Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/f25066-9eba-43ac-bbb4-7b1778ddf7a9/1/khYkfJhxBRPbgZcN6rgSUXquuOM.roa
File: khYkfJhxBRPbgZcN6rgSUXquuOM.roa (raw, json)
Hash identifier: VSPgaaDtSzq9LJ+412KkdIr7k+GHz+pD10sdtUx/aiw=
Subject key identifier: 92:16:24:7C:98:71:05:13:DB:81:97:0D:EA:B8:12:51:7A:AE:B8:E3
Certificate issuer: /CN=19cdd8206c1e352c5065e481797ef77af0c3de8d
Certificate serial: 018FCDBD51FFA4FC53A89877BF9EAE13DBA3
Authority key identifier: 19:CD:D8:20:6C:1E:35:2C:50:65:E4:81:79:7E:F7:7A:F0:C3:DE:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gc3YIGweNSxQZeSBeX73evDD3o0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/f25066-9eba-43ac-bbb4-7b1778ddf7a9/1/khYkfJhxBRPbgZcN6rgSUXquuOM.roa
Signing time: Fri 31 May 2024 08:21:27 +0000
ROA not before: Fri 31 May 2024 08:21:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51669
IP address blocks: 31.129.128.0/19 maxlen: 19
31.129.128.0/22 maxlen: 22
31.129.132.0/22 maxlen: 22
31.129.133.0/24 maxlen: 24
31.129.134.0/24 maxlen: 24
31.129.136.0/22 maxlen: 22
31.129.140.0/22 maxlen: 22
31.129.144.0/22 maxlen: 22
31.129.148.0/22 maxlen: 22
31.129.152.0/22 maxlen: 22
31.129.156.0/22 maxlen: 22
31.129.156.0/24 maxlen: 24
176.120.176.0/20 maxlen: 20
176.120.176.0/22 maxlen: 22
176.120.180.0/22 maxlen: 22
176.120.184.0/22 maxlen: 22
176.120.188.0/22 maxlen: 22
176.120.190.0/24 maxlen: 24
178.159.48.0/20 maxlen: 20
178.159.48.0/22 maxlen: 22
178.159.52.0/22 maxlen: 22
178.159.56.0/22 maxlen: 22
178.159.60.0/22 maxlen: 22
185.63.216.0/23 maxlen: 23
185.63.216.0/24 maxlen: 24
185.63.217.0/24 maxlen: 24
185.63.218.0/23 maxlen: 23
185.63.218.0/24 maxlen: 24
185.63.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/f25066-9eba-43ac-bbb4-7b1778ddf7a9/1/Gc3YIGweNSxQZeSBeX73evDD3o0.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/f25066-9eba-43ac-bbb4-7b1778ddf7a9/1/Gc3YIGweNSxQZeSBeX73evDD3o0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gc3YIGweNSxQZeSBeX73evDD3o0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 14:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:cd:bd:51:ff:a4:fc:53:a8:98:77:bf:9e:ae:13:db:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19cdd8206c1e352c5065e481797ef77af0c3de8d
Validity
Not Before: May 31 08:21:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9216247c98710513db81970deab812517aaeb8e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ce:eb:b5:9b:1c:41:46:4e:9f:e5:d3:cf:84:
bc:81:82:10:6a:5c:be:fc:b5:51:4a:4f:42:82:b4:
5f:ea:03:36:89:96:a1:00:81:f1:ce:64:6e:3e:52:
eb:4b:26:89:5a:58:9d:6e:34:dd:74:9b:56:50:76:
56:75:1d:3f:c6:27:3b:34:a3:36:78:c7:b7:56:2b:
f1:e6:7a:1c:1b:59:87:4a:f1:67:c2:54:ff:87:16:
95:95:2e:7b:6d:05:95:14:56:6a:a8:0f:ad:4c:dc:
b7:51:00:27:8c:6a:92:d1:96:be:ff:82:3d:95:11:
0f:bf:68:73:a3:00:07:9a:1a:45:97:dc:4d:6c:84:
34:cd:0b:46:ff:0c:9a:52:71:79:4c:fc:b2:c6:5b:
69:d5:72:33:f6:dd:ea:7d:5a:04:0c:5b:94:da:ff:
f3:6f:a5:54:90:b1:f4:9c:66:df:55:55:0f:48:b5:
c5:83:05:62:7d:01:b0:00:2d:5f:70:29:c7:5a:13:
43:02:75:cc:af:9c:cd:b5:da:03:d8:c8:da:c7:cc:
5f:89:59:c0:30:e8:2e:0a:36:ca:e2:96:2d:d0:56:
47:57:69:38:0b:7f:1d:85:a1:b9:30:60:d0:10:ba:
22:41:f2:24:c1:ef:99:c4:25:e2:49:46:ec:a0:2f:
93:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:16:24:7C:98:71:05:13:DB:81:97:0D:EA:B8:12:51:7A:AE:B8:E3
X509v3 Authority Key Identifier:
keyid:19:CD:D8:20:6C:1E:35:2C:50:65:E4:81:79:7E:F7:7A:F0:C3:DE:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gc3YIGweNSxQZeSBeX73evDD3o0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/f25066-9eba-43ac-bbb4-7b1778ddf7a9/1/khYkfJhxBRPbgZcN6rgSUXquuOM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/f25066-9eba-43ac-bbb4-7b1778ddf7a9/1/Gc3YIGweNSxQZeSBeX73evDD3o0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.129.128.0/19
176.120.176.0/20
178.159.48.0/20
185.63.216.0/22
Signature Algorithm: sha256WithRSAEncryption
0e:b4:66:0c:ea:1e:7d:2c:00:5d:65:ca:d1:41:12:f9:ef:62:
08:06:d0:53:5c:0f:8d:85:64:58:97:74:f2:12:c6:24:c5:89:
11:81:a0:ed:9a:ca:96:bf:8a:59:8f:13:54:5d:d9:f1:de:5b:
b0:73:80:97:56:58:62:f7:01:28:d7:71:5d:9d:40:43:a4:0d:
5e:ee:5b:a3:80:da:95:4c:26:76:bb:e0:fe:92:91:ac:bb:1e:
fc:92:3b:9a:1e:85:5d:c5:85:fe:12:45:53:93:14:3c:fb:7e:
d9:43:20:e9:63:62:4c:14:fd:a4:80:5f:a5:66:2a:50:63:8c:
05:ea:fa:4f:53:c5:35:8e:61:4b:74:fb:45:6c:d2:33:59:d8:
98:64:6f:11:b0:a8:fa:cb:38:e0:14:5c:e5:18:53:e7:da:90:
c0:36:8f:3b:9c:ab:de:32:72:b7:65:8c:f5:f0:26:69:02:8f:
97:f8:b9:f0:84:5f:a4:a3:71:ab:ae:2f:75:12:17:c3:58:2a:
3d:4a:0e:5a:dc:29:43:92:b7:ca:52:f9:57:85:00:bc:06:7c:
91:b7:ae:4f:08:6b:44:fa:18:76:b9:75:5f:14:60:20:4c:e9:
ab:0d:bd:d1:db:e5:e1:22:65:21:85:b3:55:f0:44:ab:c1:d4:
21:ea:21:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:28:39 2024 by rpki-client on console-fra.rpki-client.org