Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/fc52a0-e0f7-480b-ba7d-1042ea8e3bfb/1/MxGiDqLDYYLVbPyV_QQ3BNPk_Yo.roa
File: MxGiDqLDYYLVbPyV_QQ3BNPk_Yo.roa (raw, json)
Hash identifier: pKm/aGFiFpQML/7g2ge4wdieo3ueAcUvMp3nwIA2sss=
Subject key identifier: 33:11:A2:0E:A2:C3:61:82:D5:6C:FC:95:FD:04:37:04:D3:E4:FD:8A
Certificate issuer: /CN=a3c963d1a11d00d384adedf9bb86e53849a9b18c
Certificate serial: 018CC56DEE726971B8ADDC29592161441599
Authority key identifier: A3:C9:63:D1:A1:1D:00:D3:84:AD:ED:F9:BB:86:E5:38:49:A9:B1:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o8lj0aEdANOEre35u4blOEmpsYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/fc52a0-e0f7-480b-ba7d-1042ea8e3bfb/1/MxGiDqLDYYLVbPyV_QQ3BNPk_Yo.roa
Signing time: Mon 01 Jan 2024 14:29:25 +0000
ROA not before: Mon 01 Jan 2024 14:29:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39232
IP address blocks: 217.25.16.0/21 maxlen: 21
217.25.16.0/20 maxlen: 20
217.25.24.0/21 maxlen: 21
185.80.172.0/23 maxlen: 23
185.80.172.0/22 maxlen: 22
185.80.174.0/23 maxlen: 23
109.239.16.0/20 maxlen: 20
109.239.16.0/21 maxlen: 21
37.26.0.0/19 maxlen: 19
37.26.0.0/18 maxlen: 18
109.239.24.0/21 maxlen: 21
37.26.32.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/fc52a0-e0f7-480b-ba7d-1042ea8e3bfb/1/o8lj0aEdANOEre35u4blOEmpsYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/fc52a0-e0f7-480b-ba7d-1042ea8e3bfb/1/o8lj0aEdANOEre35u4blOEmpsYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/o8lj0aEdANOEre35u4blOEmpsYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Jun 2024 05:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6d:ee:72:69:71:b8:ad:dc:29:59:21:61:44:15:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3c963d1a11d00d384adedf9bb86e53849a9b18c
Validity
Not Before: Jan 1 14:29:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3311a20ea2c36182d56cfc95fd043704d3e4fd8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:8b:75:c1:e8:64:fd:ab:11:3c:e6:aa:0e:cf:
aa:40:d2:65:73:64:8f:24:21:5c:58:54:2a:09:43:
05:c1:e7:2d:3b:04:1a:cf:e8:f9:44:38:3f:c0:62:
d3:06:b8:38:98:f3:3d:c8:a3:b2:79:63:14:09:76:
ef:37:be:a9:02:34:5b:dd:48:dd:23:e9:2d:38:fa:
64:74:e4:33:db:d9:3d:51:89:31:0d:26:ca:b6:b8:
43:36:2e:b5:aa:2f:b8:0f:33:71:51:82:04:c0:e8:
ae:8b:7f:e3:ad:52:ad:cc:81:8f:63:f9:0e:f2:f6:
a2:ac:ba:c7:26:84:ef:16:68:07:51:4e:b7:68:5c:
d3:b3:55:2a:02:e5:fb:58:f6:a3:55:9a:b9:ad:d5:
99:b8:da:5b:60:97:c8:d8:ec:0f:ee:65:5c:c0:ea:
5a:6f:3f:5a:47:da:1f:17:d4:5c:5c:68:0d:d9:a8:
81:d5:c9:d2:ed:25:20:9d:6b:ab:af:52:b6:da:e4:
d6:60:97:65:b3:ef:b7:2a:92:8b:4c:6b:c4:18:68:
fa:fb:3a:be:c3:4a:08:0f:f4:a8:b5:80:e6:db:6c:
19:80:83:3b:f0:f1:71:5a:31:ae:77:1a:94:b9:14:
6c:5a:7e:62:6c:f9:cc:46:42:f1:2e:09:14:3e:bf:
16:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:11:A2:0E:A2:C3:61:82:D5:6C:FC:95:FD:04:37:04:D3:E4:FD:8A
X509v3 Authority Key Identifier:
keyid:A3:C9:63:D1:A1:1D:00:D3:84:AD:ED:F9:BB:86:E5:38:49:A9:B1:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8lj0aEdANOEre35u4blOEmpsYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/fc52a0-e0f7-480b-ba7d-1042ea8e3bfb/1/MxGiDqLDYYLVbPyV_QQ3BNPk_Yo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/fc52a0-e0f7-480b-ba7d-1042ea8e3bfb/1/o8lj0aEdANOEre35u4blOEmpsYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.26.0.0/18
109.239.16.0/20
185.80.172.0/22
217.25.16.0/20
Signature Algorithm: sha256WithRSAEncryption
16:0b:a3:ce:9c:3b:d0:b6:a7:d5:fd:52:67:48:e6:88:bb:18:
4f:60:0c:92:44:4f:5a:0e:1d:c0:4a:b9:0c:97:7a:37:d5:7f:
ff:59:24:fe:ef:0b:0b:a4:e0:d2:42:3f:1e:49:c4:db:78:87:
cc:73:2c:ef:80:88:be:48:0d:a3:6f:17:38:5d:f8:10:36:99:
51:d1:54:45:86:4d:34:21:e1:44:98:f7:06:f4:e8:f8:a1:2d:
b6:65:9c:2c:c6:f6:07:d3:79:e5:20:7d:a7:cf:25:68:2c:25:
14:8c:a5:77:53:12:09:eb:c5:d9:19:ad:ac:c0:d1:13:e8:85:
92:0b:f2:8c:f5:8d:69:73:39:58:12:2c:fe:5f:58:7f:29:74:
30:10:11:8a:d9:d7:f8:6c:65:65:01:ae:ee:6d:82:73:c2:50:
4e:4a:4b:dd:4d:1c:a5:cd:58:7f:ac:84:04:00:f6:1f:06:7a:
ac:40:35:f9:08:c9:d3:3e:93:15:46:7d:e4:b2:fc:f5:15:83:
e6:89:ac:88:3a:f3:f6:2c:9b:5c:e6:8a:3f:09:a7:ea:b6:43:
be:12:fa:69:50:b4:ac:9f:51:62:5a:fc:2b:ae:03:45:e5:2d:
35:7d:36:2d:12:1b:b6:c0:ab:ea:e6:04:ab:c9:97:64:2d:ef:
e4:c9:55:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 09:24:57 2024 by rpki-client on console-fra.rpki-client.org