Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/_1VL4uNLFfWetKK240PUHGF6qWQ.roa
File: _1VL4uNLFfWetKK240PUHGF6qWQ.roa (raw, json)
Hash identifier: DE8V8MWPNe8/bCFp4sWGKOX3P4vSH1fwVya1F2FRw94=
Subject key identifier: FF:55:4B:E2:E3:4B:15:F5:9E:B4:A2:B6:E3:43:D4:1C:61:7A:A9:64
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 019127924C29BA3078DDB40F10543F498AA9
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/_1VL4uNLFfWetKK240PUHGF6qWQ.roa
Signing time: Tue 06 Aug 2024 12:03:04 +0000
ROA not before: Tue 06 Aug 2024 12:03:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57043
IP address blocks: 62.76.236.0/24 maxlen: 24
62.76.237.0/24 maxlen: 24
62.76.238.0/24 maxlen: 24
193.124.17.0/24 maxlen: 24
193.124.204.0/24 maxlen: 24
194.58.56.0/24 maxlen: 24
194.58.154.0/24 maxlen: 24
194.58.155.0/24 maxlen: 24
194.58.223.0/24 maxlen: 24
194.87.1.0/24 maxlen: 24
194.87.51.0/24 maxlen: 24
194.87.122.0/24 maxlen: 24
194.87.128.0/24 maxlen: 24
194.87.179.0/24 maxlen: 24
194.87.233.0/24 maxlen: 24
194.87.255.0/24 maxlen: 24
195.133.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 02:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:27:92:4c:29:ba:30:78:dd:b4:0f:10:54:3f:49:8a:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Aug 6 12:03:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ff554be2e34b15f59eb4a2b6e343d41c617aa964
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a3:69:c3:ed:3d:96:d3:b3:33:48:0b:48:81:
92:65:d8:41:67:1b:90:01:77:d7:7f:1a:14:c5:22:
d8:c8:eb:61:b8:f8:f2:ba:bd:92:36:83:09:12:fe:
7a:33:82:a4:6e:34:63:b3:67:f3:0c:8c:27:8f:56:
57:6b:4f:22:61:2e:1b:24:1a:a3:1c:9e:03:26:4d:
3a:09:ba:97:1f:ce:9f:f6:65:8e:e0:33:51:01:dc:
5c:80:64:4f:52:00:c7:84:67:06:6b:64:cc:8c:b8:
76:23:7f:4d:3e:7a:a4:94:db:ac:5f:8f:35:6b:81:
52:f5:d0:7c:f3:56:2d:f4:f8:ff:75:44:46:a8:a2:
33:c3:b1:9a:eb:da:b2:be:61:69:62:2a:28:d9:52:
c7:99:0b:bd:16:d6:51:83:86:af:21:0d:05:c3:32:
07:de:62:d5:ea:1d:30:e7:f8:22:ff:db:5a:65:be:
13:a0:1e:e1:df:97:70:77:29:0a:de:2c:a7:7c:28:
b9:31:0c:37:ff:bf:a3:99:ca:9c:9a:69:76:02:9b:
f4:11:9e:10:68:5d:e2:38:89:5c:cf:2b:c5:1f:78:
18:94:d5:ad:57:49:be:8c:46:64:0d:6f:45:05:db:
62:28:24:71:e1:e4:09:08:7c:1e:38:16:e3:e6:91:
99:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:55:4B:E2:E3:4B:15:F5:9E:B4:A2:B6:E3:43:D4:1C:61:7A:A9:64
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/_1VL4uNLFfWetKK240PUHGF6qWQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.236.0-62.76.238.255
193.124.17.0/24
193.124.204.0/24
194.58.56.0/24
194.58.154.0/23
194.58.223.0/24
194.87.1.0/24
194.87.51.0/24
194.87.122.0/24
194.87.128.0/24
194.87.179.0/24
194.87.233.0/24
194.87.255.0/24
195.133.9.0/24
Signature Algorithm: sha256WithRSAEncryption
78:16:f2:0d:b0:18:3c:8a:78:ac:52:96:49:c2:b1:42:60:6b:
79:3c:49:c3:62:0a:77:51:53:a1:37:32:30:05:18:e2:ed:4e:
36:b3:1f:f1:d6:db:de:c3:db:50:ce:aa:5f:69:fd:d4:88:30:
04:60:45:cd:11:53:56:e1:49:84:a7:ab:2e:27:70:81:eb:71:
44:cc:bb:22:a8:d8:6a:2b:2d:f0:4d:fc:ff:5c:98:04:78:4b:
39:37:e5:65:54:80:b0:c7:7b:b5:48:dc:86:b3:67:e6:80:9e:
cf:cf:ef:71:cd:ab:36:19:4e:83:c4:45:a3:2d:5d:9c:0f:55:
ad:1b:78:f9:66:75:79:98:53:c7:19:af:60:c9:14:3c:52:3a:
37:d9:a3:52:65:d5:c5:a6:13:57:f3:f8:d3:50:a1:9d:cc:a6:
a6:39:16:dd:aa:fd:f6:65:3e:e5:be:f3:0d:58:a1:37:7c:6e:
73:bf:23:8a:f3:e2:06:75:2b:4d:9a:6a:80:c7:69:15:1b:eb:
c9:ec:75:34:37:d6:17:51:30:d5:d0:3a:3b:62:02:e8:01:2a:
44:2e:bc:f2:6a:9e:8a:89:5b:3b:02:00:44:b5:e9:bf:3f:99:
4e:b8:0d:cc:7f:31:54:ba:d9:cf:54:0b:78:25:ec:f9:e9:43:
dd:f1:a6:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:43:37 2024 by rpki-client on console-fra.rpki-client.org