Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/16b7f4-fa15-47a6-9fc5-254bcbcec037/1/879jn0UTXUNv42ptZa7tBU-pS1o.roa
File: 879jn0UTXUNv42ptZa7tBU-pS1o.roa (raw, json)
Hash identifier: DFqpnPGNkpcP3hz7LazfblQ3dtPnGvnWwFjIqZvX3Tc=
Subject key identifier: F3:BF:63:9F:45:13:5D:43:6F:E3:6A:6D:65:AE:ED:05:4F:A9:4B:5A
Certificate issuer: /CN=759d6afb8ddf8f8c0dd660790edcba1f3b370c63
Certificate serial: 018CC94D69EAB17AD4E4753ACBF2943C57BE
Authority key identifier: 75:9D:6A:FB:8D:DF:8F:8C:0D:D6:60:79:0E:DC:BA:1F:3B:37:0C:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dZ1q-43fj4wN1mB5Dty6Hzs3DGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/16b7f4-fa15-47a6-9fc5-254bcbcec037/1/879jn0UTXUNv42ptZa7tBU-pS1o.roa
Signing time: Tue 02 Jan 2024 08:32:22 +0000
ROA not before: Tue 02 Jan 2024 08:32:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202269
IP address blocks: 185.8.172.0/24 maxlen: 24
185.8.173.0/24 maxlen: 24
185.8.175.0/24 maxlen: 24
185.8.174.0/24 maxlen: 24
130.185.73.0/24 maxlen: 24
130.185.72.0/24 maxlen: 24
130.185.77.0/24 maxlen: 24
130.185.76.0/24 maxlen: 24
130.185.75.0/24 maxlen: 24
130.185.74.0/24 maxlen: 24
130.185.78.0/23 maxlen: 23
130.185.78.0/24 maxlen: 24
130.185.79.0/24 maxlen: 24
2a03:2dc0:3000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/16b7f4-fa15-47a6-9fc5-254bcbcec037/1/dZ1q-43fj4wN1mB5Dty6Hzs3DGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/16b7f4-fa15-47a6-9fc5-254bcbcec037/1/dZ1q-43fj4wN1mB5Dty6Hzs3DGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/dZ1q-43fj4wN1mB5Dty6Hzs3DGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 14:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:69:ea:b1:7a:d4:e4:75:3a:cb:f2:94:3c:57:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=759d6afb8ddf8f8c0dd660790edcba1f3b370c63
Validity
Not Before: Jan 2 08:32:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f3bf639f45135d436fe36a6d65aeed054fa94b5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a0:31:b1:8f:5f:24:6c:23:5f:d9:7f:56:98:
b4:ae:31:12:c3:a4:01:6c:ff:1d:e9:1b:d8:90:58:
53:24:39:c2:da:e4:49:7a:33:bf:d3:83:0f:e3:e1:
76:72:6c:b1:78:02:b3:44:17:00:3e:1a:8b:9c:1f:
79:a3:91:c2:21:a8:0e:53:6f:d9:ae:8b:2f:5f:1d:
e2:92:b6:5a:d5:3e:80:f0:ef:06:a1:7b:c3:12:39:
d7:9d:39:af:42:a2:35:ff:4c:f3:5b:d6:c1:e0:35:
4e:e3:f6:0b:ba:b5:68:1f:9e:16:ab:59:df:e8:3d:
f9:70:8a:af:0b:a2:2f:83:32:84:a8:11:65:90:e5:
b4:dd:01:fc:6e:57:75:4c:8c:14:4f:c2:c7:58:a7:
4a:1f:3f:30:d3:38:eb:dd:0f:7a:1a:89:d1:84:e5:
31:e8:ae:5c:02:33:92:ff:33:35:d6:5d:ad:ae:2f:
92:3f:e3:0f:f6:b2:bb:cb:b2:16:59:71:7e:9c:15:
bf:48:e2:27:f1:b1:c0:f5:da:9a:3b:3a:c4:3c:28:
96:23:6d:f4:46:13:f3:39:97:22:27:2c:97:c2:95:
5e:b1:ca:6e:fa:26:3c:56:07:4f:ab:00:da:b8:2c:
58:7f:d2:fc:31:e4:00:4c:a1:b3:a9:b1:86:c1:97:
d4:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:BF:63:9F:45:13:5D:43:6F:E3:6A:6D:65:AE:ED:05:4F:A9:4B:5A
X509v3 Authority Key Identifier:
keyid:75:9D:6A:FB:8D:DF:8F:8C:0D:D6:60:79:0E:DC:BA:1F:3B:37:0C:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dZ1q-43fj4wN1mB5Dty6Hzs3DGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/16b7f4-fa15-47a6-9fc5-254bcbcec037/1/879jn0UTXUNv42ptZa7tBU-pS1o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/16b7f4-fa15-47a6-9fc5-254bcbcec037/1/dZ1q-43fj4wN1mB5Dty6Hzs3DGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.185.72.0/21
185.8.172.0/22
IPv6:
2a03:2dc0:3000::/36
Signature Algorithm: sha256WithRSAEncryption
8b:89:6c:98:f9:7d:ed:03:50:92:6f:09:55:e3:c0:e2:a0:3d:
d0:af:08:74:6f:1e:67:ab:01:3f:9b:55:e3:df:3f:4a:29:af:
a7:ad:3f:5c:9a:a4:81:db:1c:8b:1c:7b:d0:ab:ab:5f:de:82:
2f:e2:ab:a3:d6:62:3d:d1:6e:dd:5c:3b:cf:6a:53:5f:7b:f7:
82:28:69:b8:ea:9b:24:ce:e9:17:11:09:85:e1:7e:02:8a:76:
91:88:c0:50:26:7e:8f:0b:11:34:fa:c4:30:3d:84:47:11:c0:
91:d1:40:19:66:b8:a6:5a:0e:95:45:3b:d0:b0:2f:10:8c:8f:
59:73:e9:21:68:39:65:4c:1d:65:f2:e8:a5:a9:5d:58:cc:0b:
86:ee:fc:e9:65:a1:0c:4b:3e:a8:3b:c8:b9:cc:c6:ee:d5:87:
cf:fb:92:6b:26:56:74:2c:d8:2e:be:c4:21:b2:c2:8a:b6:b6:
dc:81:96:c6:10:af:7d:73:50:65:dd:64:8d:2e:b7:2f:38:ed:
45:78:78:86:4c:04:29:42:d1:07:1e:3d:3d:3d:77:09:0a:4f:
0e:e5:d6:bb:32:db:03:bb:55:7f:bb:a7:76:d4:fb:35:70:db:
17:2d:9c:63:1e:64:7b:ef:82:34:d9:d4:d0:42:c7:cc:87:97:
04:61:52:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:48:42 2024 by rpki-client on console-ams.rpki-client.org