Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/936d98-7019-401f-9e2a-3e3660da13a4/1/3C90JZW4dC9x7edWQ9gUQTYK6VA.roa
File: 3C90JZW4dC9x7edWQ9gUQTYK6VA.roa (raw, json)
Hash identifier: hRfVILU4vQIZ5BlnhoL2jjMEZQkueYexoBctOsdSfFA=
Subject key identifier: DC:2F:74:25:95:B8:74:2F:71:ED:E7:56:43:D8:14:41:36:0A:E9:50
Certificate issuer: /CN=7b1f557ee263cb359a19ea2cd7fa0e8c9139eb76
Certificate serial: 018CC86F2EAC43D8D13F25FF45266E70285A
Authority key identifier: 7B:1F:55:7E:E2:63:CB:35:9A:19:EA:2C:D7:FA:0E:8C:91:39:EB:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ex9VfuJjyzWaGeos1_oOjJE563Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/936d98-7019-401f-9e2a-3e3660da13a4/1/3C90JZW4dC9x7edWQ9gUQTYK6VA.roa
Signing time: Tue 02 Jan 2024 04:29:38 +0000
ROA not before: Tue 02 Jan 2024 04:29:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205424
IP address blocks: 194.24.188.0/24 maxlen: 24
185.42.172.0/24 maxlen: 24
185.42.173.0/24 maxlen: 24
185.42.175.0/24 maxlen: 24
185.42.174.0/24 maxlen: 24
2a01:63a0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/936d98-7019-401f-9e2a-3e3660da13a4/1/ex9VfuJjyzWaGeos1_oOjJE563Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/936d98-7019-401f-9e2a-3e3660da13a4/1/ex9VfuJjyzWaGeos1_oOjJE563Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/ex9VfuJjyzWaGeos1_oOjJE563Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 10:02:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:2e:ac:43:d8:d1:3f:25:ff:45:26:6e:70:28:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b1f557ee263cb359a19ea2cd7fa0e8c9139eb76
Validity
Not Before: Jan 2 04:29:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dc2f742595b8742f71ede75643d81441360ae950
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:c0:e3:8e:82:62:08:53:80:94:1b:e8:0a:0f:
12:b2:70:b1:f7:c7:55:dd:a6:57:b2:5a:93:32:77:
61:45:2c:26:b3:36:ee:6b:89:b6:3c:e7:1d:cb:9f:
52:17:9d:23:ac:03:2e:96:59:02:ea:07:f8:80:60:
84:86:58:83:aa:95:53:37:43:29:ac:38:e5:ca:be:
f0:0c:51:91:33:a2:41:37:5f:64:a9:3a:c2:ca:b8:
3a:69:10:6f:7e:d4:d4:fe:0c:83:ad:36:15:2d:f4:
b9:5c:af:6a:e5:56:da:69:ce:25:cb:b7:a4:d0:e1:
66:f9:72:dc:85:2e:db:c3:87:d3:e1:25:75:c0:bd:
9d:a1:3b:16:cd:18:10:95:96:5f:d5:ca:63:4d:2d:
0c:92:b6:91:e4:29:84:ba:3f:c2:1a:38:7f:36:43:
12:6a:d9:b1:c2:b1:2a:3d:fd:a8:13:68:f9:89:01:
bf:00:3f:86:52:1d:d3:d7:7a:cf:99:83:4d:3a:56:
75:3a:02:68:14:09:0f:ad:43:9f:a1:83:a6:3e:5c:
09:c6:f5:c9:4a:c7:66:f7:62:8a:2f:d9:d8:55:a3:
8e:20:af:e9:8d:17:2e:d4:e0:95:57:fb:8c:21:b9:
68:ae:dc:4c:02:4b:f4:ad:81:54:bf:f5:43:96:94:
5e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:2F:74:25:95:B8:74:2F:71:ED:E7:56:43:D8:14:41:36:0A:E9:50
X509v3 Authority Key Identifier:
