Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/807954-aa7e-48e9-87fa-5ebf2a54eb6d/1/v-drQGJ-UzsJeg89CMZ9ivRZc1A.roa
File: v-drQGJ-UzsJeg89CMZ9ivRZc1A.roa (raw, json)
Hash identifier: r/pmXt+NZSBmvcj5hXfd+/LzBq7Ccn/Ayqp/NKxoEuw=
Subject key identifier: BF:E7:6B:40:62:7E:53:3B:09:7A:0F:3D:08:C6:7D:8A:F4:59:73:50
Certificate issuer: /CN=c27964aabf404dda3f5e0ecc1c706ab327c6f931
Certificate serial: 018CC3B72603734ABBAE5C72D907E7200EE9
Authority key identifier: C2:79:64:AA:BF:40:4D:DA:3F:5E:0E:CC:1C:70:6A:B3:27:C6:F9:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wnlkqr9ATdo_Xg7MHHBqsyfG-TE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/807954-aa7e-48e9-87fa-5ebf2a54eb6d/1/v-drQGJ-UzsJeg89CMZ9ivRZc1A.roa
Signing time: Mon 01 Jan 2024 06:30:09 +0000
ROA not before: Mon 01 Jan 2024 06:30:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201494
IP address blocks: 185.73.40.0/22 maxlen: 24
2a05:3f80:43::/48 maxlen: 48
2a05:3f80:41::/48 maxlen: 48
2a05:3f80::/29 maxlen: 29
2a05:3f80:42::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/807954-aa7e-48e9-87fa-5ebf2a54eb6d/1/wnlkqr9ATdo_Xg7MHHBqsyfG-TE.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/807954-aa7e-48e9-87fa-5ebf2a54eb6d/1/wnlkqr9ATdo_Xg7MHHBqsyfG-TE.mft
rsync://rpki.ripe.net/repository/DEFAULT/wnlkqr9ATdo_Xg7MHHBqsyfG-TE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 12:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:26:03:73:4a:bb:ae:5c:72:d9:07:e7:20:0e:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c27964aabf404dda3f5e0ecc1c706ab327c6f931
Validity
Not Before: Jan 1 06:30:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bfe76b40627e533b097a0f3d08c67d8af4597350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:62:c1:6e:56:fa:69:7b:1a:80:8a:3f:33:77:
11:0a:34:ca:d5:d6:7a:1c:50:01:e8:51:8c:f5:74:
73:78:78:15:85:c5:b2:f9:4d:93:94:dc:75:34:06:
15:fe:17:17:d9:ac:00:75:0c:8f:25:51:2b:de:fe:
0e:d7:46:7c:29:a1:98:fc:e1:10:2d:58:60:b5:cc:
af:6d:05:69:e9:f4:f9:ac:0d:9b:97:5f:8c:a6:f5:
a7:b8:a9:07:61:08:14:cb:ff:6a:9b:a4:43:9f:e3:
24:02:46:dd:37:5a:77:89:de:7a:02:d0:fb:4b:9d:
41:ca:4d:31:25:ca:95:14:37:ab:8e:da:18:33:a3:
3b:5e:6a:7c:9b:e3:e6:d3:cc:02:ee:d8:8c:1c:57:
6b:79:a1:f1:e4:d9:48:0b:b2:7f:8d:d6:3b:f3:41:
b7:16:f3:2b:30:6d:1d:d0:f9:f1:f5:4b:fc:1a:40:
11:11:f5:4e:eb:98:67:a6:28:14:4f:72:2a:c5:ca:
97:be:b8:39:10:f9:af:25:b9:9b:88:a8:b4:39:b3:
23:c3:00:89:a4:0f:6c:bc:9b:1b:c4:b0:fe:9e:0f:
90:0c:d7:d8:5d:b7:af:12:61:69:5a:59:82:2e:58:
b5:69:73:93:96:ad:5c:4c:c5:cb:d7:de:7a:1d:00:
61:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:E7:6B:40:62:7E:53:3B:09:7A:0F:3D:08:C6:7D:8A:F4:59:73:50
X509v3 Authority Key Identifier:
keyid:C2:79:64:AA:BF:40:4D:DA:3F:5E:0E:CC:1C:70:6A:B3:27:C6:F9:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wnlkqr9ATdo_Xg7MHHBqsyfG-TE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/807954-aa7e-48e9-87fa-5ebf2a54eb6d/1/v-drQGJ-UzsJeg89CMZ9ivRZc1A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/807954-aa7e-48e9-87fa-5ebf2a54eb6d/1/wnlkqr9ATdo_Xg7MHHBqsyfG-TE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.73.40.0/22
IPv6:
2a05:3f80::/29
Signature Algorithm: sha256WithRSAEncryption
5d:cd:db:66:a4:fb:4a:c7:e1:e4:53:0e:6f:57:f0:4f:d1:59:
75:e5:bb:12:1e:9b:3b:59:8a:26:22:28:30:b6:05:db:75:3b:
c1:4d:7c:3a:da:82:47:f3:17:09:71:0a:4a:95:ce:b9:3e:53:
26:9d:99:b5:4a:a5:ad:90:09:ea:3e:de:6d:16:8b:4f:92:7f:
fa:67:c3:c6:71:07:2a:87:27:68:b2:b5:c5:79:4b:38:02:5c:
96:c3:54:b6:93:42:92:4e:39:0e:0f:52:8c:d8:18:4e:43:49:
ad:a4:0d:c0:6c:5f:dc:3a:00:c4:e4:07:2e:27:71:78:58:1e:
f6:9e:92:bd:eb:ba:b3:e6:0d:86:78:a5:8f:64:0a:3c:c2:e4:
6f:07:3f:48:8f:14:50:f4:59:fd:35:26:34:a1:19:cd:f3:16:
1c:19:ca:e5:23:bd:1b:81:8b:e0:e7:03:8a:5c:e7:1a:0f:bf:
95:7a:25:fe:cb:4f:f0:12:5e:80:58:4d:01:70:5e:4d:86:f5:
7e:45:16:10:cf:f6:6a:a1:6e:e8:1b:91:1b:ca:11:80:35:8e:
5f:2d:2a:0f:29:83:97:1d:6f:62:47:27:02:17:e1:88:c2:cf:
30:73:42:e0:88:53:2f:69:dc:d0:e5:72:73:01:0d:be:65:1d:
43:6b:58:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 15:51:09 2024 by rpki-client on console-fra.rpki-client.org