e0:3f:90:0a:f3:dc:4b:17:
20:22:1e:74:bb:9e:ab:6e:d9:ba:8a:96:e3:27:24:
0b:7f:88:dd:61:c8:1c:e5:64:db:a7:00:4a:43:05:
70:64:2c:48:15:e9:aa:a3:bd:43:fc:a4:05:d2:a4:
16:ce:c2:ba:e3:bd:28:eb:ed:35:7b:48:06:84:10:
e0:70:70:a3:82:61:a4:70:d5:63:38:bc:d6:be:e4:
05:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:5D:A6:9C:9F:A2:1F:A6:8B:55:C4:32:7D:B0:BA:E9:0B:65:FD:B1
X509v3 Authority Key Identifier:
keyid:F9:9A:BE:45:F2:1F:12:E4:B8:02:F3:09:44:4C:24:75:90:00:EB:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Zq-RfIfEuS4AvMJREwkdZAA688.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/sF2mnJ-iH6aLVcQyfbC66Qtl_bE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.119.96.0/19
85.216.128.0/17
89.173.0.0/16
188.167.0.0/16
217.23.240.0/20
IPv6:
2a02:ab00::/29
Signature Algorithm: sha256WithRSAEncryption
a2:62:d2:31:75:a9:9a:a3:5f:d3:66:f1:6a:83:be:7d:d3:73:
61:86:d7:0a:dd:e3:2b:eb:4c:f3:10:47:e6:f0:4d:bb:2d:cd:
23:3c:cf:81:52:32:2b:e3:40:07:00:d2:d4:e7:88:ef:a7:74:
2f:a0:59:b1:4e:fb:bf:ed:66:c9:11:77:ec:84:5c:43:35:be:
e7:ff:f1:1b:2e:74:b7:c6:e8:0d:02:cb:c4:ed:39:11:20:37:
79:50:18:34:aa:80:34:9e:15:29:e2:e1:dd:54:cd:14:35:cb:
a6:7e:41:c1:2d:2c:9f:4f:62:af:79:92:c9:7d:e9:e0:00:69:
f5:55:6c:5c:16:f4:cb:3b:55:80:60:e9:04:7a:78:4b:75:be:
56:58:5a:7d:da:fe:da:96:c4:0f:ee:d9:0d:41:6b:9f:28:ce:
dd:05:00:82:8c:cc:14:01:c3:46:f9:b5:b7:97:51:d5:4e:25:
de:07:9a:b0:41:98:9a:da:d3:a1:ee:5f:2f:e3:b8:dc:57:6a:
a6:78:bc:b5:63:99:53:04:5d:0e:22:bb:81:c3:be:76:d2:e1:
71:a7:3b:90:45:9e:ba:e4:9b:5c:69:48:5a:81:05:77:66:7b:
c2:37:35:39:65:ea:0a:75:c7:7b:a8:47:f4:56:c1:53:5d:99:
c3:1c:2a:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 11:20:16 2024 by rpki-client on console-ams.rpki-client.org