Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/6bb471-4a3e-488d-b88c-fe12c75bf4ab/1/RuZQMKKYpZhGelALbiWennECz6Y.roa
File: RuZQMKKYpZhGelALbiWennECz6Y.roa (raw, json)
Hash identifier: ohLRgof0lswjjgiuEhrIe2IuV3f8T/MZ6nvYgxrLlcU=
Subject key identifier: 46:E6:50:30:A2:98:A5:98:46:7A:50:0B:6E:25:9E:9E:71:02:CF:A6
Certificate issuer: /CN=ae72e47d56692499a726bf800ea8380362deb6be
Certificate serial: 018CC3490159C6EA7B6DD1AECB05E6B69996
Authority key identifier: AE:72:E4:7D:56:69:24:99:A7:26:BF:80:0E:A8:38:03:62:DE:B6:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rnLkfVZpJJmnJr-ADqg4A2Letr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/6bb471-4a3e-488d-b88c-fe12c75bf4ab/1/RuZQMKKYpZhGelALbiWennECz6Y.roa
Signing time: Mon 01 Jan 2024 04:29:50 +0000
ROA not before: Mon 01 Jan 2024 04:29:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29177
IP address blocks: 188.125.120.0/22 maxlen: 22
188.125.124.0/22 maxlen: 22
185.182.199.0/24 maxlen: 24
185.182.196.0/22 maxlen: 22
80.86.144.0/22 maxlen: 22
80.86.144.0/20 maxlen: 20
80.86.148.0/22 maxlen: 22
80.86.152.0/22 maxlen: 22
80.86.156.0/22 maxlen: 22
188.125.96.0/22 maxlen: 22
188.125.96.0/19 maxlen: 19
188.125.104.0/22 maxlen: 22
188.125.100.0/22 maxlen: 22
188.125.108.0/22 maxlen: 22
188.125.112.0/22 maxlen: 22
188.125.116.0/22 maxlen: 22
31.216.240.0/22 maxlen: 22
31.216.240.0/20 maxlen: 20
31.216.244.0/22 maxlen: 22
31.216.248.0/22 maxlen: 22
31.216.252.0/22 maxlen: 22
31.216.250.0/24 maxlen: 24
2a03:5c00::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/6bb471-4a3e-488d-b88c-fe12c75bf4ab/1/rnLkfVZpJJmnJr-ADqg4A2Letr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/6bb471-4a3e-488d-b88c-fe12c75bf4ab/1/rnLkfVZpJJmnJr-ADqg4A2Letr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rnLkfVZpJJmnJr-ADqg4A2Letr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 10:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:01:59:c6:ea:7b:6d:d1:ae:cb:05:e6:b6:99:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae72e47d56692499a726bf800ea8380362deb6be
Validity
Not Before: Jan 1 04:29:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=46e65030a298a598467a500b6e259e9e7102cfa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a2:08:86:3f:46:d9:20:29:55:3e:ef:57:97:
c4:70:61:b6:fa:13:03:c1:49:b3:07:e3:08:23:5a:
ba:d2:12:32:9e:96:1f:a4:3a:dd:0d:7f:c5:bc:5f:
a1:51:e6:1e:b1:f5:76:6c:b7:7e:b3:65:68:5d:18:
e3:51:0c:99:8b:10:92:48:0c:1b:b8:e2:ff:89:e7:
34:7b:82:e2:65:0c:3e:5a:f5:fc:ef:d6:5f:42:f1:
b6:be:eb:f6:19:93:92:3b:9e:86:32:21:ae:7c:75:
b5:71:3e:40:25:4e:ed:f3:58:c8:b1:1d:ca:5c:63:
74:c9:3a:9d:bd:28:7d:87:26:e9:6a:a5:7f:ae:bb:
91:90:82:be:7f:a7:2d:cd:40:5b:7a:6c:ec:f1:93:
16:53:c3:be:90:e6:41:07:38:11:4b:6e:9b:a3:2a:
83:40:f8:02:eb:4c:ed:47:cc:96:78:e1:12:1f:fb:
a0:af:ac:15:c5:9f:89:63:f1:7b:02:35:25:94:69:
b2:c7:3f:ef:f4:06:2a:ed:1f:a7:78:96:51:57:04:
51:d2:03:5b:9c:84:c6:d0:36:0f:cd:83:4b:0e:f0:
0a:6d:f5:08:00:a2:d3:d6:8c:12:a2:db:39:06:74:
f0:47:45:3d:4b:3c:4d:a0:42:5c:55:cd:66:bc:0b:
b0:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:E6:50:30:A2:98:A5:98:46:7A:50:0B:6E:25:9E:9E:71:02:CF:A6
X509v3 Authority Key Identifier:
keyid:AE:72:E4:7D:56:69:24:99:A7:26:BF:80:0E:A8:38:03:62:DE:B6:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rnLkfVZpJJmnJr-ADqg4A2Letr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6bb471-4a3e-488d-b88c-fe12c75bf4ab/1/RuZQMKKYpZhGelALbiWennECz6Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6bb471-4a3e-488d-b88c-fe12c75bf4ab/1/rnLkfVZpJJmnJr-ADqg4A2Letr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.216.240.0/20
80.86.144.0/20
185.182.196.0/22
188.125.96.0/19
IPv6:
2a03:5c00::/32
Signature Algorithm: sha256WithRSAEncryption
61:52:f3:9d:fa:ee:e6:d8:e5:d8:65:33:14:3d:8a:85:18:85:
75:26:7c:58:55:2c:7b:69:9c:94:a4:6a:25:12:ec:b7:a4:f6:
05:6e:de:7c:e4:05:d5:5d:57:69:71:b8:c6:bf:93:df:b6:54:
1e:00:24:c8:64:6c:41:04:af:c9:eb:cf:65:82:e4:86:ba:8e:
08:b2:68:e2:4a:5b:4c:e8:e6:ea:48:20:0a:f2:a2:81:0f:67:
c1:f5:b2:87:d2:01:9d:05:0c:62:8a:54:0b:a7:f8:86:82:31:
15:e6:14:c4:92:ea:18:a4:77:7a:7a:9b:70:77:d0:06:bc:ba:
d4:67:b7:ad:0c:0b:fd:40:0e:50:59:42:c2:12:2e:89:85:5b:
7d:26:86:04:b1:af:69:4c:c6:91:65:32:75:3d:2c:7a:61:d8:
ea:99:ea:63:d6:70:db:a1:2b:f7:f9:c6:19:c3:e2:a1:96:b2:
fc:61:44:53:a2:dc:94:1f:3a:7d:8a:e1:6c:02:b5:98:ab:8c:
34:ca:c2:a0:a7:88:82:1f:e4:d5:2d:55:41:0e:7f:71:a5:8e:
c2:49:b5:5b:c7:a7:05:8e:8e:8c:15:41:4c:ea:1e:62:2c:43:
9c:82:1d:f8:b1:86:10:df:91:ae:68:8c:1e:9e:48:25:b6:da:
82:85:f1:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 17:56:31 2024 by rpki-client on console-ams.rpki-client.org