Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9c5c1f-f4b6-45a8-9c9f-30733d370df3/1/gjUgbT8gef5lCZb9Hzqzu9jTDhk.roa
File: gjUgbT8gef5lCZb9Hzqzu9jTDhk.roa (raw, json)
Hash identifier: E5Oelxknaag3bkGf9HmqdAmfS+Aa+v7fdh7/6MYgc+8=
Subject key identifier: 82:35:20:6D:3F:20:79:FE:65:09:96:FD:1F:3A:B3:BB:D8:D3:0E:19
Certificate issuer: /CN=3b637ccf393f52e0b56fb58ee35af54411daf644
Certificate serial: 018CC56E20E11F3DAA4433D5391697AB6E92
Authority key identifier: 3B:63:7C:CF:39:3F:52:E0:B5:6F:B5:8E:E3:5A:F5:44:11:DA:F6:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O2N8zzk_UuC1b7WO41r1RBHa9kQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9c5c1f-f4b6-45a8-9c9f-30733d370df3/1/gjUgbT8gef5lCZb9Hzqzu9jTDhk.roa
Signing time: Mon 01 Jan 2024 14:29:38 +0000
ROA not before: Mon 01 Jan 2024 14:29:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201821
IP address blocks: 185.63.75.0/24 maxlen: 24
185.63.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/9c5c1f-f4b6-45a8-9c9f-30733d370df3/1/O2N8zzk_UuC1b7WO41r1RBHa9kQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/9c5c1f-f4b6-45a8-9c9f-30733d370df3/1/O2N8zzk_UuC1b7WO41r1RBHa9kQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/O2N8zzk_UuC1b7WO41r1RBHa9kQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:20:e1:1f:3d:aa:44:33:d5:39:16:97:ab:6e:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b637ccf393f52e0b56fb58ee35af54411daf644
Validity
Not Before: Jan 1 14:29:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8235206d3f2079fe650996fd1f3ab3bbd8d30e19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:82:23:1d:00:e4:7d:5a:5e:03:66:bd:c4:b7:
b2:48:91:a1:df:73:4d:d4:e7:0c:02:a7:a0:54:c8:
30:fb:74:e0:df:35:b4:3c:9c:df:3f:5c:b6:ed:c6:
2c:7a:c0:fd:a5:58:be:f1:2e:18:90:58:ba:22:96:
06:1d:34:5a:1c:35:c6:7a:a1:b3:c5:3b:78:5b:96:
d5:ae:dd:af:cc:19:a2:56:04:69:4e:dc:94:e2:5f:
25:eb:c1:8c:a7:c0:d7:75:5b:1c:51:64:95:5f:7c:
f1:da:1c:58:34:36:c0:78:19:1f:6c:16:7e:96:0e:
13:bd:47:06:aa:9e:46:98:7e:81:4c:b1:c0:fa:1b:
b8:2a:e3:7e:16:a3:36:37:63:c6:ff:a8:91:04:3c:
55:0d:52:55:f0:87:26:70:40:51:30:59:8b:9e:8f:
c5:6d:46:de:b5:0a:53:f2:42:ba:2a:8a:56:98:a0:
f8:ec:39:e5:7e:08:ea:f8:6d:02:d5:56:45:ac:84:
12:88:87:94:01:86:5f:24:ee:9f:fd:d5:98:1e:fc:
76:40:1d:ac:e6:c4:69:17:b7:7b:d8:fd:70:58:5d:
8f:15:af:4c:07:8e:c4:9f:f1:8d:d9:e0:15:16:db:
94:d0:c7:5d:e5:89:ce:7d:fe:28:0e:d8:22:5f:4e:
f3:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:35:20:6D:3F:20:79:FE:65:09:96:FD:1F:3A:B3:BB:D8:D3:0E:19
X509v3 Authority Key Identifier:
keyid:3B:63:7C:CF:39:3F:52:E0:B5:6F:B5:8E:E3:5A:F5:44:11:DA:F6:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O2N8zzk_UuC1b7WO41r1RBHa9kQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9c5c1f-f4b6-45a8-9c9f-30733d370df3/1/gjUgbT8gef5lCZb9Hzqzu9jTDhk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9c5c1f-f4b6-45a8-9c9f-30733d370df3/1/O2N8zzk_UuC1b7WO41r1RBHa9kQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.63.73.0/24
185.63.75.0/24
Signature Algorithm: sha256WithRSAEncryption
45:d6:b2:65:2f:18:43:0d:2c:68:98:eb:28:b8:f6:f0:fc:92:
30:6d:3d:41:1f:fc:48:a4:78:63:c3:6c:39:e2:80:dd:0b:6a:
75:8d:56:9f:69:dd:ad:76:d9:f1:15:2d:b3:8f:b0:3b:25:8b:
37:a4:7b:61:a0:64:d6:00:60:36:aa:fb:8a:d3:8d:c7:75:6c:
89:73:21:97:15:ac:80:a5:7d:48:61:79:1d:81:5d:65:b6:a2:
e7:f1:a1:ac:10:ca:42:a6:57:64:54:7b:c4:31:e3:c3:c1:87:
e0:53:a8:28:b7:ce:f9:f6:f3:23:72:7d:f0:de:84:43:09:e4:
f8:49:a5:e5:96:78:be:21:b7:f7:bc:01:55:32:e3:fd:ad:81:
60:68:0f:94:8c:ea:9a:62:c4:fc:0b:c3:0f:55:fd:22:96:b2:
7f:5f:96:cf:4f:c2:98:d2:99:3c:93:03:7f:da:d2:14:b8:ac:
c8:c9:39:8a:87:6e:b1:dc:1e:76:60:19:cd:2a:1d:f5:e1:88:
1f:a8:71:d7:87:13:60:49:e4:5d:fa:f5:19:12:22:e4:56:e5:
b0:f5:8d:e4:a8:30:31:36:4b:ae:bb:bd:47:83:52:69:65:9d:
ca:62:ab:ec:15:8f:e1:50:7e:bb:e2:d9:8f:2d:13:cc:7f:8a:
34:9c:25:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 09:46:15 2024 by rpki-client on console-ams.rpki-client.org