Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/M3g8xo7SPfnePK-O4xXUvczEzgs.roa
File: M3g8xo7SPfnePK-O4xXUvczEzgs.roa (raw, json)
Hash identifier: Yw4IKRU3tB4WCkSGOrEkYad79dMlCjHw8+KPJ0RnYCQ=
Subject key identifier: 33:78:3C:C6:8E:D2:3D:F9:DE:3C:AF:8E:E3:15:D4:BD:CC:C4:CE:0B
Certificate issuer: /CN=bf2805992e6531d3da31ee1af6bcd5c06d02b6ca
Certificate serial: 018CC9BC533E0E4365618C97645C124FEEE3
Authority key identifier: BF:28:05:99:2E:65:31:D3:DA:31:EE:1A:F6:BC:D5:C0:6D:02:B6:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vygFmS5lMdPaMe4a9rzVwG0Ctso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/M3g8xo7SPfnePK-O4xXUvczEzgs.roa
Signing time: Tue 02 Jan 2024 10:33:31 +0000
ROA not before: Tue 02 Jan 2024 10:33:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 13189
IP address blocks: 185.94.72.0/22 maxlen: 22
83.172.64.0/19 maxlen: 19
95.140.176.0/20 maxlen: 20
62.101.32.0/21 maxlen: 21
62.101.40.0/22 maxlen: 22
62.101.44.0/22 maxlen: 22
212.112.32.0/19 maxlen: 19
62.101.48.0/22 maxlen: 22
62.101.56.0/21 maxlen: 21
83.172.96.0/19 maxlen: 19
2001:be8::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/vygFmS5lMdPaMe4a9rzVwG0Ctso.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/vygFmS5lMdPaMe4a9rzVwG0Ctso.mft
rsync://rpki.ripe.net/repository/DEFAULT/vygFmS5lMdPaMe4a9rzVwG0Ctso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:53:3e:0e:43:65:61:8c:97:64:5c:12:4f:ee:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf2805992e6531d3da31ee1af6bcd5c06d02b6ca
Validity
Not Before: Jan 2 10:33:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=33783cc68ed23df9de3caf8ee315d4bdccc4ce0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:9d:c9:80:7f:fb:cf:23:a7:07:ab:36:01:16:
ef:30:44:3a:a1:d8:f5:26:79:da:4f:89:a3:35:41:
e5:ed:e0:da:62:36:92:e9:13:e9:00:40:99:9c:5b:
df:36:b3:32:ac:28:86:d0:28:de:34:75:3d:8b:95:
00:20:6d:68:82:13:35:a9:9d:4d:46:d1:52:63:84:
4e:3a:14:9d:16:ac:63:72:ff:5c:3b:43:a5:6d:15:
c3:78:9b:20:59:a8:e3:18:57:47:8a:2d:79:97:28:
83:f0:a8:bf:8b:b7:ed:9e:f4:5e:e1:db:99:df:fa:
57:cd:6e:32:6e:b9:60:72:ec:c1:b9:7d:93:31:c6:
d7:9f:a6:97:11:4e:88:be:1c:34:6e:74:52:52:e5:
75:a4:a5:29:3e:cc:d0:09:80:dd:12:55:6f:39:f5:
64:77:fc:2a:21:24:c2:00:e9:2a:a3:bf:a3:9f:f1:
a1:38:c1:74:40:42:1e:ef:37:22:20:d4:bd:a1:64:
4e:74:de:8a:88:aa:59:06:0f:0a:46:e0:dd:5f:e2:
d2:8e:0e:30:78:30:79:9f:b4:fe:e3:4c:c9:f5:40:
8d:06:57:e0:ff:be:94:d8:97:ba:55:ac:80:60:c8:
8d:14:8f:9b:e1:ae:8f:a5:4e:80:ad:71:91:10:09:
d7:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:78:3C:C6:8E:D2:3D:F9:DE:3C:AF:8E:E3:15:D4:BD:CC:C4:CE:0B
X509v3 Authority Key Identifier:
keyid:BF:28:05:99:2E:65:31:D3:DA:31:EE:1A:F6:BC:D5:C0:6D:02:B6:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vygFmS5lMdPaMe4a9rzVwG0Ctso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/M3g8xo7SPfnePK-O4xXUvczEzgs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/vygFmS5lMdPaMe4a9rzVwG0Ctso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.101.32.0-62.101.51.255
62.101.56.0/21
83.172.64.0/18
95.140.176.0/20
185.94.72.0/22
212.112.32.0/19
IPv6:
2001:be8::/32
Signature Algorithm: sha256WithRSAEncryption
58:ea:f7:56:1f:cb:3f:4d:03:ae:e0:f1:2b:d8:56:43:6a:37:
ad:51:77:25:d5:8d:6d:48:a1:ca:72:db:95:78:54:59:d6:60:
fe:de:f0:98:d7:91:70:89:b7:e9:8a:44:85:5e:1b:57:4d:bf:
f6:66:cb:e5:1a:e0:08:4d:db:25:e7:72:c7:3f:80:3f:7d:cb:
42:13:57:f4:14:f0:4f:c8:96:3b:ce:97:63:99:8c:ad:e9:1c:
3d:45:92:68:f7:3a:26:4b:0c:93:f7:a2:f8:4a:8a:a5:24:e0:
06:ff:94:cc:29:70:48:02:36:47:bd:e5:3e:14:24:84:d4:eb:
f6:7a:45:1b:be:d8:f6:0e:0b:ed:ee:93:81:31:ac:84:c5:73:
0b:54:c3:7f:6c:8b:d6:48:5e:88:9c:8d:86:cd:73:03:ed:f8:
b7:52:ef:9c:12:8a:59:6f:62:f0:0c:04:0f:a8:14:e1:50:4a:
85:b1:7e:46:a9:67:15:9e:cb:5a:86:b9:70:2b:d1:6a:b9:2c:
00:d0:12:d1:a8:9a:26:a5:08:0d:4a:8d:29:c0:e7:44:b3:91:
21:71:ca:c6:77:08:ac:ed:22:4e:a3:2d:25:da:ec:93:8c:13:
59:bf:bf:a5:e7:95:02:ab:e0:2d:a4:60:fc:9f:61:7a:fb:3e:
3b:88:96:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:51:48 2024 by rpki-client on console-fra.rpki-client.org