keyid:7B:1F:55:7E:E2:63:CB:35:9A:19:EA:2C:D7:FA:0E:8C:91:39:EB:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ex9VfuJjyzWaGeos1_oOjJE563Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/936d98-7019-401f-9e2a-3e3660da13a4/1/3C90JZW4dC9x7edWQ9gUQTYK6VA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/936d98-7019-401f-9e2a-3e3660da13a4/1/ex9VfuJjyzWaGeos1_oOjJE563Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.42.172.0/22
194.24.188.0/24
IPv6:
2a01:63a0::/32
Signature Algorithm: sha256WithRSAEncryption
77:25:ba:d1:40:ee:47:66:3c:95:fe:50:22:39:75:d0:5a:9f:
f7:b7:d0:ad:42:27:cb:e1:5f:5f:2f:d2:21:28:91:e7:28:66:
18:82:64:f0:79:ea:eb:ff:ad:ec:39:71:5d:7f:1f:53:bb:a6:
0a:22:68:b3:f1:db:42:5c:21:59:f6:bd:9a:48:55:1a:84:c0:
42:c7:96:9a:d5:5a:32:93:82:1b:3f:fd:1e:bb:a7:4a:bd:7c:
42:73:a0:2e:35:ac:20:ec:56:e2:73:67:6d:e9:31:1c:04:e8:
84:ed:49:7c:5a:00:10:86:ac:b3:38:c0:f2:eb:15:e9:21:8a:
ec:0c:3d:50:77:0a:46:e4:fa:46:7d:1c:ea:eb:85:4f:ac:71:
9b:d6:21:2c:5d:7b:28:8c:3e:3c:c2:43:81:9f:c2:2c:b3:8e:
6c:b9:0e:49:b9:35:45:93:d1:ae:5a:56:19:b6:fe:7e:e5:1e:
60:66:8a:2c:96:b7:5f:e2:00:86:db:c9:45:fc:ae:ab:7d:25:
45:3c:4c:34:51:eb:31:98:83:2e:5f:40:7f:e6:d6:d8:6d:f0:
42:f7:08:db:05:38:bc:2e:81:62:e6:5b:21:1e:6e:87:67:01:
72:7b:f4:b2:99:e0:86:63:bf:f8:9f:a7:f8:c1:aa:75:6d:95:
ab:ea:32:97
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYzIby6sQ9jRPyX/RSZucChaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiMWY1NTdlZTI2M2NiMzU5YTE5ZWEyY2Q3ZmEwZThjOTEz
OWViNzYwHhcNMjQwMTAyMDQyOTM4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYzJmNzQyNTk1Yjg3NDJmNzFlZGU3NTY0M2Q4MTQ0MTM2MGFlOTUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAisDjjoJiCFOAlBvoCg8SsnCx98dV
3aZXslqTMndhRSwmszbua4m2POcdy59SF50jrAMullkC6gf4gGCEhliDqpVTN0Mp
rDjlyr7wDFGRM6JBN19kqTrCyrg6aRBvftTU/gyDrTYVLfS5XK9q5Vbaac4ly7ek
0OFm+XLchS7bw4fT4SV1wL2doTsWzRgQlZZf1cpjTS0MkraR5CmEuj/CGjh/NkMS
atmxwrEqPf2oE2j5iQG/AD+GUh3T13rPmYNNOlZ1OgJoFAkPrUOfoYOmPlwJxvXJ
Ssdm92KKL9nYVaOOIK/pjRcu1OCVV/uMIblortxMAkv0rYFUv/VDlpReTQIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFNwvdCWVuHQvce3nVkPYFEE2CulQMB8GA1UdIwQY
MBaAFHsfVX7iY8s1mhnqLNf6DoyROet2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXg5VmZ1Smp5eldhR2VvczFfb09qSkU1NjNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy85MzZkOTgtNzAxOS00MDFmLTllMmEt
M2UzNjYwZGExM2E0LzEvM0M5MEpaVzRkQzl4N2VkV1E5Z1VRVFlLNlZBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy85MzZkOTgtNzAxOS00MDFmLTllMmEtM2UzNjYwZGExM2E0
LzEvZXg5VmZ1Smp5eldhR2VvczFfb09qSkU1NjNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCuSqsAwQA
whi8MA0EAgACMAcDBQAqAWOgMA0GCSqGSIb3DQEBCwUAA4IBAQB3JbrRQO5HZjyV
/lAiOXXQWp/3t9CtQifL4V9fL9IhKJHnKGYYgmTweerr/63sOXFdfx9Tu6YKImiz
8dtCXCFZ9r2aSFUahMBCx5aa1Voyk4IbP/0eu6dKvXxCc6AuNawg7Fbic2dt6TEc
BOiE7Ul8WgAQhqyzOMDy6xXpIYrsDD1QdwpG5PpGfRzq64VPrHGb1iEsXXsojD48
wkOBn8Iss45suQ5JuTVFk9GuWlYZtv5+5R5gZooslrdf4gCG28lF/K6rfSVFPEw0
UesxmIMuX0B/5tbYbfBC9wjbBTi8LoFi5lshHm6HZwFye/SymeCGY7/4n6f4wap1
bZWr6jKX
-----END CERTIFICATE-----
Generated at Sun Jun 23 17:24:27 2024 by rpki-client on console-ams.rpki-client.org