Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/09aa61-87d7-4f53-9818-dec21eefa38b/1/81ylH-O7KLWUdVd7yS8koEItzEU.roa
File: 81ylH-O7KLWUdVd7yS8koEItzEU.roa (raw, json)
Hash identifier: R7tCrutm39jLQu2A3vYgcNsR+0gzeV2cG36GgM03OTE=
Subject key identifier: F3:5C:A5:1F:E3:BB:28:B5:94:75:57:7B:C9:2F:24:A0:42:2D:CC:45
Certificate issuer: /CN=d73492e4d25c3bbd0c5e20c5a85ecb22ec97360a
Certificate serial: 018CC424E2CDC8CA5FD3D66A41F254A55FDB
Authority key identifier: D7:34:92:E4:D2:5C:3B:BD:0C:5E:20:C5:A8:5E:CB:22:EC:97:36:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1zSS5NJcO70MXiDFqF7LIuyXNgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/09aa61-87d7-4f53-9818-dec21eefa38b/1/81ylH-O7KLWUdVd7yS8koEItzEU.roa
Signing time: Mon 01 Jan 2024 08:30:00 +0000
ROA not before: Mon 01 Jan 2024 08:30:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208715
IP address blocks: 37.140.252.0/24 maxlen: 25
194.61.128.0/24 maxlen: 24
194.61.128.0/22 maxlen: 24
194.61.129.0/24 maxlen: 24
185.200.132.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/09aa61-87d7-4f53-9818-dec21eefa38b/1/1zSS5NJcO70MXiDFqF7LIuyXNgo.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/09aa61-87d7-4f53-9818-dec21eefa38b/1/1zSS5NJcO70MXiDFqF7LIuyXNgo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1zSS5NJcO70MXiDFqF7LIuyXNgo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 16:03:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:e2:cd:c8:ca:5f:d3:d6:6a:41:f2:54:a5:5f:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d73492e4d25c3bbd0c5e20c5a85ecb22ec97360a
Validity
Not Before: Jan 1 08:30:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f35ca51fe3bb28b59475577bc92f24a0422dcc45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0e:81:b4:f4:b3:d6:de:9c:d3:3e:61:53:43:
04:23:53:3a:60:32:b3:33:71:e8:37:9c:da:ac:5b:
38:55:37:96:21:52:ad:2e:a7:e8:b0:5f:fe:9a:50:
3e:86:45:36:13:9f:cd:7d:55:a4:5a:f0:93:48:71:
eb:fa:f9:78:ad:b1:03:f1:c1:54:d4:8b:ba:46:70:
e3:ec:e6:df:6b:da:e5:e6:5e:56:45:05:fc:8d:45:
ed:fe:f7:26:98:f6:c9:a2:d1:13:3f:28:a0:b5:15:
b0:9f:75:b5:53:49:65:11:18:3d:ae:44:01:8f:5d:
fa:88:f8:6a:2e:b9:c8:71:1c:55:dc:2c:d0:c8:0f:
bd:57:87:eb:03:22:6b:6f:34:c9:7a:b5:b3:a3:c8:
12:53:60:11:da:8d:f0:88:56:fb:53:ad:f8:9d:84:
d6:68:4d:7d:d9:46:64:21:12:6b:97:f7:d0:95:4b:
42:ce:09:30:53:63:af:ef:d9:b3:98:1c:99:2f:fe:
d5:38:d8:8f:0d:51:b6:67:f2:29:f0:6d:a4:e8:dc:
8a:f6:9d:04:6b:bf:d3:ba:c9:fe:b4:c0:30:b7:c8:
51:45:f7:d5:f7:ef:a1:b8:43:d1:35:2e:a0:11:26:
7b:3b:de:60:d8:94:63:61:21:bb:91:e6:d8:01:b5:
0d:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:5C:A5:1F:E3:BB:28:B5:94:75:57:7B:C9:2F:24:A0:42:2D:CC:45
X509v3 Authority Key Identifier:
keyid:D7:34:92:E4:D2:5C:3B:BD:0C:5E:20:C5:A8:5E:CB:22:EC:97:36:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1zSS5NJcO70MXiDFqF7LIuyXNgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/09aa61-87d7-4f53-9818-dec21eefa38b/1/81ylH-O7KLWUdVd7yS8koEItzEU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/09aa61-87d7-4f53-9818-dec21eefa38b/1/1zSS5NJcO70MXiDFqF7LIuyXNgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.140.252.0/24
185.200.132.0/22
194.61.128.0/22
Signature Algorithm: sha256WithRSAEncryption
d8:9d:75:d8:82:9e:5c:98:59:ba:27:62:4f:bd:9d:ca:48:5b:
fb:d5:f1:ef:d0:71:b3:c2:ac:27:e8:a2:0e:52:92:a0:16:b6:
29:c9:35:9e:9e:14:ba:12:5b:52:72:3f:82:e2:8a:5f:73:72:
85:be:bc:27:2b:a3:6e:09:dd:da:36:e0:1e:8b:ed:9a:19:8a:
cf:50:af:09:b1:e5:bb:8e:f5:a7:ab:42:d0:1a:e5:b0:3b:38:
1c:8e:fa:da:74:86:e3:ba:7f:98:5b:49:fc:c2:5f:91:0a:12:
05:18:5d:db:16:ce:1a:8f:ac:bd:41:85:a5:84:ba:4f:61:ad:
4d:bb:00:17:62:05:a9:7a:35:02:41:82:3b:6c:b3:7b:05:c7:
c7:94:c4:fc:3a:34:da:ae:6d:a6:a2:49:7e:2d:c0:3a:10:2b:
49:41:01:8b:59:4a:9d:6d:99:f3:d0:9f:48:82:82:1d:c8:25:
8c:dc:59:4a:51:51:f1:f3:49:26:27:f2:14:63:eb:66:be:fa:
77:eb:6a:d2:96:15:60:aa:81:d0:a9:a6:cb:5e:61:85:a8:37:
37:09:e3:c6:25:09:9b:ce:a6:9d:76:1e:23:58:ac:b6:95:7e:
17:16:08:17:a2:d8:f8:37:0f:5d:07:3e:7f:43:36:97:0f:a4:
50:f6:68:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:09:33 2024 by rpki-client on console-fra.rpki-client.org