Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/b4MhVWBfvzx6vp_W0g_lkQ05cG4.roa
File: b4MhVWBfvzx6vp_W0g_lkQ05cG4.roa (raw, json)
Hash identifier: 35avdjkibjQY+WCgA/cQ60p5J8E8kKzJ/2TsesXBAPk=
Subject key identifier: 6F:83:21:55:60:5F:BF:3C:7A:BE:9F:D6:D2:0F:E5:91:0D:39:70:6E
Certificate issuer: /CN=9bbc4239c9cb981f19a495e633d3bec889fcbe89
Certificate serial: 018FCD874E02387C4DB1BC04C3D62A26D3FE
Authority key identifier: 9B:BC:42:39:C9:CB:98:1F:19:A4:95:E6:33:D3:BE:C8:89:FC:BE:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m7xCOcnLmB8ZpJXmM9O-yIn8vok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/b4MhVWBfvzx6vp_W0g_lkQ05cG4.roa
Signing time: Fri 31 May 2024 07:22:27 +0000
ROA not before: Fri 31 May 2024 07:22:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43940
IP address blocks: 62.4.32.0/19 maxlen: 24
109.72.96.0/20 maxlen: 21
185.64.0.0/22 maxlen: 24
185.179.92.0/22 maxlen: 22
213.133.0.0/19 maxlen: 24
213.196.64.0/19 maxlen: 19
2a03:7a0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.mft
rsync://rpki.ripe.net/repository/DEFAULT/m7xCOcnLmB8ZpJXmM9O-yIn8vok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:cd:87:4e:02:38:7c:4d:b1:bc:04:c3:d6:2a:26:d3:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bbc4239c9cb981f19a495e633d3bec889fcbe89
Validity
Not Before: May 31 07:22:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6f832155605fbf3c7abe9fd6d20fe5910d39706e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c0:8c:43:2d:b5:08:d5:2e:17:ef:d4:e5:3c:
b5:11:67:20:66:04:49:f0:c3:c9:6b:5d:f1:0f:f5:
e4:33:5d:0a:dd:53:ac:35:d4:9e:2e:ed:21:56:75:
de:2e:d5:79:90:2f:46:da:15:99:36:3f:7b:f4:ac:
9a:88:c1:99:7f:2f:cc:9b:cc:bf:f3:28:d5:e6:03:
7b:46:dd:8b:87:ac:23:0e:88:7b:46:9b:2d:b0:44:
40:f9:63:22:49:a4:13:b9:72:19:0d:b7:fe:a3:76:
45:08:cb:78:b8:f3:58:4b:da:ad:36:e0:3a:af:73:
ef:81:98:f7:96:d7:09:e8:d3:45:34:06:b2:37:b3:
dd:81:11:70:3a:5c:b2:5b:8c:18:fa:83:84:0a:4c:
19:70:2f:d9:f8:75:9a:b9:f5:22:ec:b4:f6:b8:bf:
f7:ab:67:f3:b8:23:89:41:93:53:b2:7f:37:1d:61:
19:65:1a:c2:62:89:b5:5f:d1:3c:e0:7d:f1:c3:a2:
89:87:08:0d:a4:68:44:32:30:e0:56:ea:20:74:8f:
ce:29:a9:0b:a2:23:ac:7b:71:49:77:06:40:33:3c:
ae:40:40:41:1f:9b:b0:da:27:e7:70:fc:4d:a2:a0:
0e:fa:27:40:4b:31:4d:0d:8e:e3:a8:3d:75:87:26:
c3:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:83:21:55:60:5F:BF:3C:7A:BE:9F:D6:D2:0F:E5:91:0D:39:70:6E
X509v3 Authority Key Identifier:
keyid:9B:BC:42:39:C9:CB:98:1F:19:A4:95:E6:33:D3:BE:C8:89:FC:BE:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7xCOcnLmB8ZpJXmM9O-yIn8vok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/b4MhVWBfvzx6vp_W0g_lkQ05cG4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.4.32.0/19
109.72.96.0/20
185.64.0.0/22
185.179.92.0/22
213.133.0.0/19
213.196.64.0/19
IPv6:
2a03:7a0::/29
Signature Algorithm: sha256WithRSAEncryption
6e:5a:0f:8e:98:cd:3d:69:b1:e8:f5:61:4a:fa:f2:70:0e:f0:
59:3d:9c:30:c2:b9:fe:d0:7c:2a:75:7e:d4:a1:28:52:05:cc:
05:8e:0b:56:5e:7d:f5:d8:0f:28:9a:21:a0:2e:05:2a:86:01:
71:66:2c:fd:55:c4:44:22:70:1f:59:43:0d:6e:ce:d1:9c:e6:
e9:70:5f:8a:3e:1a:f7:ac:f2:dd:17:85:a4:1d:b5:ab:1e:90:
11:2e:8b:5b:5b:1f:ad:5a:0d:b2:ae:a3:6d:b0:dd:f8:cb:6d:
54:b7:0b:6b:d7:b5:b6:4e:82:3c:18:d0:eb:17:14:9f:4c:c7:
9c:c7:f1:c0:d4:ad:f8:20:41:e8:3c:82:ba:d3:bf:0f:78:99:
12:76:15:bf:cf:5c:1d:b5:29:33:34:7c:88:3d:c3:a1:d6:87:
f0:a6:3c:df:e7:b0:ce:b0:73:a9:5b:d4:4b:d1:d8:10:6e:d8:
f0:00:df:6f:e1:eb:c0:d9:6f:a8:cc:09:fd:85:7f:a0:31:7e:
1b:53:dd:8a:85:bc:6c:a9:a2:50:64:db:b5:60:78:4c:50:9f:
2a:07:d7:9f:bb:0e:35:8a:d1:35:b8:35:3b:d6:00:f8:44:67:
b9:da:8c:b9:96:c1:8c:c8:de:6d:01:66:47:94:13:e5:d7:f9:
0c:bc:f6:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:51:26 2024 by rpki-client on console-fra.rpki-client.org