Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/7dbfe7-3614-456e-bf4c-ef7f56842546/1/vSHszBVUJriggDpRE29PwOohqRU.roa
File: vSHszBVUJriggDpRE29PwOohqRU.roa (raw, json)
Hash identifier: DP5Lg/wEOma2vq1VKPLxbmbNF2KO4R7EPJNz7EH4rjY=
Subject key identifier: BD:21:EC:CC:15:54:26:B8:A0:80:3A:51:13:6F:4F:C0:EA:21:A9:15
Certificate issuer: /CN=8a7415ae634d613159cbd2ce74ac261a7d5ac4d4
Certificate serial: 018CC9BCC707122DB8B5C607E2D9869F7C61
Authority key identifier: 8A:74:15:AE:63:4D:61:31:59:CB:D2:CE:74:AC:26:1A:7D:5A:C4:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/inQVrmNNYTFZy9LOdKwmGn1axNQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/7dbfe7-3614-456e-bf4c-ef7f56842546/1/vSHszBVUJriggDpRE29PwOohqRU.roa
Signing time: Tue 02 Jan 2024 10:34:01 +0000
ROA not before: Tue 02 Jan 2024 10:34:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60522
IP address blocks: 37.131.179.0/24 maxlen: 24
37.131.180.0/22 maxlen: 22
185.212.52.0/22 maxlen: 22
2a0b:72c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/7dbfe7-3614-456e-bf4c-ef7f56842546/1/inQVrmNNYTFZy9LOdKwmGn1axNQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/7dbfe7-3614-456e-bf4c-ef7f56842546/1/inQVrmNNYTFZy9LOdKwmGn1axNQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/inQVrmNNYTFZy9LOdKwmGn1axNQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 21:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:c7:07:12:2d:b8:b5:c6:07:e2:d9:86:9f:7c:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a7415ae634d613159cbd2ce74ac261a7d5ac4d4
Validity
Not Before: Jan 2 10:34:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bd21eccc155426b8a0803a51136f4fc0ea21a915
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:a8:54:9e:a1:67:25:80:e0:70:f8:a2:82:0e:
db:9b:87:6f:50:1a:b7:de:31:cd:0a:c1:63:dc:40:
43:06:55:25:60:60:a7:45:ea:d1:9b:13:e8:70:1b:
e2:20:d2:c5:93:38:41:13:34:f0:f9:fd:7e:4b:c0:
10:d8:7c:d8:58:12:5b:90:30:33:de:c7:37:dc:91:
ef:87:75:52:ee:cc:a8:47:33:2d:bc:28:62:07:b8:
2f:f9:df:f6:6e:b9:97:4c:79:88:c6:41:b7:eb:9a:
6d:0c:b0:7e:b6:4d:f8:3a:b5:ea:71:6d:69:60:16:
79:c0:33:e9:89:02:da:b0:fe:fa:f0:a7:bb:4d:56:
de:d5:91:a1:30:c4:27:e4:19:79:c9:39:7d:89:de:
e5:85:b0:5d:28:73:fa:9b:14:d7:33:63:41:af:d3:
3a:d8:fd:60:60:4a:a6:e9:4f:c0:00:06:14:4d:9a:
fa:5f:74:5d:fc:83:89:c4:61:66:35:db:8a:c4:76:
1d:e7:99:81:e1:72:ae:d3:54:5b:7e:2f:3a:1a:65:
aa:59:0e:5f:29:73:37:c0:d9:e3:e8:49:ae:15:45:
6e:d0:f8:fa:cb:76:1c:d8:dd:81:10:e9:f9:38:fa:
67:20:36:b1:c7:bf:61:ad:19:15:8b:ab:2b:28:83:
6d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:21:EC:CC:15:54:26:B8:A0:80:3A:51:13:6F:4F:C0:EA:21:A9:15
X509v3 Authority Key Identifier:
keyid:8A:74:15:AE:63:4D:61:31:59:CB:D2:CE:74:AC:26:1A:7D:5A:C4:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/inQVrmNNYTFZy9LOdKwmGn1axNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7dbfe7-3614-456e-bf4c-ef7f56842546/1/vSHszBVUJriggDpRE29PwOohqRU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7dbfe7-3614-456e-bf4c-ef7f56842546/1/inQVrmNNYTFZy9LOdKwmGn1axNQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.131.179.0-37.131.183.255
185.212.52.0/22
IPv6:
2a0b:72c0::/32
Signature Algorithm: sha256WithRSAEncryption
61:69:d5:d3:56:ea:d8:7f:7f:69:cb:c7:ea:b7:ac:02:cd:d7:
ad:26:66:fa:ce:ad:fc:14:2a:2b:9f:fa:27:93:0a:3c:6b:7b:
80:fb:f7:a7:e9:74:9c:7b:fa:44:6c:ed:28:93:c3:28:77:48:
64:6e:b6:de:74:10:10:f8:60:09:78:7e:5f:69:fe:45:69:8e:
1d:e0:d9:9d:89:43:42:fb:d1:7c:a6:07:11:2a:a9:03:91:8f:
90:c1:7d:ea:61:2e:4b:ba:65:2c:f4:1f:87:a4:8a:39:52:7d:
be:82:38:f8:f6:a9:0d:ec:5f:aa:b9:d3:70:76:d9:8e:c2:56:
9f:82:99:2a:78:72:46:88:48:24:80:79:53:c2:2c:10:91:33:
eb:34:97:ff:f0:ef:ba:93:84:02:41:be:d9:24:6b:1f:b6:2a:
7d:7a:5e:be:02:c0:50:d5:26:9d:45:d3:9b:53:2a:d2:5c:e7:
e0:e1:d8:80:f6:26:54:7c:67:73:9b:6e:38:25:38:0f:11:18:
bb:58:2a:6e:5d:a6:bc:0f:c6:c6:1a:b2:34:24:bc:81:94:59:
e4:8f:db:cb:5a:20:a9:57:b3:1e:b6:56:d1:7b:8c:20:7e:ee:
a9:a9:10:8c:c0:1b:c5:0f:ed:d8:8a:d9:bb:8a:27:a2:55:06:
46:01:23:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:04:27 2024 by rpki-client on console-fra.rpki-client.org