Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/v3HMxH_qlZp3qEc-RsOmuZlb2uY.roa
File: v3HMxH_qlZp3qEc-RsOmuZlb2uY.roa (raw, json)
Hash identifier: 8VhASUz8PoocV+8KuAD75n8HIulUN1LJ4N4yRF/BgA4=
Subject key identifier: BF:71:CC:C4:7F:EA:95:9A:77:A8:47:3E:46:C3:A6:B9:99:5B:DA:E6
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 018DCC6505E5754427D59F0688C33E6AF14B
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/v3HMxH_qlZp3qEc-RsOmuZlb2uY.roa
Signing time: Wed 21 Feb 2024 15:59:49 +0000
ROA not before: Wed 21 Feb 2024 15:59:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62300
IP address blocks: 37.221.81.0/24 maxlen: 24
62.192.136.0/22 maxlen: 22
194.32.241.0/24 maxlen: 24
194.61.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 12:22:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:cc:65:05:e5:75:44:27:d5:9f:06:88:c3:3e:6a:f1:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Feb 21 15:59:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bf71ccc47fea959a77a8473e46c3a6b9995bdae6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:59:ae:a0:a0:1e:f9:1f:c5:2b:39:41:0d:86:
55:49:e0:1b:ca:b1:34:7d:97:22:bb:9d:18:b9:dc:
31:fe:46:e4:f1:de:70:04:fe:f8:61:ff:3f:87:34:
4e:df:58:0e:6b:15:5f:cb:a0:62:32:ca:79:97:64:
33:fb:2d:78:7a:bb:fd:3f:0d:fe:cb:fa:cd:75:8a:
72:12:38:7d:88:5f:4c:42:5a:23:2c:22:91:35:e1:
aa:58:00:de:2d:96:e8:61:95:9f:df:a7:5f:1e:2e:
ce:95:61:65:43:ae:f8:ea:cf:1a:2b:ef:8e:44:0e:
4e:f6:81:4e:bc:53:dd:a6:eb:0a:1d:05:99:f2:db:
0a:90:1d:a6:18:6b:19:f1:aa:19:cc:6d:0c:d7:b3:
88:a3:44:6f:90:cd:36:40:86:09:b2:97:63:5e:ef:
ae:6b:ad:fe:b9:7c:0e:97:e8:12:0b:a4:f7:50:69:
0e:6d:77:d5:26:b9:4d:1b:33:8f:91:3e:fb:2e:d8:
51:c8:dc:66:03:00:d5:ea:c6:d3:e8:3c:3a:41:81:
3b:bf:29:86:64:78:11:1c:3d:6e:05:c0:d5:4c:92:
be:44:c7:0f:8a:4b:00:62:43:3c:57:87:39:21:9a:
d8:af:80:51:70:94:19:09:76:7a:a3:b8:65:0b:25:
88:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:71:CC:C4:7F:EA:95:9A:77:A8:47:3E:46:C3:A6:B9:99:5B:DA:E6
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/v3HMxH_qlZp3qEc-RsOmuZlb2uY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.221.81.0/24
62.192.136.0/22
194.32.241.0/24
194.61.8.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:ed:eb:49:6c:b0:da:53:d7:4f:b3:7a:9c:61:c6:f8:2f:c6:
08:42:a3:9e:4a:3a:6a:50:3e:25:5a:dc:4e:9a:fd:f5:03:91:
ea:1e:fe:e8:ed:d0:21:ed:b0:55:6b:b9:bb:5b:87:07:5e:45:
48:48:a7:c9:7a:d7:30:f9:a0:4d:14:d2:b4:5c:3f:3c:f9:02:
52:b8:d8:ff:0e:ef:e6:fe:51:85:17:54:97:7a:70:d6:b8:5c:
94:9c:65:cd:88:e9:36:26:1a:8c:01:b3:ca:fd:06:67:4c:f6:
64:fe:68:f3:6b:f9:27:67:10:3e:75:3a:35:df:5a:e7:10:41:
bc:94:7a:d8:eb:0d:cb:30:5c:a5:f8:0d:5f:af:40:0e:c4:68:
0c:d1:23:0f:ec:76:21:97:67:57:df:d1:44:7b:6a:34:76:3d:
fc:f9:f8:66:e7:14:b7:69:4e:4a:34:2e:77:13:68:90:cb:5e:
3f:82:96:c3:8a:ff:57:58:a4:6a:a9:2c:23:cf:c4:d7:f1:63:
dd:eb:9d:9f:e4:e6:37:6c:5d:20:06:55:ee:57:7b:28:56:2e:
e3:eb:4b:8e:b2:d5:c8:98:88:81:b0:ee:9d:0a:23:ff:4f:8e:
f6:95:3f:d2:03:d9:b0:89:03:4e:03:40:79:c0:f3:f7:b2:9e:
50:28:d8:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 17:59:24 2024 by rpki-client on console-fra.rpki-client.org