Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/e48256-c6fc-4631-8f5f-58bcda356e62/1/rCvK7iTCGaYj05vhpnPaohE3rZE.roa
File: rCvK7iTCGaYj05vhpnPaohE3rZE.roa (raw, json)
Hash identifier: lR2zpTZEzZc10xVaBD4cx0Q46s239G8OV5v2976Zpqs=
Subject key identifier: AC:2B:CA:EE:24:C2:19:A6:23:D3:9B:E1:A6:73:DA:A2:11:37:AD:91
Certificate issuer: /CN=99bf7d5c70c63254d0cde34c2ba49d9407fc24f3
Certificate serial: 018CC4933BC1FF2A214AA34EC80B6BDB1125
Authority key identifier: 99:BF:7D:5C:70:C6:32:54:D0:CD:E3:4C:2B:A4:9D:94:07:FC:24:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mb99XHDGMlTQzeNMK6SdlAf8JPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/e48256-c6fc-4631-8f5f-58bcda356e62/1/rCvK7iTCGaYj05vhpnPaohE3rZE.roa
Signing time: Mon 01 Jan 2024 10:30:32 +0000
ROA not before: Mon 01 Jan 2024 10:30:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49729
IP address blocks: 185.137.77.0/24 maxlen: 24
185.137.76.0/22 maxlen: 22
185.137.76.0/23 maxlen: 23
185.137.78.0/24 maxlen: 24
185.137.78.0/23 maxlen: 23
185.137.76.0/24 maxlen: 24
185.137.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/e48256-c6fc-4631-8f5f-58bcda356e62/1/mb99XHDGMlTQzeNMK6SdlAf8JPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/e48256-c6fc-4631-8f5f-58bcda356e62/1/mb99XHDGMlTQzeNMK6SdlAf8JPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/mb99XHDGMlTQzeNMK6SdlAf8JPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Jun 2024 16:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:3b:c1:ff:2a:21:4a:a3:4e:c8:0b:6b:db:11:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99bf7d5c70c63254d0cde34c2ba49d9407fc24f3
Validity
Not Before: Jan 1 10:30:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ac2bcaee24c219a623d39be1a673daa21137ad91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ec:40:40:43:67:fa:6c:4e:e0:d9:b8:25:06:
33:18:c0:c2:2e:e0:00:5d:50:01:01:1a:fb:96:0b:
49:ac:9e:c0:e1:de:9a:9c:27:a4:4d:73:24:47:2e:
aa:4f:53:89:aa:8b:1a:ea:94:6f:3e:d8:44:28:fd:
d9:0a:6e:81:09:ca:58:12:b9:37:13:e1:86:16:45:
13:5b:46:00:1e:71:be:ce:73:bc:d5:2a:ed:37:ad:
a6:95:d5:70:d6:5f:aa:68:3b:7b:20:62:2d:ba:87:
e8:56:70:e8:96:7e:0e:07:49:6f:b5:0b:5b:96:5a:
33:6d:75:29:77:69:24:3c:1d:15:a5:07:38:77:1c:
4f:3b:0f:c4:a8:e1:7f:3e:73:b1:c5:cd:41:6f:f9:
4a:33:88:2e:d1:c1:76:3f:90:77:9b:f8:3e:52:64:
43:ce:44:95:03:2e:ec:53:2a:84:f1:01:2f:8d:47:
fa:d8:07:2b:6e:6c:a3:2d:49:28:b4:40:ff:6a:29:
1c:6f:39:97:05:dd:4f:e8:01:97:d1:4e:48:9a:2f:
18:d1:3d:09:ce:0c:24:37:9c:07:ad:88:d8:73:c3:
4e:6a:cf:de:44:a7:79:a4:cd:e3:ff:4e:75:19:7b:
7c:70:9d:d3:23:52:c2:c6:02:9f:62:5f:e2:39:2c:
7a:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:2B:CA:EE:24:C2:19:A6:23:D3:9B:E1:A6:73:DA:A2:11:37:AD:91
X509v3 Authority Key Identifier:
keyid:99:BF:7D:5C:70:C6:32:54:D0:CD:E3:4C:2B:A4:9D:94:07:FC:24:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mb99XHDGMlTQzeNMK6SdlAf8JPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e48256-c6fc-4631-8f5f-58bcda356e62/1/rCvK7iTCGaYj05vhpnPaohE3rZE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e48256-c6fc-4631-8f5f-58bcda356e62/1/mb99XHDGMlTQzeNMK6SdlAf8JPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.137.76.0/22
Signature Algorithm: sha256WithRSAEncryption
42:40:49:a6:21:fb:41:36:19:58:ab:17:d6:43:b6:e7:13:af:
94:dd:77:13:7e:0f:8a:e6:4a:d8:ad:4c:6d:ed:ec:a4:c9:14:
54:08:5c:72:87:29:ee:84:65:c3:59:9d:83:34:8a:3a:54:1b:
31:ef:47:90:21:23:d6:c0:2d:2e:2f:62:03:d2:89:a9:85:41:
04:3c:e6:4f:51:c9:77:85:e1:aa:35:1e:f2:ec:aa:4a:90:1d:
37:e6:bc:b3:1a:c3:ad:22:17:2f:c6:50:7d:2d:36:df:65:4c:
73:d3:61:61:1f:94:26:6a:34:46:a4:29:b9:30:8f:b2:6f:93:
2d:39:c5:8e:9b:a7:6d:3c:94:79:70:94:04:fa:a7:bc:a7:e1:
c9:c7:81:c5:aa:ea:b2:6e:97:c9:83:14:9e:78:2c:3a:f3:f2:
d9:ca:cd:2e:21:ea:b4:85:37:e8:af:b2:fe:b3:0c:e4:bd:dd:
7e:e7:55:a2:89:80:b2:5c:63:12:32:c2:9a:57:22:4d:c0:31:
4c:1d:fc:2f:4b:de:ff:7d:46:68:d5:8b:23:b4:62:ea:d8:6c:
b7:c1:f3:98:df:d2:86:ef:00:43:15:ac:56:d6:b6:25:07:47:
36:f8:ca:9c:d1:cd:43:08:45:52:4c:ce:f0:13:19:40:42:e0:
f1:22:3e:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 21:49:05 2024 by rpki-client on console-fra.rpki-client.org