Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/H2VoO48Hm_yj9dEzuxzyt-8pfiM.roa
File: H2VoO48Hm_yj9dEzuxzyt-8pfiM.roa (raw, json)
Hash identifier: QTm+jbwCoBOAo+gzXTt0uUBP6MnbQ4QGcaOd+GyRltI=
Subject key identifier: 1F:65:68:3B:8F:07:9B:FC:A3:F5:D1:33:BB:1C:F2:B7:EF:29:7E:23
Certificate issuer: /CN=cf1df6667da38e57a25b1945fa40e593e5adfa00
Certificate serial: 0190BA76EE6153FC5F8C175568047E077683
Authority key identifier: CF:1D:F6:66:7D:A3:8E:57:A2:5B:19:45:FA:40:E5:93:E5:AD:FA:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/H2VoO48Hm_yj9dEzuxzyt-8pfiM.roa
Signing time: Tue 16 Jul 2024 07:34:34 +0000
ROA not before: Tue 16 Jul 2024 07:34:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200420
IP address blocks: 91.232.117.0/24 maxlen: 24
185.76.82.0/24 maxlen: 24
192.109.248.0/24 maxlen: 24
195.49.205.0/24 maxlen: 24
212.110.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:ba:76:ee:61:53:fc:5f:8c:17:55:68:04:7e:07:76:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf1df6667da38e57a25b1945fa40e593e5adfa00
Validity
Not Before: Jul 16 07:34:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1f65683b8f079bfca3f5d133bb1cf2b7ef297e23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:d5:2f:d7:39:69:82:74:ce:73:8b:26:16:b8:
fc:3f:33:d2:eb:f6:2e:15:69:61:7f:e8:78:d6:c5:
d3:2b:73:6f:00:2c:49:01:32:7d:72:65:96:53:43:
67:5c:fc:bd:05:2d:81:c4:63:ba:77:b0:11:24:e2:
14:92:93:d6:74:b2:a6:e1:27:fc:bc:e7:9d:1e:a6:
e7:e2:0c:02:26:dd:fa:1b:d1:76:8a:a5:c7:16:cf:
61:43:95:fb:3c:ab:1a:e4:2e:2c:a2:48:e1:2d:f1:
78:94:5a:a9:24:e1:e6:86:0c:59:bc:51:21:80:c6:
04:aa:37:32:e9:ff:09:d8:25:1f:15:bb:ef:3d:01:
2d:d8:3d:19:32:1b:16:39:d4:d5:38:1b:07:8c:98:
a8:52:8c:44:4d:8b:b5:a5:14:49:19:68:9f:5c:58:
ca:b3:1f:74:68:84:2e:07:37:96:59:c4:8f:9a:fd:
dd:eb:7e:e8:30:27:10:df:4e:1a:34:44:0d:bf:81:
60:6a:d7:49:77:aa:f1:b5:41:af:35:e7:d6:02:48:
b3:b4:e2:38:bc:8e:50:a9:26:16:3b:85:22:2b:03:
3c:5c:41:4d:47:a0:62:30:26:84:02:4a:47:b3:04:
56:2d:d0:96:3d:ee:8f:0f:10:ee:7c:c1:da:9c:69:
99:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:65:68:3B:8F:07:9B:FC:A3:F5:D1:33:BB:1C:F2:B7:EF:29:7E:23
X509v3 Authority Key Identifier:
keyid:CF:1D:F6:66:7D:A3:8E:57:A2:5B:19:45:FA:40:E5:93:E5:AD:FA:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/H2VoO48Hm_yj9dEzuxzyt-8pfiM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.232.117.0/24
185.76.82.0/24
192.109.248.0/24
195.49.205.0/24
212.110.157.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:fb:06:b7:e7:bc:15:be:4a:f3:00:78:ea:cf:a5:d3:12:5f:
e7:98:50:1f:fe:78:83:a9:77:56:08:34:03:4e:ca:0c:8c:2d:
03:44:53:9e:2a:69:4c:55:46:60:bc:f5:bb:77:9e:f9:7e:06:
c0:d4:e4:ee:f8:ec:2b:c0:13:72:14:9f:35:df:a5:72:d0:56:
b1:2b:40:29:a4:5a:ab:f0:42:0a:1a:7d:d9:ee:8c:ce:74:f7:
c1:a2:ac:0c:db:b0:e7:f4:fd:33:06:7b:6d:be:b2:a1:f3:a7:
67:23:e6:ac:d4:58:48:27:dc:eb:7e:b7:d7:86:27:61:9e:7f:
c0:e5:e0:42:ab:25:5b:63:b9:cc:c0:3b:b5:95:8a:8c:03:c9:
0e:67:70:95:33:57:f8:2b:c0:b1:30:65:b8:1e:f0:eb:6d:ff:
f7:15:a7:b1:37:12:dc:57:ea:ca:ab:b1:45:98:a7:37:5f:87:
73:36:64:39:47:25:ab:d5:df:6c:6f:a3:54:26:f6:2b:67:3b:
23:80:70:fd:25:97:f3:de:08:80:13:98:09:5a:92:22:fc:5b:
78:bd:de:36:c6:4f:84:95:76:0b:11:cc:2e:b6:16:55:15:e2:
fd:b4:c8:49:b9:3e:50:55:3b:f5:53:71:f9:12:92:48:0c:1e:
0f:5d:a9:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:18:03 2024 by rpki-client on console-ams.rpki-client.org