Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/pytrsninCrNeVplORdqx4uIBL1k.roa
File: pytrsninCrNeVplORdqx4uIBL1k.roa (raw, json)
Hash identifier: VWIWArUS2SOAFFIQDTPcjPkfFGMK2lUXf2Jes62KpK8=
Subject key identifier: A7:2B:6B:B2:78:A7:0A:B3:5E:56:99:4E:45:DA:B1:E2:E2:01:2F:59
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 018CCA2A387F0E37BDE39959ADFB3160C2E7
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/pytrsninCrNeVplORdqx4uIBL1k.roa
Signing time: Tue 02 Jan 2024 12:33:33 +0000
ROA not before: Tue 02 Jan 2024 12:33:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211440
IP address blocks: 185.65.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 13:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:38:7f:0e:37:bd:e3:99:59:ad:fb:31:60:c2:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Jan 2 12:33:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a72b6bb278a70ab35e56994e45dab1e2e2012f59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:99:6a:63:5f:98:ba:72:24:62:18:66:74:7b:
9c:05:ef:8a:51:7c:af:0e:2b:50:73:c6:f9:6a:f4:
6c:e0:bc:44:75:29:e7:f8:7d:31:bb:9f:68:de:0d:
b3:0e:61:be:94:bb:0f:04:a7:19:0e:9e:74:10:b4:
bf:e9:93:75:55:b0:5e:62:0d:ab:eb:3d:06:3d:37:
58:d4:9f:d8:44:86:67:04:78:49:4f:6c:7d:c4:70:
10:7c:a0:c2:71:89:fc:d0:19:78:d9:35:5a:d0:7b:
ac:2e:88:75:28:63:b9:81:36:f2:72:82:b8:48:6a:
4b:13:d2:6e:ea:69:6c:57:44:4f:fb:23:14:cb:c9:
5f:17:33:83:00:7c:bf:5b:d2:a0:9d:45:f5:16:a7:
a3:12:70:3c:05:ef:eb:8a:25:02:d0:e6:15:8f:64:
43:48:27:30:57:ce:74:84:c9:03:b2:99:67:c5:0c:
9d:32:28:07:77:16:9c:84:9f:e2:89:7d:a5:59:6f:
6e:10:a7:cb:a1:c6:5b:49:c7:a7:47:47:d7:93:0d:
b3:ba:98:9f:d8:2a:57:c5:86:06:c0:9a:c6:71:98:
32:c5:3e:10:26:4c:4c:02:80:7a:21:c1:a9:3d:ba:
df:66:39:db:19:e9:89:06:f4:ea:74:cd:c3:ca:c2:
a9:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:2B:6B:B2:78:A7:0A:B3:5E:56:99:4E:45:DA:B1:E2:E2:01:2F:59
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/pytrsninCrNeVplORdqx4uIBL1k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.65.63.0/24
Signature Algorithm: sha256WithRSAEncryption
98:73:1e:08:0a:36:93:1a:fa:7e:e4:3d:c3:99:a8:76:59:d5:
97:5a:25:b6:ed:b8:5b:48:22:04:e6:f2:4e:3d:49:27:d5:81:
b1:fc:83:17:0d:2b:e3:1d:3b:56:f7:b7:59:55:f9:95:13:01:
e4:45:63:75:69:1b:b6:68:ee:c8:d2:e7:50:04:70:d9:14:71:
52:70:56:53:86:85:90:08:aa:c6:82:43:8d:01:41:dd:c5:4d:
d3:06:bf:b1:45:73:bc:31:d9:fa:aa:4c:bf:c0:67:96:8f:99:
4a:ab:72:b4:ce:0d:03:d6:0d:ae:66:af:20:7e:89:ff:26:f3:
24:78:e7:66:8c:56:40:d1:80:33:7f:f5:54:46:3e:31:4c:9e:
5e:74:13:61:8a:f4:29:8c:84:0c:eb:4a:46:61:ac:f1:5a:ad:
6d:31:73:49:55:b3:83:6d:84:60:e2:67:75:09:65:0b:52:42:
69:ea:b6:d7:86:d2:32:14:67:99:e1:26:bb:86:6e:e8:8b:c8:
e1:3a:83:62:51:3b:ee:f1:1d:6b:ad:24:19:c3:99:b2:3c:6a:
38:da:36:db:1f:26:01:25:67:2d:ce:6d:cb:af:01:4d:4b:60:
a8:47:30:0e:99:db:b7:3e:34:55:c9:92:0c:41:63:ab:94:52:
0c:4d:b9:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 15:59:49 2024 by rpki-client on console-fra.rpki-client.org